9bde03701c28abb83fbbc7cca47646ca326a113bf70dd67a11196965d2c088f3

Sharing

Copy URL Twitter E-mail

General

Target

9bde03701c28abb83fbbc7cca47646ca326a113bf70dd67a11196965d2c088f3
Size

2.8MB
MD5

eb5f2f45a78aeb9df6a126dbe97c9ba2
SHA1

81e6c81b70cc07d8bbb6c98a9cc21f72ab8c716e
SHA256

9bde03701c28abb83fbbc7cca47646ca326a113bf70dd67a11196965d2c088f3
SHA512

26a17d6f29a06266a742a46d75e81a7402c3e6e32bb7bdd9e44829f4fe694d498825f973e0eabdb0d796fa318cd7804f0fb60b6d399b0a77c7f1b6b293b7be12
SSDEEP

49152:qWq+u/IwxmF2nOGjLvEKYVmKd1Anf77SeTyCDMYZ2ac9LgRIRq2Wo:msknDaAfUCDUaILgmRq2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bde03701c28abb83fbbc7cca47646ca326a113bf70dd67a11196965d2c088f3

Files

9bde03701c28abb83fbbc7cca47646ca326a113bf70dd67a11196965d2c088f3
.dll windows:6 windows x64 arch:x64

c5a71742ef6cd55e6687d955b51c6ee3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GlobalUnlock
GlobalLock
GlobalFree
MulDiv
FormatMessageW
CopyFileW
OutputDebugStringA
RaiseException
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
GetStringTypeW
QueryActCtxW
lstrcmpA
GlobalGetAtomNameW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetCurrentProcessId
GetModuleHandleW
CompareStringW
GlobalFlags
lstrcmpW
WaitForSingleObject
GetCurrentThreadId
SetThreadPriority
ResumeThread
GlobalAddAtomW
FindFirstFileW
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
LoadLibraryExW
lstrcmpiW
GetSystemDirectoryW
GlobalDeleteAtom
GlobalFindAtomW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GlobalAlloc
GetLocaleInfoW
GetUserDefaultUILanguage
VirtualProtect
lstrcpyW
FindResourceExW
GetWindowsDirectoryW
VerifyVersionInfoW
GetTempPathW
GetProfileIntW
SearchPathW
GetTempFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
ExitProcess
HeapQueryInformation
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
GetSystemInfo
VirtualAlloc
VirtualQuery
QueryPerformanceFrequency
SetStdHandle
GetFileType
SetFilePointerEx
GetStdHandle
GetConsoleOutputCP
GetConsoleMode
LCMapStringW
IsValidLocale
EnumSystemLocalesW
ReadConsoleW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
LCMapStringEx
LocalFree
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalSize
SetLastError
GetCPInfo
GetFileSize
FileTimeToSystemTime
GetFileInformationByHandle
UnmapViewOfFile
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
GetFileAttributesW
CreateFileW
SetFilePointer
WriteFile
ReadFile
CreateDirectoryW
CloseHandle
GetTickCount
FreeLibrary
RemoveDirectoryA
GetProcAddress
GetLocalTime
Process32FirstW
LoadLibraryA
Process32NextW
GetFileAttributesA
GetLastError
CreateToolhelp32Snapshot
GetEnvironmentVariableA
MoveFileA
GetComputerNameW
DeleteFileA
GetUserDefaultLCID
Sleep
GetModuleHandleA
GetVersionExW
GetCurrentProcess
GetModuleFileNameA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
CopyFileA
MultiByteToWideChar
FindClose
InitializeCriticalSectionEx
FindNextFileA
FindFirstFileA
FindActCtxSectionStringW
SizeofResource
RtlUnwind

user32

SetRectEmpty
OffsetRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
ShowOwnedPopups
SetCursor
DeleteMenu
SetTimer
KillTimer
InvalidateRect
TrackMouseEvent
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongPtrW
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetWindowLongPtrW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
CopyImage
DispatchMessageW
TranslateMessage
GetMessageW
RealChildWindowFromPoint
GetClassNameW
PtInRect
ClientToScreen
GetWindowRect
IsDialogMessageW
SetWindowLongW
SetWindowTextW
GetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
IsWindow
GetWindow
GetScrollPos
SetScrollPos
SetFocus
LoadCursorW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
GetWindowTextLengthW
GetWindowTextW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetClientRect
RemovePropW
GetPropW
DestroyIcon
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
FillRect
ScreenToClient
EndPaint
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
IntersectRect
InflateRect
PostQuitMessage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
BeginPaint
LoadStringA
GetDesktopWindow
SendDlgItemMessageA
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongPtrW
PeekMessageW
GetWindowDC
TabbedTextOutW
GrayStringW
SetWindowLongPtrW
DrawTextExW
DrawTextW
GetUpdateRect
CharUpperW
SetPropW

advapi32

RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExW
RegCreateKeyExW

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoCreateGuid
StringFromGUID2
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

oleaut32

SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
VariantChangeType
VarBstrFromDate
LoadTypeLi
VariantInit
SysFreeString
VariantClear
SysAllocString

msimg32

TransparentBlt
AlphaBlend

shlwapi

PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindFileNameW

uxtheme

GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
GetThemeColor

wininet

HttpSendRequestA
InternetConnectA
InternetSetOptionW
InternetReadFile
HttpOpenRequestA
InternetOpenUrlA
InternetOpenA
InternetSetOptionA

ntdll

RtlLookupFunctionEntry
RtlCaptureContext
VerSetConditionMask
RtlVirtualUnwind

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

gdi32

GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
SelectPalette
CopyMetaFileW
GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
GetTextExtentPoint32W
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CreateFontIndirectW
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
CreateDCW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

shell32

SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder

Exports

Exports

NewGo

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5a71742ef6cd55e6687d955b51c6ee3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

msimg32

shlwapi

uxtheme

wininet

ntdll

gdiplus

oleacc

imm32

winmm

gdi32

winspool.drv

shell32

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 564KB - Virtual size: 564KB

.data Size: 60KB - Virtual size: 60KB

.pdata Size: 88KB - Virtual size: 88KB

_RDATA Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 60KB - Virtual size: 60KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 564KB - Virtual size: 564KB

.data
Size: 60KB - Virtual size: 60KB

.pdata
Size: 88KB - Virtual size: 88KB

_RDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 60KB - Virtual size: 60KB