0e08f1c06d2967a1c05222fd5eb87230a523a8b57f0d570331552df11a957713N

Sharing

Copy URL

Twitter E-mail

General

Target

0e08f1c06d2967a1c05222fd5eb87230a523a8b57f0d570331552df11a957713N
Size

872KB
MD5

4211756f84e940fcac731c0139d1fde0
SHA1

0c6f0096470973d55bde5506e0dfa0de3f911f98
SHA256

0e08f1c06d2967a1c05222fd5eb87230a523a8b57f0d570331552df11a957713
SHA512

a4d51b7624f9b516746612258c3e1a474e2ea2a4ee4d7b3ab05db9c12cab6ea905a302a8f16aac13b536bc6360d80cae500866980ec4c5241b6771bb0e82426e
SSDEEP

24576:+AooDM6YwNmQHWq4+AdNkOYkSrzDWsXfO+SsFBOBc:Roo7mQ2qmQdkAJPOHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e08f1c06d2967a1c05222fd5eb87230a523a8b57f0d570331552df11a957713N

Files

0e08f1c06d2967a1c05222fd5eb87230a523a8b57f0d570331552df11a957713N
.dll windows:5 windows x86 arch:x86

bfcaad6954c7dda1a89e73172d201488

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedExchangeAdd
ConvertDefaultLocale
HeapDestroy
VirtualFree
lstrlenA
SuspendThread
GetCommandLineA
UnlockFileEx
GetStartupInfoA
GetLogicalDriveStringsA
TerminateThread
LocalFree
OpenFileMappingA
GetCurrentThreadId
GetLocaleInfoA
InterlockedIncrement
RemoveDirectoryA
ExpandEnvironmentStringsA
GetThreadTimes
SetThreadPriority
CreateMutexA
GetVolumeInformationA
FindClose
LockResource
DeleteFileA
GetShortPathNameA
SetEnvironmentVariableA
DeviceIoControl
SetNamedPipeHandleState
VirtualProtect
CreateThread
GetTempPathA
FreeLibrary
GetFileAttributesExA
InterlockedExchange
AreFileApisANSI
LocalAlloc
SetEndOfFile
GetExitCodeProcess
GetCurrentThread
WaitForSingleObject
GetCurrentProcess
GetTickCount
LeaveCriticalSection
GetCPInfo
MultiByteToWideChar
SetFilePointer
DuplicateHandle
QueryPerformanceCounter
GetFileType
EnterCriticalSection
ExitProcess
CreateFileA
GetProcAddress
GetACP
ReleaseMutex
UnmapViewOfFile
GetProfileStringA
WideCharToMultiByte
GetCurrentProcessId
GlobalFree
FlushFileBuffers
LoadLibraryW
LockFileEx
GetFileSize
GetSystemTimeAsFileTime
SetLastError
GetThreadLocale
SetFileTime
OpenProcess
GetFileAttributesA
LoadResource
CreatePipe
GetComputerNameA
IsValidCodePage
GetModuleFileNameA
GlobalUnlock
GlobalMemoryStatus
SystemTimeToFileTime
PeekNamedPipe
GetWindowsDirectoryA
FormatMessageA
WriteFile
ReleaseSemaphore
GetTempFileNameA
DeleteCriticalSection
FindFirstFileA
SetErrorMode
GetStdHandle
CreateFileMappingA
GetFullPathNameA
GetProcessWorkingSetSize
ReadFile
CopyFileA
CreateProcessA
SetThreadExecutionState
TlsFree
GetProcessHeap
GetProcessAffinityMask
InterlockedDecrement
ResumeThread
GetDriveTypeA
UnlockFile
GetTempPathW
FindFirstFileExA
TerminateProcess
InterlockedCompareExchange
SizeofResource
SetCurrentDirectoryA
CreateSemaphoreA
CreateDirectoryA
MoveFileExW
SetThreadLocale
InitializeCriticalSection
FindNextFileA
SetUnhandledExceptionFilter
TlsSetValue
GetUserDefaultLCID
IsDBCSLeadByteEx
GlobalAlloc
GetVersionExA
LockFile
CloseHandle
LocalFileTimeToFileTime
GetFileTime
MapViewOfFile
GetProcessTimes
GetEnvironmentVariableA
GetExitCodeThread
IsValidLocale
HeapSize
GetLastError
GetFileSizeEx
GlobalSize
Sleep
TlsGetValue
GetSystemInfo
DeleteFileW
FileTimeToSystemTime
GlobalMemoryStatusEx
GetDiskFreeSpaceA
GetSystemTime
GlobalLock
FindResourceA
TlsAlloc
LoadLibraryA

