591354e5bbd2fd6eb92d2240db26822debac30e5de3cde320f4c9748dc218779N

Sharing

Copy URL

Twitter E-mail

General

Target

591354e5bbd2fd6eb92d2240db26822debac30e5de3cde320f4c9748dc218779N
Size

370KB
MD5

a0f0f7d461a52c20384b496cbf0df0b0
SHA1

3d11b914cdb8e16f26f08dc0b128c8a518ba63e1
SHA256

591354e5bbd2fd6eb92d2240db26822debac30e5de3cde320f4c9748dc218779
SHA512

c5986aa68c1586f0d39c92db42a88fe96d1673b1811e9c73f958d225ff2cc3edf4c005b1691e3587bb47b7d7e48c59db9fd43c37bfa9942f826b666642f9d6d7
SSDEEP

6144:WAnjHi/US8r4ftbXw3umrf0arO4f3M6YDQKpK:FC/DX6frDFPMx0KpK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
591354e5bbd2fd6eb92d2240db26822debac30e5de3cde320f4c9748dc218779N

Files

591354e5bbd2fd6eb92d2240db26822debac30e5de3cde320f4c9748dc218779N
.exe windows:5 windows x86 arch:x86

625bb23b8a8569649cad95e31495d680

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcpyW
lstrcpyA
lstrcmpiW
lstrcmpW
lstrcmpA
lstrcatW
WritePrivateProfileStringW
WritePrivateProfileSectionW
WriteFile
WriteConsoleOutputA
WideCharToMultiByte
VirtualProtect
UnmapViewOfFile
UnhandledExceptionFilter
TerminateProcess
SetUnhandledExceptionFilter
SetFilePointer
SetDefaultCommConfigW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MoveFileW
MoveFileExW
MapViewOfFile
LocalUnlock
LocalLock
LocalFree
LocalAlloc
LoadLibraryW
GlobalUnlock
GlobalLock
GlobalFree
GlobalFlags
GlobalAlloc
GetVersionExW
GetUserDefaultUILanguage
GetTickCount
GetThreadPriority
GetTempPathW
GetTempPathA
GetTempFileNameW
GetSystemWindowsDirectoryW
GetSystemWindowsDirectoryA
GetSystemTimeAsFileTime
GetSystemDefaultLangID
GetSystemDefaultLCID
GetStartupInfoW
GetProcAddress
GetModuleHandleA
GetLastError
GetFileSize
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetConsoleScreenBufferInfo
GetConsoleCP
GetCommConfig
GetACP
FormatMessageW
FlushInstructionCache
ExpandEnvironmentStringsW
EnumDateFormatsW
DeleteFileW
DebugBreak
CreateFileW
CreateFileMappingW
AddConsoleAliasW
CloseHandle
CancelIo
BuildCommDCBAndTimeoutsW
LoadLibraryA

user32

SetWindowWord
SetWindowLongW
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetLastErrorEx
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetCursor
SetClipboardData
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClipboardFormatW
RegisterClassExW
PtInRect
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
OemToCharA
MessageBoxW
MessageBeep
LoadStringW
LoadMenuW
LoadIconW
LoadCursorW
IsZoomed
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
InvertRect
InvalidateRect
ShowCaret
HideCaret
GetWindowTextW
GetWindowRect
GetWindowLongW
GetWindow
GetSystemMetrics
GetSysColor
GetParent
GetMonitorInfoA
GetMenuBarInfo
GetLastInputInfo
GetLastActivePopup
GetKeyboardLayoutList
GetKeyboardLayout
GetDlgItemTextW
GetDlgItem
GetDialogBaseUnits
GetDesktopWindow
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassWord
GetClassInfoExW
GetCapture
GetActiveWindow
FindWindowW
FillRect
EqualRect
EnumClipboardFormats
EndPaint
EndDialog
EnableWindow
EnableScrollBar
EmptyClipboard
DrawMenuBar
DrawIcon
DrawEdge
DispatchMessageW
DialogBoxParamW
DestroyCaret
ShowScrollBar
TranslateMessage
CloseDesktop
GetWindowContextHelpId
CharLowerW
GetAsyncKeyState
GetListBoxInfo
IsCharAlphaW
DestroyWindow
CloseWindowStation
GetInputState
IsClipboardFormatAvailable
GetClipboardViewer
wsprintfW
WinHelpW
UpdateWindow
IntersectRect
UnionRect
ActivateKeyboardLayout
BeginPaint
CharLowerBuffW
ClientToScreen
CloseClipboard
CopyRect
CreateCaret
CreateWindowExW
DdeCreateStringHandleA
DdeUnaccessData
DefWindowProcW
DeleteMenu
SetWindowTextW

gdi32

EngLineTo
EngQueryEMFInfo
EngStrokeAndFillPath
EnumFontFamiliesW
ExtTextOutA
ExtTextOutW
FONTOBJ_pQueryGlyphAttrs
FillRgn
FixBrushOrgEx
GdiDeleteLocalDC
GdiSetAttrs
GdiSetPixelFormat
GetBitmapBits
GetFontData
GetFontResourceInfoW
GetGraphicsMode
GetMetaFileBitsEx
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
OffsetRgn
EndPage
Rectangle
SelectFontLocal
SelectObject
SetBitmapBits
SetBkColor
SetColorSpace
SetFontEnumeration
SetTextColor
StartDocW
StretchBlt
StretchDIBits
StrokeAndFillPath
SwapBuffers
TranslateCharsetInfo
bMakePathNameW
PathToRegion
GetPolyFillMode
CreateHalftonePalette
CreateMetaFileA
GetStretchBltMode
CreatePatternBrush
FillPath
SetMetaRgn
WidenPath
GetEnhMetaFileA
EndDoc
EnableEUDC
DeleteObject
Ellipse
DeleteDC
CreateSolidBrush
CreateScalableFontResourceW
CreateRectRgnIndirect
CreatePolygonRgn
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
PatBlt
BitBlt

comdlg32

GetOpenFileNameW
ChooseFontW
GetSaveFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW

shell32

SHGetDataFromIDListA
Shell_NotifyIcon
ShellAboutW
DoEnvironmentSubstA
ExtractAssociatedIconExW
FindExecutableW
SHBrowseForFolder
SHFormatDrive
WOWShellExecute
SHGetDataFromIDListW
SHGetDesktopFolder
SHIsFileAvailableOffline
SHLoadNonloadedIconOverlayIdentifiers
SHPathPrepareForWriteW

shlwapi

StrStrIW
StrRStrIW
StrStrW

msvcrt

_exit
_ftol
_initterm
_onexit
_wcmdln
_wtoi
exit
free
malloc
qsort
wcschr
wcsrchr
wcsstr
wcstok
wcstol
_controlfp
_cexit
_c_exit
_adjust_fdiv
__wgetmainargs
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__dllonexit
__CxxFrameHandler
_XcptFilter
_except_handler3

imm32

ImmAssociateContext
ImmConfigureIMEW
ImmCreateContext
ImmDestroyContext
ImmEnumRegisterWordW
ImmEscapeW
ImmGetCompositionStringW
ImmGetConversionStatus
ImmIsIME
ImmRegisterWordW
ImmSetCompositionStringW
ImmSetConversionStatus

Sections

.text
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

625bb23b8a8569649cad95e31495d680

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

msvcrt

imm32

Sections

.text Size: 258KB - Virtual size: 258KB

.rdata Size: 77KB - Virtual size: 77KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 31KB - Virtual size: 31KB

.text
Size: 258KB - Virtual size: 258KB

.rdata
Size: 77KB - Virtual size: 77KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 31KB - Virtual size: 31KB