84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc

Sharing

Copy URL

Twitter E-mail

General

Target

84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc
Size

1.9MB
MD5

db65c66bf6f7821600068a973f2cab57
SHA1

6a77e24a87bae4ce67b69bbe9da6fdeda2afc33d
SHA256

84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc
SHA512

88893d2ff38661618893b75ed319d8d530c9bf0a225b665068addc71ecfd62b546cb52aa19386d64e345a678578b98e85d31dce27a8e54e946f2073799c7b92d
SSDEEP

24576:A/sT4C+MSIpr42JE+wF7nwm+6IMoqHZU9Oap/HxUOt2PWeJLYqqFR:A/M45MgW6I6HUpJUqFR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc

Files

84d6f770642047d53e850d20ad2e324c7dde00a27f3a0a7b8f1b41728b8af6cc
.exe windows:4 windows x86 arch:x86

46bfa5624de21a45b7e975598966458b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW
waveInStop

msvcrt

__set_app_type
_except_handler3
_exit
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
exit
_acmdln
__getmainargs
_initterm
_controlfp
__setusermatherr

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GetConsoleOutputCP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVersionExW
GetVolumeInformationW
FreeResource
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidLocale
LCMapStringA
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpW
GetConsoleMode
lstrlenW
MulDiv
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumSystemLocalesA
EnumResourceLanguagesW
DuplicateHandle
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
GetThreadLocale
IsValidCodePage
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
ExitProcess
LeaveCriticalSection
LoadLibraryA
GetConsoleCP
GetCommandLineW
lstrlenA
GetACP
GlobalAddAtomW

user32

GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
InflateRect
IntersectRect
InvalidateRect
InvalidateRgn
IsChild
IsDialogMessageW
IsIconic
IsRectEmpty
IsWindowEnabled
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
FindWindowW
FillRect
EqualRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
CallNextHookEx
BeginPaint
AppendMenuW
AdjustWindowRectEx
EmptyClipboard
LoadIconA
GetWindowLongW
GetWindowTextLengthA
DefWindowProcW

gdi32

FrameRgn
GetBkColor
GetClipBox
ExtTextOutW
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ExtSelectClipRgn
GetDeviceCaps
ExtCreateRegion
GetMapMode
GetObjectW
GetRegionData
GetRgnBox
Escape
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetDIBColorTable
SetMapMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
StretchBlt
OffsetViewportOrgEx
OffsetRgn
GetWindowExtEx
GetViewportExtEx
GetTextExtentPoint32W
GetTextColor
GetStockObject
DPtoLP
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateFontIndirectW
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
ScaleWindowExtEx
CombineRgn
PtVisible

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

advapi32

RegQueryValueW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

ShellExecuteExW
Shell_NotifyIconW
CommandLineToArgvW

ole32

OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
StringFromIID
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleUninitialize

shlwapi

PathIsUNCW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathAddBackslashW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
PathStripToRootW

Sections

.text
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.o2f38e
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.p2f38f
Size: 4KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.q2f390
Size: 4KB - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.act29
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

46bfa5624de21a45b7e975598966458b

Headers

File Characteristics

Imports

winmm

msvcrt

imm32

comctl32

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 404KB - Virtual size: 402KB

.o2f38e Size: 12KB - Virtual size: 10KB

.p2f38f Size: 4KB - Virtual size: 14.0MB

.q2f390 Size: 4KB - Virtual size: 30B

.rsrc Size: 120KB - Virtual size: 120KB

.act29 Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 404KB - Virtual size: 402KB

.o2f38e
Size: 12KB - Virtual size: 10KB

.p2f38f
Size: 4KB - Virtual size: 14.0MB

.q2f390
Size: 4KB - Virtual size: 30B

.rsrc
Size: 120KB - Virtual size: 120KB

.act29
Size: 1.4MB - Virtual size: 1.4MB