597ba31a26c463381000e9099f8523a170a6ffc345161a9e1ab721648f70b132[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

597ba31a26c463381000e9099f8523a170a6ffc345161a9e1ab721648f70b132.exe
Size

696KB
MD5

36e05cdbffc1da49c238d365f18edaef
SHA1

3b2bd329bdcfc058bc494ad0597f183d433b4289
SHA256

597ba31a26c463381000e9099f8523a170a6ffc345161a9e1ab721648f70b132
SHA512

642a4f7992a15f9bbdc049397f70c1e1e4c8b076479ca56d186e03bb199ba606e6eeda094c2f08905908f4083a8a56f320f6e65ca8e87e1cf84e1b2fb5ce2247
SSDEEP

12288:FqQlvIOH0GCTBHmPt4eBQhDico09cDlB4Vx/ID/:0uH0GCNeQ1i7H0e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
597ba31a26c463381000e9099f8523a170a6ffc345161a9e1ab721648f70b132.exe

Files

597ba31a26c463381000e9099f8523a170a6ffc345161a9e1ab721648f70b132.exe
.dll windows:4 windows x86 arch:x86

d8c52655a835ecb2c6fea489c7c7674b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RaiseException
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
Sleep
GetStdHandle
GetACP
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RtlUnwind
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
GetCurrentDirectoryA
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetProfileIntA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetThreadLocale
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetFileSize
CreateFileA
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleFileNameA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
LocalAlloc
LocalLock
LocalUnlock
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
FreeLibrary
InterlockedDecrement
GlobalFree
FreeResource
GlobalLock
GlobalUnlock
GetModuleHandleA
GetProcAddress
SetLastError
GetTickCount
MulDiv
lstrcpynA
LoadLibraryA
ExitProcess
GetVersion
CompareStringA
LockResource
lstrcmpiA
GetLastError
InterlockedExchange
GetStringTypeExA
lstrlenW
MultiByteToWideChar
CompareStringW
SizeofResource
WideCharToMultiByte
LoadResource
lstrlenA
FindResourceA
GlobalMemoryStatus
GetStringTypeA

user32

SetCapture
GetDCEx
FindWindowA
SetWindowRgn
DestroyIcon
LockWindowUpdate
ShowOwnedPopups
PostQuitMessage
LoadCursorA
DestroyCursor
GetTabbedTextExtentA
MessageBeep
IsClipboardFormatAvailable
RedrawWindow
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
SetParent
WindowFromDC
InSendMessage
ClipCursor
GetCursorPos
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetWindowThreadProcessId
SetCursor
ReleaseCapture
InsertMenuItemA
CreatePopupMenu
SetMenu
TranslateAcceleratorA
InvalidateRect
SetRectEmpty
ShowWindow
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
DeleteMenu
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
PostMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
CopyRect
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
IsWindow
GetWindowLongA
EnableWindow
GetSystemMetrics
SetRect
LoadAcceleratorsA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
WindowFromPoint
GetMenuItemInfoA
UnregisterClassA
GetSysColorBrush
RegisterClipboardFormatA
GetMessageA
TranslateMessage
BeginDeferWindowPos
ValidateRect
GetClientRect
DrawIcon
wsprintfA
CharUpperA
LoadIconA
FillRect
MessageBoxA
IsZoomed
SendMessageA
IsWindowVisible
IsRectEmpty
InflateRect
UpdateWindow
SetWindowTextA
SetWindowPos
ReleaseDC
CreateWindowExA
BringWindowToTop
SetWindowLongA
GetDC
GetParent
GetFocus
KillTimer
GetWindowRect
SetTimer
DestroyWindow
IsIconic
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
DeleteDC
CreatePatternBrush
CreatePen
CreateSolidBrush
CopyMetaFileA
CreateDCA
GetCharWidthA
CreateFontA
StretchDIBits
SetBrushOrgEx
CreateMetaFileA
SetWindowOrgEx
DeleteMetaFile
GetTextExtentPoint32A
DPtoLP
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
GetViewportOrgEx
GetBkColor
UnrealizeObject
GetTextAlign
GetWindowOrgEx
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextFaceA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
CloseMetaFile
GetStockObject
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
CreateFontIndirectA
GetObjectA
GetTextMetricsA
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetWindowExtEx

comdlg32

GetFileTitleA

winspool.drv

GetJobA
DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
RegCloseKey
RegCreateKeyA

shell32

DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragAcceptFiles

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRegisterClassObject
CoRevokeClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleLockRunning
CoRegisterMessageFilter
OleSetClipboard
CreateFileMoniker
StgCreateDocfile
CoDisconnectObject
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegEnumVerbs
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
StringFromCLSID
OleRegGetUserType
WriteClassStg
CoTaskMemFree
CoLockObjectExternal
OleRun
GetRunningObjectTable
OleIsRunning
StgIsStorageFile
StgOpenStorage

oleaut32

SysStringLen
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString

Exports

Exports

Control_RunDLL

Sections

.text
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8c52655a835ecb2c6fea489c7c7674b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 348KB - Virtual size: 345KB

.rdata Size: 100KB - Virtual size: 98KB

.data Size: 156KB - Virtual size: 169KB

.rsrc Size: 40KB - Virtual size: 38KB

.reloc Size: 48KB - Virtual size: 47KB

.text
Size: 348KB - Virtual size: 345KB

.rdata
Size: 100KB - Virtual size: 98KB

.data
Size: 156KB - Virtual size: 169KB

.rsrc
Size: 40KB - Virtual size: 38KB

.reloc
Size: 48KB - Virtual size: 47KB