1978ca9a663275b34d740d13de81fa6cf8e5f74d971e0f3f297df4b4fcd6f61dN

Sharing

Copy URL Twitter E-mail

General

Target

1978ca9a663275b34d740d13de81fa6cf8e5f74d971e0f3f297df4b4fcd6f61dN
Size

835KB
MD5

1fcffc58fa1ae66835ed5af543598ad0
SHA1

20b780bb8a07bf02619b6b40fc0413b088120549
SHA256

1978ca9a663275b34d740d13de81fa6cf8e5f74d971e0f3f297df4b4fcd6f61d
SHA512

618e574f9a6c65608d8a793faff32030dfbb7b1c49c635010f7c3b36b1ee0aa69fcaac35a5139c5fe5571065a0f1ed4fc10a2eac4c6811bbebfc621e1d021818
SSDEEP

24576:TFj+On0eEmL6vH885Ss1Yf0GVP5c4nzoP0gcN+VUjhx:l6mLeHhSs1Yf0+PK0vN+VUjhx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1978ca9a663275b34d740d13de81fa6cf8e5f74d971e0f3f297df4b4fcd6f61dN

Files

1978ca9a663275b34d740d13de81fa6cf8e5f74d971e0f3f297df4b4fcd6f61dN
.exe windows:5 windows x86 arch:x86

c9fb24e7fa8921a7e7936f4f5b790310

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetTickCount
GetConsoleCursorInfo
VirtualProtect
GetModuleHandleA
SetStdHandle
GetStdHandle
GetConsoleCP
lstrcmpA
ExitProcess
LoadResource
FreeLibrary
InitializeCriticalSectionAndSpinCount
LoadLibraryA
OpenEventW
SetEndOfFile
FormatMessageW
GlobalFree
GetCurrentProcess
LoadLibraryExW
Process32FirstW
TerminateProcess
InterlockedDecrement
GetLastError
SetCurrentDirectoryW
UnhandledExceptionFilter
HeapFree
SetErrorMode
LoadLibraryW
IsDebuggerPresent
DuplicateHandle
HeapDestroy
HeapAlloc
SetFilePointer
Thread32Next
GlobalUnlock
WideCharToMultiByte
DeleteCriticalSection
GetFileSize
MulDiv
HeapSize
LockResource
HeapSetInformation
CreateFileW
LocalFree
EnterCriticalSection
GetProcessHeap
GetSystemDirectoryW
ResetEvent
ReadFile
DeviceIoControl
WaitForMultipleObjects
OutputDebugStringW
GetModuleFileNameW
CreateToolhelp32Snapshot
MultiByteToWideChar
GetStartupInfoW
WaitForSingleObject
InterlockedCompareExchange
WriteFile
SetLastError
GetProcAddress
OpenProcess
GetLogicalDriveStringsW
FindResourceExW
GetSystemTimeAsFileTime
GetFileAttributesExW
InterlockedExchange
Process32NextW
GetModuleHandleW
GetFullPathNameW
Sleep
Thread32First
QueryDosDeviceW
HeapReAlloc
VerSetConditionMask
IsProcessorFeaturePresent
GlobalLock
RaiseException
GlobalAlloc
GetFileAttributesW
GetVersion
LeaveCriticalSection
SizeofResource
GetExitCodeProcess
SetEvent
CloseHandle
LocalAlloc
InterlockedIncrement
GetCurrentProcessId
GetPrivateProfileIntW
QueryPerformanceCounter
VerifyVersionInfoW
CreateEventW
FindResourceW
CreateProcessW

