8522b1d4c3b264264c5c7f3e73cbc2cfae00b7112d88fdafb09b61d47b3e34e2N

Sharing

Copy URL Twitter E-mail

General

Target

8522b1d4c3b264264c5c7f3e73cbc2cfae00b7112d88fdafb09b61d47b3e34e2N
Size

1.6MB
MD5

45a1b75ee31f8d85aa450ea2b06a4ee0
SHA1

c86c3d3194ade9d2bcf672ab44e54bb72e33683c
SHA256

8522b1d4c3b264264c5c7f3e73cbc2cfae00b7112d88fdafb09b61d47b3e34e2
SHA512

8bd705b0b5ac543dbf72c7a61a80669024d58aaf3e2273101180525506ee2f95f318da11ec1dee328f5550ec756303137b96d9c9909e690a368376051dd82f76
SSDEEP

49152:KoQ6RphOsp8zsI9FHVxxTsb5lGo/JB4C:s6RDOspgs4FHsGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8522b1d4c3b264264c5c7f3e73cbc2cfae00b7112d88fdafb09b61d47b3e34e2N

Files

8522b1d4c3b264264c5c7f3e73cbc2cfae00b7112d88fdafb09b61d47b3e34e2N
.exe windows:4 windows x86 arch:x86

b5aec55e06e3d517f7f4558723e606f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
OutputDebugStringW
MultiByteToWideChar
TlsFree
TlsAlloc
TlsGetValue
TlsSetValue
FormatMessageW
LocalFree
WideCharToMultiByte
GetShortPathNameW
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcAddress
FreeLibrary
GetModuleHandleExW
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
HeapFree
GetLastError
SetLastError
GetCurrentThread
HeapAlloc
EnumSystemLocalesW
LoadLibraryExW
CompareStringW
GetDateFormatW
GetLocaleInfoW
GetTempPathW
GetTimeFormatW
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
IsValidLocale
LCMapStringW
GetFileType
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsValidCodePage
GetCommandLineA
GetCommandLineW
FindFirstFileExW
FindNextFileW
FindClose
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
ReadConsoleW
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
EncodePointer
RaiseException
GetFileSize
InitializeCriticalSection
WaitForSingleObject
CreateThread
TerminateThread
GetVersionExW
Sleep
LoadLibraryW
GetEnvironmentVariableW
DuplicateHandle
CreatePipe
CreateProcessW
SetFilePointer
SetEndOfFile
GetDriveTypeW
FindFirstFileW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetTickCount
GetLocaleInfoA
GlobalSize
DebugBreak
OutputDebugStringA
UnregisterWait
RegisterWaitForSingleObject
CreateEventW
SetEvent
ResetEvent
WaitForSingleObjectEx
InitOnceBeginInitialize
InitOnceComplete
RtlCaptureStackBackTrace
InitializeConditionVariable
WakeAllConditionVariable
WakeConditionVariable
SleepConditionVariableSRW
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
FormatMessageA
QueryPerformanceFrequency
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
GetLocaleInfoEx
CloseThreadpoolTimer
CloseThreadpoolWait
CreateEventExW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThreadpoolTimer
CreateThreadpoolWait
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetFileInformationByHandleEx
GetTickCount64
InitOnceExecuteOnce
InitializeCriticalSectionEx
SetFileInformationByHandle
SetThreadpoolTimer
SetThreadpoolWait
SleepConditionVariableCS
WaitForThreadpoolTimerCallbacks
CompareStringEx
LCMapStringEx
DecodePointer
ExitThread
FreeLibraryAndExitThread
ResumeThread
GetFileSizeEx
GetTimeZoneInformation

