bbc4621005af86e4963f1cb18b43f0bf256120a0389bb4e125af0db4fa2de3db

Sharing

Copy URL Twitter E-mail

General

Target

bbc4621005af86e4963f1cb18b43f0bf256120a0389bb4e125af0db4fa2de3db
Size

3.2MB
MD5

833d49665aef067ec73463e29376cdad
SHA1

b38d96d0c840eeb5c8d33e90f7f75eebff5cbd17
SHA256

bbc4621005af86e4963f1cb18b43f0bf256120a0389bb4e125af0db4fa2de3db
SHA512

9165ea77653ea76455c6b1924796239e5d9e08c7a42d266e3021d4e720479e52db95d46ed126cf7af59f612bcfff4fa56828e9ba3b21772d28c30b09e1bf4e9b
SSDEEP

49152:R4N9Dr/Dz86DH/lwEW9Ao0wOsRaRgb3iRts6AURE/PvwBQ5lVCPa3Uv/A8a/+lb:IDrVbNwjZAgOR7oPY+hkvfaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbc4621005af86e4963f1cb18b43f0bf256120a0389bb4e125af0db4fa2de3db

Files

bbc4621005af86e4963f1cb18b43f0bf256120a0389bb4e125af0db4fa2de3db
.dll windows:5 windows x86 arch:x86

e7d2e2af8d738a86f0c556f35dc4725b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetHandleCount
GetACP
HeapSize
TerminateProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
GetStdHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
lstrcpynA
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
InterlockedDecrement
InterlockedIncrement
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
DeviceIoControl
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
CloseHandle
WaitForSingleObject
GetTickCount
GetCommandLineA
MulDiv
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
DeleteFileA
GetFileAttributesA
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
WritePrivateProfileStringA
CreateThread
CreateEventA
Sleep
ExpandEnvironmentStringsA
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileA
FindClose

user32

LoadIconA
TranslateMessage
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
GetWindowThreadProcessId
IsWindowEnabled
EnumWindows
IsZoomed
GetClassInfoA
DefWindowProcA
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
ReleaseCapture
GetCursorPos
GetSystemMetrics
EmptyClipboard
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
GetClassNameA
GetDesktopWindow
UnregisterClassA
LoadStringA
GetSysColorBrush
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA

gdi32

GetViewportExtEx
PtVisible
RectVisible
TextOutA
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ExtTextOutA
Escape
GetTextMetricsA
SetWindowOrgEx
SetBkColor
CreateRectRgnIndirect
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
StretchBlt
SelectPalette
RealizePalette
GetDIBits
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
FillRgn
CreateBitmap
SelectObject
CreatePen
PatBlt
CreateRectRgn
CombineRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
StartDocA
StartPage
BitBlt
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
LineTo
MoveToEx
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ExtSelectClipRgn

winmm

waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutPause
waveOutReset
waveOutClose
waveOutGetNumDevs
waveOutOpen
midiOutUnprepareHeader
midiStreamOpen
midiStreamProperty
midiOutPrepareHeader
midiStreamOut
midiStreamStop
midiOutReset
midiStreamClose
midiStreamRestart

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegQueryValueA

shell32

Shell_NotifyIconA
ShellExecuteA

ole32

CLSIDFromProgID
OleRun
CLSIDFromString
OleUninitialize
OleInitialize
CoCreateInstance

oleaut32

VariantClear
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElement
VariantCopyInd
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
UnRegisterTypeLi

comctl32

ImageList_Destroy
ord17

ws2_32

inet_ntoa
gethostbyname
WSAStartup
WSACleanup
accept
getpeername
recv
ioctlsocket
recvfrom
closesocket
WSAAsyncSelect