user32

GetWindowRect
BeginPaint
ChangeDisplaySettingsW
ShowCaret
TranslateMessage
GetWindowTextW
GetMenuItemInfoW
UpdateWindow
DrawFocusRect
ChildWindowFromPoint
GetDesktopWindow
LoadIconW
SetClipboardData
GetCursorPos
SetWindowLongW
ShowWindow
SetFocus
CreateWindowExW
CreateAcceleratorTableW
GetSystemMenu
AdjustWindowRectEx
InsertMenuItemW
GetClassNameW
MoveWindow
DdeGetData
DdeConnect
CheckMenuItem
GetSubMenu
DestroyIcon
CallNextHookEx
RegisterClipboardFormatW
IsDialogMessageW
GetCapture
DeferWindowPos
GetClientRect
ReleaseCapture
GetWindowThreadProcessId
DdePostAdvise
DdeCmpStringHandles
SetCursor
GetWindowDC
CallWindowProcW
SetScrollInfo
CreateIconIndirect
ToUnicode
GetMessageTime
DrawFrameControl
FlashWindow
AppendMenuW
BeginDeferWindowPos
GetActiveWindow
DdeDisconnect
MsgWaitForMultipleObjects
DrawEdge
CreateDialogIndirectParamW
SystemParametersInfoW
LoadImageW
DdeInitializeW
GetMessagePos
LoadBitmapW
SetWindowsHookExW
ReleaseDC
ClientToScreen
keybd_event
KillTimer
DestroyWindow
ModifyMenuW
UnhookWindowsHookEx
CheckMenuRadioItem
SetWindowRgn
MessageBoxW
SetTimer
IsZoomed
MapWindowPoints
ScrollWindow
GetWindow
GetMenu
IsWindowEnabled
GetForegroundWindow
EnumDisplaySettingsW
CreatePopupMenu
GetClipboardData
SetMenu
PeekMessageW
RedrawWindow
EnableWindow
DrawTextW
IsClipboardFormatAvailable
DestroyCursor
PostQuitMessage
EnumThreadWindows
OpenClipboard
CreateMenu
CreateDialogParamW
DdeClientTransaction
DrawIconEx
ShowCursor
EndDeferWindowPos
LoadCursorFromFileW
GetWindowTextLengthW
InsertMenuW
GetKeyState
DdeCreateDataHandle
DestroyAcceleratorTable
DefWindowProcW
GetDoubleClickTime
GetWindowLongW
DdeQueryStringW
VkKeyScanW
GetMessageW
SetWindowPos
GetUpdateRgn
RegisterWindowMessageW
DdeFreeStringHandle
FindWindowExW
SetParent
SetWindowTextW
CloseClipboard
HideCaret
EnumClipboardFormats
DestroyMenu
GetAsyncKeyState
GetSysColor
DdeGetLastError
DrawMenuBar
TrackPopupMenu
SetForegroundWindow
GetMenuItemCount
PostMessageW
WindowFromPoint
DdeFreeDataHandle
GetFocus
GetIconInfo
InvalidateRect
GetKeyboardState
RemoveMenu
FillRect
OffsetRect
DdeCreateStringHandleW
MessageBeep
EndPaint
PostThreadMessageW
IsWindowVisible
DdeNameService
PtInRect
ValidateRect
GetMenuState
DrawIcon
GetUpdateRect
BringWindowToTop
CopyRect
UnregisterClassW
IsWindow
SetCursorPos
DdeUninitialize
WaitForInputIdle
DispatchMessageW
EndDialog
GetParent
SendMessageW
GetScrollInfo
EnumWindows
DrawStateW
GetDC
EnableMenuItem
GetClassInfoW
SetCapture
UnionRect
ExitWindowsEx
ScreenToClient
GetSystemMetrics
IsIconic
GetClipboardFormatNameW
SetMenuItemInfoW
InflateRect
TranslateAcceleratorW
EmptyClipboard

gdi32

GetTextMetricsW
GetRgnBox
SetROP2
RestoreDC
SetMetaFileBitsEx
SetBkMode
GetClipBox
GetPixel
GetDIBits
Pie
BitBlt
MoveToEx
Arc
RectInRegion
GetDeviceCaps
Rectangle
ExtFloodFill
LineTo
SetViewportExtEx
CreateICW
ExtCreatePen
RoundRect
GetWinMetaFileBits
CreateRectRgn
SetPolyFillMode
CreateDIBitmap
CreateSolidBrush
CreateRectRgnIndirect
GetTextExtentPoint32W
SelectObject
SetViewportOrgEx
GetPaletteEntries
SetWindowExtEx
PtInRegion
CreateBitmapIndirect
SetBrushOrgEx
ExtCreateRegion
DeleteEnhMetaFile
EqualRgn
CreatePalette
CreateCompatibleBitmap
SetWinMetaFileBits
PatBlt
GetNearestPaletteIndex
SetBkColor
GetRegionData
RealizePalette
CreatePen
StretchDIBits
SetMapMode
CreatePolygonRgn
Ellipse
CreateEnhMetaFileW
EnumFontFamiliesExW
GetTextExtentExPointW
GetSystemPaletteEntries
SelectPalette
CopyEnhMetaFileW
StretchBlt
GetObjectW
GetMetaFileBitsEx
CreateBitmap
SetTextAlign
CloseEnhMetaFile
CreateHatchBrush
ExtSelectClipRgn
MaskBlt
SetWindowOrgEx
SetPixel
GetEnhMetaFileW
GetStockObject
GetDIBColorTable
CombineRgn
CreatePatternBrush
SelectClipRgn
GetCharABCWidthsW
OffsetRgn
ExcludeClipRect
SaveDC
GetEnhMetaFileHeader
CreateFontIndirectW
SetStretchBltMode
CreateCompatibleDC
DeleteObject
GdiFlush
GetBkColor
DeleteDC
Polygon
GetTextColor
TextOutW
CreateDIBSection
Polyline
SetTextColor
PlayEnhMetaFile

comdlg32

ChooseColorW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW

advapi32

RegQueryValueExA
RegCreateKeyW
AdjustTokenPrivileges
GetUserNameW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
LookupPrivilegeValueW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExA
OpenProcessToken
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyW

shell32

SHGetFileInfoW
DragAcceptFiles
DragQueryPoint
DragFinish
SHGetMalloc
Shell_NotifyIconW
ExtractIconW
ExtractIconExW
SHGetPathFromIDListW
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
SHGetIconOverlayIndexW
SHBrowseForFolderW
SHGetSpecialFolderLocation
DragQueryFileW

oleaut32

SysAllocString
SysStringLen

wldap32

ord301
ord304

Sections

.text
Size: 462KB - Virtual size: 462KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9fb24e7fa8921a7e7936f4f5b790310

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

wldap32

Sections

.text Size: 462KB - Virtual size: 462KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 252KB - Virtual size: 5.5MB

.tls Size: - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 462KB - Virtual size: 462KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 252KB - Virtual size: 5.5MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 10KB - Virtual size: 10KB