493a9ab2b8dbbb88ec67da1455fb983863bd05c9f77ca1585989481b7957965a

Sharing

Copy URL

Twitter E-mail

General

Target

493a9ab2b8dbbb88ec67da1455fb983863bd05c9f77ca1585989481b7957965a
Size

530KB
MD5

fd24684bb5d5795fea324ba6408b2e9b
SHA1

6cb99d53b75e8cb2a93aa492f08eb5ba62056036
SHA256

493a9ab2b8dbbb88ec67da1455fb983863bd05c9f77ca1585989481b7957965a
SHA512

61a96b6b82be84aa64be6f2e3e386d439d8ad62d392704a2cbcb90791a5a9e13ef61d378beb8dba88b1babbf49b765f3b6309b7fd1c820e15542d686a61377cf
SSDEEP

12288:rOtPhWZr36fW65GaxSnxoKR6sNOtsRCoWX30:+ur3CW6VcxZTNOtsRi30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/34f3c3c4bb63b2786f137fb17e943a0ea9abb8dc2a74da27c5d4b480525856fc

Files

493a9ab2b8dbbb88ec67da1455fb983863bd05c9f77ca1585989481b7957965a
.zip
34f3c3c4bb63b2786f137fb17e943a0ea9abb8dc2a74da27c5d4b480525856fc
.dll regsvr32 windows:4 windows x86 arch:x86

d912f984e2094116df83ddb751c9d2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalDeleteAtom
GlobalAlloc
lstrcmpW
lstrcmpA
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventW
GlobalAddAtomW
FreeResource
GlobalFree
GlobalFindAtomW
LocalFree
FormatMessageW
GlobalSize
CopyFileW
GlobalFlags
LocalAlloc
GlobalReAlloc
CreateFileW
LocalReAlloc
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
lstrlenA
GlobalGetAtomNameW
GetAtomNameW
GetVersionExW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
MulDiv
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
ReadFile
LoadLibraryW
lstrcmpiW
lstrlenW
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
GetModuleFileNameW
GetModuleHandleW
GlobalLock
GlobalUnlock
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
GetTimeZoneInformation
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
InitializeCriticalSection
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
ExitThread
CreateThread
VirtualProtect
GetSystemInfo
VirtualQuery
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
Sleep
GetModuleFileNameA
GetStdHandle
WriteFile
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThread
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetProcAddress
RaiseException
GetProcessHeap
GetVersionExA
GetCommandLineA
GetCurrentThreadId
HeapAlloc
HeapFree
GetLastError
RtlUnwind
LoadResource
LockResource
SizeofResource
FindResourceW
ExitProcess
GlobalHandle

user32

LockWindowUpdate
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
GetDialogBaseUnits
DestroyIcon
GetSysColorBrush
WaitMessage
ReleaseCapture
LoadCursorW
WindowFromPoint
SetCapture
DeleteMenu
UnregisterClassW
InsertMenuW
RemoveMenu
GetMenuStringW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
ScrollWindowEx
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetDCEx
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
MapVirtualKeyW
GetKeyNameTextW
CopyRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
PostThreadMessageW
UnionRect
SetParent
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
LoadMenuW
LoadAcceleratorsW
InsertMenuItemW
GetMessagePos
CreatePopupMenu
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
LoadBitmapW
CharUpperW
UnhookWindowsHookEx
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
PtInRect
KillTimer
SetTimer
GetClientRect
IsIconic
DrawIcon
GetSystemMetrics
SendMessageW
GetSystemMenu
AppendMenuW
ShowWindow
LoadIconW
EnableWindow
FillRect
SetRect
GetDC
ReleaseDC
LoadImageW
GetScrollPos
UnregisterClassA

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
GetViewportExtEx
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
OffsetWindowOrgEx
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
GetDCOrgEx
CreateFontIndirectW
GetTextExtentPoint32W
CopyMetaFileW
CreateDCW
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
GetCharWidthW
CreateFontW
SelectClipPath
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
ExtCreatePen
CreatePalette
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
SetDIBColorTable
GetPixel
CreateDiscardableBitmap
CreateSolidBrush
GetPaletteEntries
GetDIBColorTable
BitBlt
CreateCompatibleDC
GetObjectW
GetDIBits
SelectObject
CreateDIBSection
GdiFlush
StretchDIBits
GetDeviceCaps
RealizePalette
SetDIBitsToDevice
DeleteObject
GetWindowExtEx

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegSetValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegCreateKeyW

shell32

ExtractIconW
DragFinish
DragQueryFileW
SHGetFileInfoW

shlwapi

PathIsUNCW
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
StringFromGUID2
CoCreateInstance
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
OleDuplicateData
CoRevokeClassObject
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleSetClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoTreatAsClass

oleaut32

VariantTimeToSystemTime
LoadTypeLi
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
SysFreeString
OleCreatePictureIndirect
SysAllocStringLen
VariantClear
VariantChangeType
SysStringLen
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
VariantInit

msvfw32

DrawDibSetPalette
DrawDibRealize
DrawDibDraw
DrawDibOpen
DrawDibClose

Exports

Exports

DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 536KB - Virtual size: 535KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d912f984e2094116df83ddb751c9d2cc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

msvfw32

Exports

Exports

Sections

.text Size: 536KB - Virtual size: 535KB

.rdata Size: 112KB - Virtual size: 108KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 280KB - Virtual size: 278KB

.reloc Size: 56KB - Virtual size: 54KB

.text
Size: 536KB - Virtual size: 535KB

.rdata
Size: 112KB - Virtual size: 108KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 280KB - Virtual size: 278KB

.reloc
Size: 56KB - Virtual size: 54KB