d860b4d4640db41f1a3b0f80f57685fc7813c3d99768f6243101753bcf2decd6N

Sharing

Copy URL Twitter E-mail

General

Target

d860b4d4640db41f1a3b0f80f57685fc7813c3d99768f6243101753bcf2decd6N
Size

4.0MB
MD5

9ebbd38394c3bc6a2e1c5184ea8bbe60
SHA1

98a8d2220e6611ac95ebad1b87f3b67eca3215d2
SHA256

d860b4d4640db41f1a3b0f80f57685fc7813c3d99768f6243101753bcf2decd6
SHA512

5149c6a683cfac2ca27290b785f26543393caa36c78716f335ae5ae5b12fa2aa6805efe351373ce8ece986666871ec4e66aed3ffe298a10b1135f9bc2d4e85ef
SSDEEP

98304:PFNLxVFOSnbZB2vryd91uwQADHqE9D/UgjDLut9B8:3rfZsuNcoCu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d860b4d4640db41f1a3b0f80f57685fc7813c3d99768f6243101753bcf2decd6N

Files

d860b4d4640db41f1a3b0f80f57685fc7813c3d99768f6243101753bcf2decd6N
.exe windows:4 windows x86 arch:x86

994f0df89208a086ec9ab8e53c60784e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM

Imports

comctl32

InitCommonControlsEx
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_Destroy
FlatSB_GetScrollProp
_TrackMouseEvent

kernel32

GetVolumeInformationW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LocalSize
LockFile
LockResource
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
MapViewOfFile
GetVersionExW
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadExecutionState
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetVersion
RtlUnwind
GetVersionExA
GetTimeZoneInformation
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLogicalDriveStringsW
GetLocalTime
GetLocaleInfoW
GetLocaleInfoA
GetLastError
GetFullPathNameW
GetFileType
GetFileTime
GetFileAttributesW
GetEnvironmentStringsW
GetDriveTypeW
GetDiskFreeSpaceExW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FormatMessageW
FlushFileBuffers
FindResourceW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
DuplicateHandle
DeviceIoControl
DeleteCriticalSection
CreateThread
CreateProcessW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateFileA
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
CreateProcessA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetSystemDefaultLCID
lstrcpyW
Sleep
MulDiv

user32

IsWindowUnicode
IsWindowVisible
KillTimer
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LookupIconIdFromDirectoryEx
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RegisterClassA
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClassLongW
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetScrollPos
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRect
WinHelpW
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSubMenu
IsWindowEnabled
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetMenuState
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
GetKeyState
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
FillRect
ExitWindowsEx
EqualRect
EnumWindows
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextW
DrawTextExW
DrawStateW
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
MessageBoxA
AdjustWindowRectEx
AppendMenuW
BeginPaint
CallNextHookEx
CallWindowProcA
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefMDIChildProcA
DefFrameProcW
DefFrameProcA
DefDlgProcW
DefDlgProcA
CreateWindowExW
CreateIconIndirect
CreateIconFromResourceEx
CreateDialogIndirectParamW
CopyRect
CopyIcon
IsRectEmpty
IsIconic
IsDialogMessageW
IsChild
InvalidateRgn
CallWindowProcW
CharNextW
CharUpperW
CheckMenuItem
ClientToScreen
CopyAcceleratorTableW
InvalidateRect
IntersectRect
InflateRect
GrayStringW
GetScrollPos
GetWindowThreadProcessId
GetMenuCheckMarkDimensions

gdi32

DeleteObject
Escape
ExcludeClipRect
ExtSelectClipRgn
ExtTextOutW
GetBkColor
GetClipBox
GetClipRgn
GetDeviceCaps
GetDIBits
GetMapMode
GetObjectType
GetObjectW
GetPixel
GetRgnBox
GetStockObject
GetTextCharsetInfo
GetTextColor
GetTextExtentPoint32W
DeleteDC
GetWindowExtEx
IntersectClipRect
OffsetRgn
OffsetViewportOrgEx
PatBlt
Polygon
PtVisible
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetStretchBltMode
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchDIBits
TextOutW
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreatePen
CreatePatternBrush
CreatePalette
CreateFontIndirectW
CreateDIBSection
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CombineRgn
GetViewportExtEx
BitBlt

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

GetFileTitleW

advapi32

LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegOpenKeyExW
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyW
AdjustTokenPrivileges

shell32

ExtractIconExW
Shell_NotifyIconW
ShellExecuteW
CommandLineToArgvW

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
OleFlushClipboard
CoGetClassObject
CoFreeUnusedLibraries
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleInitialize
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleUninitialize
CoRegisterMessageFilter
OleIsCurrentClipboard

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFileExistsW
PathFindExtensionW

Sections

_aoss_4
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_apss_4
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_aqss_4
Size: 13KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_arss_3
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

994f0df89208a086ec9ab8e53c60784e

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

shlwapi

Sections

_aoss_4 Size: 2.4MB - Virtual size: 2.4MB

_apss_4 Size: 13KB - Virtual size: 12KB

_aqss_4 Size: 13KB - Virtual size: 4.0MB

.rsrc Size: 310KB - Virtual size: 309KB

_arss_3 Size: 1.4MB - Virtual size: 1.4MB

_aoss_4
Size: 2.4MB - Virtual size: 2.4MB

_apss_4
Size: 13KB - Virtual size: 12KB

_aqss_4
Size: 13KB - Virtual size: 4.0MB

.rsrc
Size: 310KB - Virtual size: 309KB

_arss_3
Size: 1.4MB - Virtual size: 1.4MB