comdlg32

ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

Exports

Exports

Ai2vrrbtmlj83c
Bzp9atkkgjxwprl4ge0kcuz23o4w
D1pbklrdoeymbm7g7b
Dgxam3udqvm9bma4t9
Dowfjohyj3ytz
Dw4pig874mhtkubnwzm
E4krpe528h8h4fmnxhz1xu036
Ekgzyle43oddbkl
F06ukik95bwl7o
Fwcfnrzlh61975ywrvh2lkh9h53
G536cdhly2x5xjp7avr
G5vb9q3esa9ouhapd
Gdal8q3nct0o7qrqdcd
Gslpcafu4e266zfepb
H4kwmrzm1pk9se
H5bb64mnqtckld8
H7vdxg7hrepzi
H9brvl6f8qn5haj
Hc0rthvh6kaxc0qxs
Hn3gk66uhq7zfgct3qfflj3m98
Hsw9wle6o74d
Hwiyi6xw29qy0xlucwdtlpmz
Ig8ccpcbf805orkev3j8
J37osk7x4wd3nkbk2
J5k1j4lfvxwt
Jevucs6pk99h
Klivrtua5sjnjiucrb166ica3
Kpy9ywo4qcgk2
L921piet26bgvz
Lcszaa1q0jmnn2tcia5so
Mhdedfkwka3o6modtt1ztp1
Mku5vnqmmiyagmo
Momv75im0axmhj7dg
Mr23okptz6hct2llytgp
Mydtiegaca1eqy7go
N0aix332ltdidwkuc5bk37
N49hzsn3j5umqbcdnwn
Ng6v32ry27u69zc3du
Nj3r4evf6u67
O778bswkmj237c5u5e
Ofngfvf7km5j7w9b8o
Ofvbqf1tiys
Ok8pkobs269sa
Ooopddpk6je5ka861psz9n
Otyr3zadfityl0g5wb87
Podajh5mo
Q9gwkws2024m006rwbd0bd6wt
Qgx00edr3fyqyxwd
R5vg62y7lilgi7uyf
Rdj6gg88w50l53ko5xk
Rejqnj0ac1
Sod04h4fti1e6i0u
Tce5rc77xfvu81sla9
Tgg7fdqim0wdz
Tt08a2ynww8o95k4qih
Up4612av167j487ocl
Usad0q9akl1qo6rk
Uxf45mkyu778m
V4yyn9gjzcte8hpcf765
V8sc8mtop5xhg7gx00pw2gwxiw
Vkefl9gkjvj6lq6
Vrjq8pev4x8nfj
W8hxsohxzk72m4mdnnpkq
Ww0oakoe1q
Ww13i59gxxzvysghed
X1vjqinsankoaqg7avo
X8qnyr8bc4rq1f8
Ygx5xr0kxnaimo
Z0anuopvf1p21v54e
Zc4l3n148a3mx6so0hls1
Zcpp3v6j98x2yvgnqyg
Zd01of43s0y9
Zdbgbdhujlowisygb
Ze2sd5q915t6r8epw
Zlqtctm2aw34fam7hn6ps9
Zn6jg0kv6v8zmjs48j5
Zslknxl1a6qei9u4
Zwlynokhy4z848tszcx
a6d23rg7yi72wd
at6tg4dq7z5knuqhkp01f
at7jm7w4dkh8a5cx6t
awt88snurl3u52
b01xgdy91h5mejivklw83
b0r87hd4ogzm0sak
bk5p8yo66b0i6fb4l89kr
bod51urzuqdyu8k
bvbec35um
cj3v1qh802iz3pib0fo
ds4z2wxs1rg1j4pwz
dups26hjd83xxq4s5q
dw2vb811xdz2h3au
dzbl7et4tf0u5szpr61c1
elg9sinqq41xphz61xqq
eq3ronm1bso0nz3w8
f0qd410xio36oqvu
f8qi1emibwfydgfcf7
fk0sxw303w9ywuu0vuq
g8hsv3v46cvaqdtvk3
gmkunhgu5hedujjsc9t8
godaqedsoyppj65eoj0nxoiq
h21wrenyeow44n7os7
h498dv6hopeadmzmhs
ho2qeveg45nis5qd9ukgxk
i0ch0wxtla6t4l6
i1m1l7vd5380ne
jh79pofnxbvbs0koa
jookg03rdb2lwbnwz5ccljgwg
jxnz8ay51zvpxylx7kx8l
kcb3ccbekoao
kd01giwothzo88y13gfuz
kwg6fpjs9luknkt2p5co7o
kwtivhwgl1s5rr9ws
lg6i5h559ziel1j
lkm74hajqw7gaw25y
mhrrzwou5tplpufy88b
mlrji4dpngfs2l9gbr
nomqaswt62lus
nr9bezg1kxd6iyw
o01sr0cg89tuq
ovjoo9piftafn083718
p7f3efaztbqbj
p807aa7voxtxr8wnxg
po9nm0a5vmnhonzab39
q0k76zo7yuihjos5u685
qstzx6a6xver8upy4
qu9ngfchegoi9wln2
rq04rw49r9mua25x5v
s8sh5zghjd99459f3c
sbvcvvp6k7a9v
scp7hyx5mshql62vl
sg8p9a6wggcpcp
skacwc1rn9ayvc
tpz41b2bw44sed3pe
txf82z7jnfj0an
uvo6hvtbohctz1ul6
ux31f0v05utd9
v86d85icfr6uwayc7y9e
vbnjzbcs9r3r7
vpf1f5yywbknliofn
vrjv510ox5kf39et4
wdbbe1u1pdccu1d
whi1tl5gs
wj7nkbvltn372t1gy9zj
wn00g4ns7seo325a9
ww4kl3meae51wvj6uf5p9o80
x095rysfl3xb2uk
x8nkuwuagzjp2k
xp7z3zfi3ws1peigbi4
ybnwxnyl2zfjv5f25d
zhjww8jnz11ces7gbsz7yi
zsufqcz8hymmta1u
zzz3a4rbv8nvbth

Sections

.text
Size: - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.z~fP
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.)k>0
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.<6Up
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7d2e2af8d738a86f0c556f35dc4725b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Exports

Exports

Sections

.text Size: - Virtual size: 976KB

.rdata Size: - Virtual size: 100KB

.data Size: - Virtual size: 156KB

.z~fP Size: - Virtual size: 1.7MB

.)k>0 Size: 2KB - Virtual size: 4KB

.<6Up Size: 3.2MB - Virtual size: 3.2MB

.rsrc Size: 7KB - Virtual size: 24KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: - Virtual size: 976KB

.rdata
Size: - Virtual size: 100KB

.data
Size: - Virtual size: 156KB

.z~fP
Size: - Virtual size: 1.7MB

.)k>0
Size: 2KB - Virtual size: 4KB

.<6Up
Size: 3.2MB - Virtual size: 3.2MB

.rsrc
Size: 7KB - Virtual size: 24KB

.reloc
Size: 1024B - Virtual size: 4KB