user32

GetWindowRect
GetSystemMetrics
SetWindowPos
GetPropW
SetPropW
RemovePropW
RedrawWindow
IsWindow
EnumPropsExW
SendMessageW
GetCursorPos
GetAsyncKeyState
IsIconic
ShowWindow
BringWindowToTop
GetWindowLongW
SetWindowLongW
GetParent
DestroyWindow
CreateWindowExW
LoadIconW
GetCapture
ReleaseCapture
CallWindowProcW
GetClientRect
IsZoomed
FillRect
GetIconInfo
DrawStateW
InvalidateRect
MoveWindow
MessageBoxW
DefWindowProcW
GetWindowTextLengthW
GetWindowTextW
SetFocus
UnregisterClassW
SystemParametersInfoW
LoadCursorW
RegisterClassExW
IsWindowEnabled
EnableWindow
CreateAcceleratorTableW
SetForegroundWindow
GetMessageW
TranslateAcceleratorW
IsDialogMessageW
TranslateMessage
DispatchMessageW
DestroyAcceleratorTable
PostMessageW
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
EnumWindows
GetActiveWindow
WinHelpW
SetClassLongW
GetSysColor
GetSysColorBrush
GetDC
SetRect
DrawTextW
ReleaseDC
SetWindowTextW
MapWindowPoints
ScreenToClient
ClientToScreen
GetClassNameW
IntersectRect
ValidateRect
GetWindow
GetUpdateRect
GetFocus
FrameRect
DrawFocusRect
UpdateWindow
SetParent
SetCursor
BeginPaint
DrawFrameControl
EndPaint
SetCapture
SetScrollPos
InflateRect
GetWindowDC
SetScrollInfo
GetScrollPos
GetScrollRange
SetActiveWindow
DestroyIcon
RegisterClassW
AdjustWindowRectEx
GetMenu
PeekMessageW
MsgWaitForMultipleObjects
DefFrameProcW
EnumChildWindows
TrackPopupMenu
GetKeyState
IsChild
SetMenu
DestroyMenu
DrawIconEx
GetMenuItemCount
GetSubMenu
GetMenuItemInfoW
ModifyMenuW
SetMenuItemInfoW
AppendMenuW
CreatePopupMenu
CreateMenu
RegisterWindowMessageW
EnumDisplaySettingsW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
CreateIconFromResourceEx
CreateIconFromResource
CharLowerW
CharUpperW
RegisterClipboardFormatW
GetCaretBlinkTime
DestroyCursor
AppendMenuA
IsClipboardFormatAvailable
CreateCaret
ShowCaret
HideCaret
DestroyCaret
GetKeyboardLayout
KillTimer
SetTimer
GetDlgCtrlID
GetScrollInfo
PtInRect
GetMessageTime
NotifyWinEvent
TrackMouseEvent
GetAncestor
SetCaretPos
GetUpdateRgn
MessageBoxA
GetDoubleClickTime
MonitorFromWindow
DrawTextA
MonitorFromPoint
CopyImage
CreateIconIndirect
MonitorFromRect
GetMonitorInfoW
SystemParametersInfoA

advapi32

RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegEnumValueW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
SystemFunction036

oleaut32

VariantClear
SysFreeString
DispGetParam
GetActiveObject
VariantInit
VariantChangeType
DispGetIDsOfNames
VariantCopy
SysAllocString
LoadTypeLi
SysAllocStringLen

ole32

CoInitialize
CoUninitialize
GetRunningObjectTable
CreateBindCtx
CoTaskMemFree
CoGetObject
CLSIDFromProgID
CoGetClassObject
CLSIDFromString
ProgIDFromCLSID
StringFromCLSID
RevokeDragDrop
OleUninitialize
OleInitialize
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
CoCreateInstance
CoGetObjectContext
CoGetApartmentType

shell32

ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW

winmm

timeBeginPeriod

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree

atl

AtlAxGetHost
AtlAxWinInit
AtlAxCreateControl
AtlAxGetControl

gdi32

GetObjectType
GetObjectW
DeleteObject
IntersectClipRect
GetStockObject
CreateFontIndirectW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
SetBkMode
CreateCompatibleDC
CreateCompatibleBitmap
OffsetViewportOrgEx
SetViewportOrgEx
CreatePatternBrush
DeleteDC
CreateRectRgn
SelectClipRgn
BitBlt
ExcludeClipRect
CreateSolidBrush
CreateDCW
CreateDIBSection
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
GetPixel
SetPixel
LineTo
MoveToEx
CreatePen
GetDeviceCaps
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetDIBits
CreateBitmap
CreateFontW
CombineRgn
SetTextAlign
GdiAlphaBlend
GetTextMetricsW
ExtTextOutW
ExtTextOutA
Ellipse
GetTextExtentPoint32A
GetTextExtentExPointW
GetTextExtentExPointA
ExtCreatePen
Polyline
Polygon
RestoreDC
RoundRect
SaveDC

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

CreateToolbarEx
ImageList_SetIconSize
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Add
CreateStatusWindowW
InitCommonControlsEx
ImageList_Replace
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

imm32

ImmGetContext
ImmReleaseContext
ImmEscapeW
ImmNotifyIME
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionStringW
ImmSetCompositionFontW
ImmSetCandidateWindow

Sections

.code
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5aec55e06e3d517f7f4558723e606f5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

ole32

shell32

winmm

gdiplus

atl

gdi32

comdlg32

comctl32

imm32

Sections

.code Size: 200KB - Virtual size: 199KB

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 208KB - Virtual size: 208KB

.gfids Size: 3KB - Virtual size: 3KB

.00cfg Size: 512B - Virtual size: 8B

.data Size: 104KB - Virtual size: 115KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 4KB - Virtual size: 4KB

.code
Size: 200KB - Virtual size: 199KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 208KB - Virtual size: 208KB

.gfids
Size: 3KB - Virtual size: 3KB

.00cfg
Size: 512B - Virtual size: 8B

.data
Size: 104KB - Virtual size: 115KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 4KB - Virtual size: 4KB