af06b10c86ecaf3a56649aaffa58cf37bc6a3dd6ea78a1fb1b550cf120d109a5

Sharing

Copy URL

Twitter E-mail

General

Target

af06b10c86ecaf3a56649aaffa58cf37bc6a3dd6ea78a1fb1b550cf120d109a5
Size

424KB
MD5

351505f8c93a1851e0de3a85ea7312de
SHA1

546f12f6eeb1b7d57be75db3383a7055c1ed298e
SHA256

af06b10c86ecaf3a56649aaffa58cf37bc6a3dd6ea78a1fb1b550cf120d109a5
SHA512

07e6118d93c25314daeb7242bb3e762bd640c80c4f3366e2bce8b0f8cff80b6f1b148ced685aeebd6fdb33f0fbffdd0b2104207cab669f6240885c53a9250065
SSDEEP

6144:+pkxaStbvBFscy65+Wf7AP5H08e7pV1oRUOeGbfUTpYDDmu/+3fb3:/jtbvM/hi7A6H1oRAG+pG/Y3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af06b10c86ecaf3a56649aaffa58cf37bc6a3dd6ea78a1fb1b550cf120d109a5

Files

af06b10c86ecaf3a56649aaffa58cf37bc6a3dd6ea78a1fb1b550cf120d109a5
.exe windows:4 windows x86 arch:x86

49781acc59d53e2ecea7c643b33b5d0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetFileType
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStdHandle
GetProfileStringA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
HeapFree
TerminateProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
SetLastError
MulDiv
LocalFree
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetFileAttributesA
GetProfileIntA
SearchPathA
lstrcpynA
GetTempPathA
GetTempFileNameA
LoadLibraryA
FreeLibrary
GetCurrentProcess
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
CloseHandle
GetModuleFileNameA
GlobalAlloc
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
lstrcmpiA
lstrlenA
ExitProcess
LoadLibraryExA
GetProcAddress

user32

FindWindowA
IsRectEmpty
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
InflateRect
SetRectEmpty
TranslateAcceleratorA
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
SetParent
DeleteMenu
CharUpperA
GetClassNameA
InsertMenuA
GetSysColorBrush
DestroyIcon
GetTabbedTextExtentA
SetTimer
KillTimer
WindowFromPoint
InvertRect
GetDCEx
LockWindowUpdate
LoadIconA
MapWindowPoints
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
PtInRect
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
DestroyMenu
LoadMenuA
LoadAcceleratorsA
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
GetSystemMenu
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
UpdateWindow
FillRect
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SendMessageA
IsChild
InvalidateRect
GetMenu
GetMenuStringA
CreatePopupMenu
AppendMenuA
GetClientRect
GetSysColor
GetDC
SetRect
LoadCursorA
DestroyCursor
RemoveMenu
SetCapture
wsprintfA
ReleaseDC
EnableWindow
ReleaseCapture
GetWindow

gdi32

GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateDCA
DeleteDC
LPtoDP
SaveDC
RestoreDC
SelectObject
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreatePen
DeleteObject
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
GetTextExtentPoint32A
GetTextMetricsA
StretchDIBits
GetCharWidthA
CreateFontA
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
DPtoLP
Rectangle
GetStockObject
PatBlt
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateICA
RealizePalette
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBitmap
GetTextExtentPointA
GetDeviceCaps

comdlg32

PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

shell32

DragAcceptFiles
DragQueryFileA
DragFinish
SHGetFileInfoA
ExtractIconA

comctl32

ord17

oleaut32

OleLoadPicturePath

Sections

.text
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

49781acc59d53e2ecea7c643b33b5d0a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oleaut32

Sections

.text Size: 188KB - Virtual size: 186KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 52KB - Virtual size: 64KB

.rsrc Size: 24KB - Virtual size: 21KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 188KB - Virtual size: 186KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 52KB - Virtual size: 64KB

.rsrc
Size: 24KB - Virtual size: 21KB

.text
Size: 108KB - Virtual size: 108KB