user32

FindWindowExW
GetScrollInfo
DrawStateW
EnumThreadWindows
PostQuitMessage
SetMenuItemInfoW
ShowCaret
CreateAcceleratorTableW
DrawEdge
GetUpdateRect
SetClipboardData
RegisterClassW
EndDeferWindowPos
GetWindowTextLengthW
GetWindow
GetWindowLongW
ShowWindow
UnionRect
CreateMenu
DefWindowProcW
EnumWindows
GetClipboardData
IsWindow
DdeInitializeW
MoveWindow
GetSysColor
GetSubMenu
SetCursorPos
PtInRect
InvalidateRect
RemoveMenu
RegisterWindowMessageW
GetWindowTextW
ValidateRect
GetFocus
IsZoomed
GetMenuState
GetWindowRect
GetDC
LoadBitmapW
DrawFrameControl
SetWindowRgn
GetAsyncKeyState
FillRect
CopyRect
GetDesktopWindow
DrawIcon
EndMenu
TranslateAcceleratorW
DestroyAcceleratorTable
AdjustWindowRectEx
GetMessagePos
GetClipboardFormatNameW
DrawIconEx
SetMenu
UnhookWindowsHookEx
DrawFocusRect
ReleaseDC
AppendMenuW
ShowCursor
SetCursor
DdeDisconnect
ChangeDisplaySettingsW
GetClientRect
SetForegroundWindow
keybd_event
PostMessageW
ExitWindowsEx
SetTimer
GetCapture
LoadImageW
RedrawWindow
GetActiveWindow
GetMenuItemInfoW
BringWindowToTop
CreateIconIndirect
GetMessageW
HideCaret
IsWindowEnabled
GetDlgItem
DdeConnect
MsgWaitForMultipleObjects
LoadAcceleratorsW
SetWindowsHookExW
MessageBoxW
EnumClipboardFormats
GetWindowThreadProcessId
GetQueueStatus
GetClassNameW
GetCaretPos
EnableWindow
MapWindowPoints
GetKeyState
ReleaseCapture
DdeUninitialize
SystemParametersInfoW
LoadIconW
DrawTextW
GetMenuItemCount
DdeGetLastError
GetKeyboardState
CheckMenuRadioItem
GetForegroundWindow
CheckMenuItem
ModifyMenuW
DispatchMessageW
InflateRect
OpenClipboard
GetUpdateRgn
BeginPaint
GetMenu
WaitForInputIdle
DestroyMenu
OffsetRect
EnumDisplaySettingsW
ScrollWindow
DeferWindowPos
TranslateMessage
GetDoubleClickTime
ChildWindowFromPoint
SetWindowPos
GetIconInfo
DdeCreateStringHandleW
DdeQueryStringW
WindowFromPoint
GetSystemMenu
DdeCreateDataHandle
GetSystemMetrics
DdePostAdvise
SetWindowTextW
PostThreadMessageW
DdeNameService
ClientToScreen
GetWindowDC
EmptyClipboard
ScreenToClient
CreateDialogParamW
EndDialog
LoadCursorFromFileW
DdeGetData
PeekMessageW
UpdateWindow
IsDialogMessageW
EnableMenuItem
CreatePopupMenu
GetCursorPos
DrawMenuBar
CallWindowProcW
GetClipboardOwner
GetProcessWindowStation
IsClipboardFormatAvailable
IsIconic
KillTimer
GetOpenClipboardWindow
GetClassInfoW
InsertMenuItemW
UnregisterClassW
CloseClipboard
DdeFreeStringHandle
TrackPopupMenu
SetParent
DdeClientTransaction
IsWindowVisible
SetFocus
SetCapture
VkKeyScanW
DestroyWindow
SetScrollInfo
GetClipboardViewer
LoadCursorW
BeginDeferWindowPos
ToUnicode
InsertMenuW
EndPaint
GetInputState
GetMessageTime
MessageBeep
FlashWindow
DestroyIcon
DdeFreeDataHandle
CallNextHookEx
CreateDialogIndirectParamW
DestroyCursor
RegisterClipboardFormatW
GetParent
SetWindowLongW

