0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18

Sharing

Copy URL

Twitter E-mail

General

Target

0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18
Size

2.9MB
MD5

b9e847658a2b0d56d9de0ad547bde645
SHA1

cddcf2c6fec93db9e26add005e17d1901ac2c304
SHA256

0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18
SHA512

4517349ce584027c39ec6ca1db449b7130b80c129229be120287a21686a97a10b9edeffc3d266c2c46939227495ed0545e5150c498ed0ddf443e4c17e1c0a4e5
SSDEEP

49152:2GfcPi2jk/0r7K6yEeEtgawmVvPtht9bmG9EOLTqmThW4UfTXtLY4iGba6qrAbZw:2whQ7JgawqvPthS5ZOmr9sjGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18

Files

0cc6b6fc586e76a6c22f4add74af91080a952f00e767242f698f7c38b4846a18
.exe windows:6 windows x86 arch:x86

97edd4858e609a34258386bd8bf96bc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

MakeSureDirectoryPathExists

kernel32

GetShortPathNameW
WaitForMultipleObjects
LeaveCriticalSection
InitializeCriticalSection
InitializeCriticalSectionEx
WaitForSingleObject
HeapSize
CreateEventW
MultiByteToWideChar
GetLastError
SetEvent
LockResource
DeleteFileW
HeapReAlloc
CloseHandle
QueryDepthSList
ReleaseSemaphore
VirtualProtect
GetThreadTimes
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeZoneInformation
GetConsoleMode
GetConsoleOutputCP
GetFileType
FreeLibraryAndExitThread
ExitThread
InterlockedFlushSList
RtlUnwind
lstrcmpA
DeviceIoControl
EnterCriticalSection
K32EnumProcessModules
GetTempFileNameW
lstrcpyW
GetCurrentProcessId
K32EnumProcesses
SetFileAttributesW
OpenProcess
GetFileAttributesW
CreateFileW
FindClose
SetFilePointer
K32GetModuleFileNameExW
RemoveDirectoryW
TerminateProcess
WriteFile
GetSystemWindowsDirectoryW
GetSystemFirmwareTable
HeapFree
UnregisterWaitEx
RegisterWaitForSingleObject
OutputDebugStringA
GetModuleHandleExW
GetModuleHandleExA
GetModuleHandleA
SizeofResource
SetFilePointerEx
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
SetThreadPriority
lstrlenW
FindNextFileW
GetFullPathNameW
FindFirstFileW
GetStartupInfoW
GetTempPathW
CreateThread
InterlockedCompareExchange
InterlockedExchange
ResumeThread
GetVersion
ResetEvent
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
IsBadReadPtr
GetACP
ExitProcess
FreeResource
MulDiv
FlushFileBuffers
GetFileSizeEx
OpenFileMappingW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
DosDateTimeToFileTime
LocalFileTimeToFileTime
GetLocalTime
GetCurrentProcess
CreateProcessW
lstrcpynW
SetLastError
GetVersionExW
GetTickCount
VerifyVersionInfoW
VerSetConditionMask
LoadLibraryExW
lstrcmpiW
GetCurrentThreadId
SetErrorMode
lstrcmpW
WideCharToMultiByte
GetTickCount64
CreateMutexW
GetCommandLineW
GetPrivateProfileStringW
GetModuleFileNameW
WritePrivateProfileStringW
MoveFileW
CopyFileW
FreeLibrary
GetModuleHandleW
GetProcessHeap
DeleteCriticalSection
MoveFileExW
LocalFree
ReleaseMutex
GetStdHandle
GetProcAddress
HeapDestroy
DecodePointer
HeapAlloc
FindResourceW
LoadResource
SetEndOfFile
ReadFile
GetFileSize
FindResourceExW
LoadLibraryW
RaiseException
CreateDirectoryW
SetFileTime
GetCPInfo
GetLocaleInfoW
EncodePointer
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
InterlockedPushEntrySList
InterlockedPopEntrySList
GetNativeSystemInfo
FlushInstructionCache
VirtualAlloc
VirtualFree
LoadLibraryExA
FormatMessageW
GetStringTypeW
TryEnterCriticalSection
QueryPerformanceFrequency
DuplicateHandle
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThread

