5e3899c8f8aa9136b623b12ca5ca300bfd8b0dab307ea34505dee36f6b85bf98

Sharing

Copy URL

Twitter E-mail

General

Target

5e3899c8f8aa9136b623b12ca5ca300bfd8b0dab307ea34505dee36f6b85bf98
Size

756KB
MD5

6ea524eb2f884a82c16fbb3ecf1e6d03
SHA1

0f1ab72ad1522d198126a8b8df62d5f033e2cd4a
SHA256

5e3899c8f8aa9136b623b12ca5ca300bfd8b0dab307ea34505dee36f6b85bf98
SHA512

c36926be374e5fc14a9e943ff7726034b03361bdc8510f7569de55d275a31378cef9add06767f4d567b7639f7cfb104bead777a83051a83cbdb3cd3352c63121
SSDEEP

12288:weTBslq08I3L92xhqmqUVWFxjPj/jxEnU2vMQsK:5tI3L9WqdjPx67j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e3899c8f8aa9136b623b12ca5ca300bfd8b0dab307ea34505dee36f6b85bf98

Files

5e3899c8f8aa9136b623b12ca5ca300bfd8b0dab307ea34505dee36f6b85bf98
.exe windows:4 windows x86 arch:x86

ec99d108fd03acbc59a2a6c0a950d47a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadCodePtr
GetProfileStringA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
RaiseException
HeapFree
TerminateProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
GetOEMCP
GetCPInfo
GetThreadLocale
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
SetLastError
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MulDiv
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
CloseHandle
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
LoadLibraryW
ExitProcess
GetCurrentProcess
FindResourceA
SetStdHandle
LoadResource

user32

GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
PostThreadMessageA
LoadCursorA
DestroyCursor
LoadIconA
MapWindowPoints
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
GetWindowPlacement
MapDialogRect
GetWindow
SetWindowContextHelpId
wsprintfA
DestroyMenu
LoadMenuA
LoadAcceleratorsA
SetFocus
ShowWindow
SetWindowPos
MoveWindow
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
InvertRect
GetMenuCheckMarkDimensions
GetMenuState
GetNextDlgGroupItem
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
KillTimer
SetTimer
InvalidateRect
GetUpdateRect
ScreenToClient
IntersectRect
PtInRect
GetCursorPos
UpdateWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
EnableWindow
CharNextA
LoadStringA
IsWindow
GetWindowLongA
CallWindowProcA
IsZoomed
DrawFrameControl
GetClassLongA
DrawIconEx
DrawCaption
IsIconic
SetWindowLongA
GetWindowRect
SendMessageA
AppendMenuA
CreateMenu
MapVirtualKeyA
SetCapture
GetTabbedTextExtentA
FindWindowA
CharUpperA
SendDlgItemMessageA
MessageBeep
GetKeyNameTextA
GetMenuItemCount
SetMenuItemInfoA
CopyAcceleratorTableA
LoadBitmapA
InflateRect
DrawEdge
DrawStateA
OffsetRect
CopyRect
DestroyIcon
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
GetSysColor
GetParent
GetSysColorBrush
GetMenuStringA
InsertMenuA
GetClassNameA
WindowFromPoint
GetSystemMenu
DeleteMenu
IsRectEmpty
SetParent
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
RedrawWindow
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
SetRectEmpty
FillRect
SetRect
ModifyMenuA
GetDC
ReleaseDC

gdi32

CreateDCA
DeleteDC
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
SetAbortProc
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
StretchDIBits
GetCharWidthA
CreateFontA
GetTextExtentPoint32A
GetTextMetricsA
GetMapMode
SetRectRgn
GetTextColor
LPtoDP
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
StartDocA
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
CreatePen
DPtoLP
Rectangle
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
CreateSolidBrush
GetBkColor
GetStockObject
RectInRegion
CreateRectRgnIndirect
CombineRgn
DeleteObject
CreateCompatibleBitmap
CreateBitmap
PatBlt
Ellipse
BitBlt
CreateCompatibleDC
GetObjectA
SelectObject
CreateRectRgn
CreateDIBitmap
GetTextExtentPointA
CreateFontIndirectA

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegSetValueA
RegQueryValueA

shell32

ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA

comctl32

ImageList_GetImageCount
ImageList_AddMasked
ImageList_GetIcon
ImageList_Draw
ImageList_GetImageInfo
ImageList_SetBkColor
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec99d108fd03acbc59a2a6c0a950d47a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 280KB - Virtual size: 276KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 396KB - Virtual size: 392KB

.text
Size: 280KB - Virtual size: 276KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 396KB - Virtual size: 392KB