gdi32

CreateBitmap
DeleteObject
CloseEnhMetaFile
CreateICW
GetMetaFileBitsEx
SetTextAlign
StretchDIBits
Ellipse
CreateDIBitmap
SetBkColor
SetPixel
RestoreDC
RealizePalette
GetNearestPaletteIndex
ExtFloodFill
GetClipBox
GetEnhMetaFileHeader
GetTextMetricsW
GdiFlush
SetViewportExtEx
GetDIBColorTable
GetTextColor
CopyEnhMetaFileW
Polygon
SetWindowOrgEx
PatBlt
Rectangle
MaskBlt
GetPixel
SetWindowExtEx
RoundRect
GetTextExtentExPointW
EnumFontFamiliesExW
SetWinMetaFileBits
CreateSolidBrush
SetROP2
GetRgnBox
GetDeviceCaps
SetMapMode
CreatePalette
PtInRegion
CreatePen
SelectObject
Pie
GetCharABCWidthsW
PolyPolygon
SetTextColor
ExtCreateRegion
SelectPalette
CreateRectRgnIndirect
ExtSelectClipRgn
ExcludeClipRect
DeleteDC
SelectClipRgn
RectInRegion
GetBkColor
GetEnhMetaFileW
GetRegionData
StretchBlt
CreateEnhMetaFileW
LineTo
SetMetaFileBitsEx
SetBkMode
GetSystemPaletteEntries
BitBlt
CreateBitmapIndirect
GetStockObject
CombineRgn
CreatePolygonRgn
SetPolyFillMode
OffsetRgn
ExtCreatePen
TextOutW
MoveToEx
GetDIBits
SetStretchBltMode
EqualRgn
CreateDIBSection
GetPaletteEntries
CreateCompatibleDC
CreatePatternBrush
DeleteEnhMetaFile
SetBrushOrgEx
Polyline
CreateCompatibleBitmap
PlayEnhMetaFile
CreateHatchBrush
GetTextExtentPoint32W
SaveDC
GetWinMetaFileBits
Arc
CreateRectRgn
CreateFontIndirectW
SetViewportOrgEx
GetObjectW

comdlg32

ChooseColorW
GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW
ChooseFontW

advapi32

RegDeleteValueW
GetUserNameW
RegCreateKeyW
LookupPrivilegeValueW
ControlService
OpenSCManagerW
RegOpenKeyExW
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyW
RegDeleteKeyW
AdjustTokenPrivileges
CloseServiceHandle
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW
OpenServiceW
RegSetValueExW
RegEnumValueW

shell32

DragQueryPoint
DragQueryFileW
SHFileOperationW
SHGetFolderPathW
SHGetSpecialFolderLocation
DragFinish
SHGetIconOverlayIndexW
SHGetFileInfoW
SHGetMalloc
SHBrowseForFolderW
DragAcceptFiles
ExtractIconW
Shell_NotifyIconW
SHGetPathFromIDListW
ShellExecuteExW
ExtractIconExW

ole32

CoFreeUnusedLibraries
CoCreateInstance
CoLockObjectExternal
RegisterDragDrop
OleSetClipboard
OleUninitialize
OleIsCurrentClipboard
ReleaseStgMedium
RevokeDragDrop
CoTaskMemFree
OleInitialize
OleFlushClipboard
OleGetClipboard
DoDragDrop

oleaut32

SysAllocString
SysStringLen

comctl32

CreateStatusWindowW
ImageList_Remove
ImageList_ReplaceIcon
ImageList_DragMove
ImageList_EndDrag
ord17
ImageList_GetIconSize
ImageList_DragEnter
ImageList_Replace
ImageList_BeginDrag
ImageList_DragLeave
ImageList_Create
ImageList_Draw
ImageList_SetBkColor
ImageList_GetIcon
ord16
ImageList_Add
ImageList_GetImageCount
ImageList_AddMasked
ImageList_SetDragCursorImage
ImageList_Destroy

winmm

PlaySoundW

wsock32

getsockopt
bind
select
inet_addr
WSACleanup
closesocket
recvfrom
WSAGetLastError
ntohs
socket
connect
setsockopt
gethostbyaddr
WSAStartup
getservbyname
gethostbyname
getsockname
recv
accept
WSASetLastError
listen
sendto
htonl
__WSAFDIsSet
inet_ntoa
htons
ntohl
shutdown
send
ioctlsocket
getpeername

mpr

WNetGetConnectionW

netapi32

NetShareEnum
NetApiBufferFree

ws2_32

WSASetEvent
WSAEnumNetworkEvents
WSACloseEvent
WSACreateEvent
WSAWaitForMultipleEvents
WSAEventSelect

secur32

QuerySecurityPackageInfoA

oledlg

ord6

msvcrt

wcsncpy
sqrt
fputc
frexp
_iob
wcscat
strftime
swprintf
bsearch
strrchr
exit
_close
log
ctime
_filelengthi64
tolower
strerror
towupper
fwrite
_stricmp
strcmp
ceil
_flsbuf
wcsspn
_open
_assert
tanh
fputwc
wcspbrk
srand
_getcwd
sin
fread
strcat
atexit
_filbuf
floor
_isctype
vfprintf
sscanf
wcsncmp
strcoll
fsetpos
strncmp
_cexit
fgetpos
_read
wcstoul
_wgetenv
wcsstr
clearerr
wcscpy
tan
fgetc
wcsftime
_fdopen
wcstod
longjmp
iswctype
_wtol
toupper
memcpy
ldexp
wcstol
gmtime
calloc
fgets
_get_osfhandle
mbstowcs
getwc
_telli64
strlen
setlocale
abort
strncpy
fprintf
_setmode
_wopen
atoi
atan
exp
clock
ungetwc
_wfopen
_wtoi
_wmkdir
signal
_wcsnicmp
free
putwc
_setjmp
__p__environ
fopen
fmod
_endthreadex
malloc
fputws
strtod
cos
__getmainargs
_commit
_wremove
strncat
strtol
mktime
_onexit
towlower
memset
_wrename
_wstati64
sinh
swscanf
strtoul
_strnicmp
pow
_beginthreadex
_wcsdup
fclose
__p__fmode
rand
fputs
ftell
_wsetlocale
_errno
memchr
strxfrm
puts
memmove
wcslen
log10
time
strcpy
setvbuf
modf
difftime
_open_osfhandle
_write
asin
_wcsicmp
strchr
atof
localtime
_lseeki64
realloc
qsort
ungetc
__set_app_type
cosh
_waccess
sprintf
fseek
wcscoll
fflush
wcschr
getenv
__mb_cur_max
_wrmdir
wcsxfrm
_pctype
wcscmp
atan2
strstr
acos

Sections

.text
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 383KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bfcaad6954c7dda1a89e73172d201488

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

wsock32

mpr

netapi32

ws2_32

secur32

oledlg

msvcrt

Sections

.text Size: 413KB - Virtual size: 413KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 383KB - Virtual size: 455KB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 413KB - Virtual size: 413KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 383KB - Virtual size: 455KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 5KB - Virtual size: 5KB