user32

IsWindowEnabled
EqualRect
InvalidateRgn
CreateAcceleratorTableW
PeekMessageW
WaitMessage
CallMsgFilterW
GetQueueStatus
MsgWaitForMultipleObjectsEx
SetFocus
LoadIconW
SetCapture
SetWindowLongW
GetClientRect
IsZoomed
UpdateLayeredWindow
KillTimer
PostQuitMessage
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetWindowDC
GetDesktopWindow
SystemParametersInfoW
GetParent
RegisterWindowMessageW
PtInRect
UpdateWindow
ReleaseCapture
SetForegroundWindow
InvalidateRect
LoadStringW
LoadImageW
DestroyIcon
UnregisterClassW
PostMessageW
MessageBoxW
CharNextW
DestroyWindow
DefWindowProcW
EndPaint
BeginPaint
GetCursorPos
RemovePropW
MoveWindow
GetIconInfo
ReleaseDC
GetMessageW
DispatchMessageW
TranslateMessage
CallWindowProcW
RegisterClassExW
LoadCursorW
GetClassInfoExW
CreateDialogParamW
FindWindowW
GetSystemMetrics
GetWindowLongW
GetWindow
GetWindowRect
GetDC
IsWindowVisible
SetWindowPos
MonitorFromWindow
CreateWindowExW
ScreenToClient
SendMessageW
ShowWindow
IsWindow
GetAsyncKeyState
SetTimer
GetMonitorInfoW
SwitchToThisWindow
MapWindowPoints
wsprintfW
EnableWindow
RegisterClassW
SetPropW
GetPropW
AdjustWindowRectEx
GetMenu
GetKeyState
GetUpdateRect
IsRectEmpty
UnionRect
IntersectRect
GetFocus
GetClassNameW
IsChild
CreateCaret
SetCaretPos
GetCaretBlinkTime
CopyRect
SetCursor
IsIconic
SetWindowRgn
OffsetRect
InflateRect
wvsprintfW
FindWindowExW
ShowCaret
HideCaret
ClientToScreen
GetSysColor
DrawIconEx
DrawTextW
SetRect
CharPrevW
GetDlgCtrlID
GetMessagePos
FillRect
DrawFocusRect

gdi32

TextOutW
GetStockObject
CreateFontIndirectW
CreatePen
Rectangle
GetTextColor
CreateSolidBrush
GetCharABCWidthsW
OffsetViewportOrgEx
CreateDCW
SetViewportOrgEx
RectVisible
SetWindowOrgEx
GetTextMetricsW
CreateRoundRectRgn
GetTextExtentPoint32W
GetDeviceCaps
GetClipBox
ExtSelectClipRgn
CombineRgn
SetStretchBltMode
SetBkMode
SetDIBColorTable
StretchBlt
SetBkColor
ExtTextOutW
SetTextColor
SetDIBitsToDevice
GetDIBits
BitBlt
CreateCompatibleBitmap
SaveDC
SelectObject
CreateDIBSection
CreateCompatibleDC
CreateRectRgnIndirect
DeleteDC
SelectClipRgn
GetObjectW
RestoreDC
DeleteObject

advapi32

SetSecurityDescriptorDacl
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegCloseKey
CheckTokenMembership
FreeSid
AllocateAndInitializeSid
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
GetTokenInformation
RegCreateKeyW
InitializeSecurityDescriptor
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
SHFileOperationW
Shell_NotifyIconW
SHChangeNotify
ShellExecuteW
SHCreateDirectoryExW
ord165

ole32

CLSIDFromString
CoCreateGuid
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc

oleaut32

SysAllocString
VariantClear
VariantInit
SysStringLen
SysFreeString
VarUI4FromStr
SysAllocStringLen

shlwapi

PathFindFileNameW
SHSetValueW
SHGetValueW
StrCpyW
PathCombineW
PathAppendW
PathIsDirectoryW
SHDeleteKeyW
PathFileExistsW
StrStrIW
PathFileExistsA
SHAutoComplete
StrCmpNIW
StrTrimA
StrCmpIW
PathIsDirectoryA
PathRemoveFileSpecW
StrStrIA
AssocQueryStringW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ord17
ImageList_DrawEx
ImageList_GetIconSize

msimg32

AlphaBlend
GradientFill

gdiplus

GdipCloneBrush
GdiplusStartup
GdipAlloc
GdipAddPathArc
GdipGetImagePixelFormat
GdipLoadImageFromFile
GdipDrawEllipseI
GdipClosePathFigure
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCloneBitmapAreaI
GdipBitmapUnlockBits
GdipDrawImagePointsI
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectRectI
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipFillPath
GdipCreateTexture
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipImageSelectActiveFrame
GdipDrawImageRectI
GdipGraphicsClear
GdipGetImageHeight
GdipGetImageWidth
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipFree
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipCloneImage
GdipFillEllipseI
GdipDeleteStringFormat
GdipDeleteBrush
GdipCreateSolidFill
GdipSetSmoothingMode
GdipDrawPath
GdipAddPathArcI
GdipAddPathLineI
GdipDeletePath
GdipCreatePath
GdipDrawRectangleI
GdipSetPenMode
GdipDrawLineI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipSetTextRenderingHint
GdipFillRectangleI
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDrawString
GdipCreateStringFormat
GdiplusShutdown

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

crypt32

CertGetNameStringW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

urlmon

URLDownloadToFileW
URLDownloadToCacheFileW

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod

wininet

InternetOpenW
DeleteUrlCacheEntryW
InternetReadFile
HttpOpenRequestW
HttpAddRequestHeadersA
InternetCloseHandle
InternetConnectW
HttpQueryInfoW
InternetGetConnectedState
InternetGetCookieExW
HttpQueryInfoA
HttpSendRequestW
InternetCrackUrlW
InternetSetCookieW

iphlpapi

GetAdaptersAddresses
GetAdaptersInfo

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 381KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97edd4858e609a34258386bd8bf96bc6

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

version

crypt32

wintrust

urlmon

winmm

wininet

iphlpapi

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 381KB - Virtual size: 380KB

.data Size: 37KB - Virtual size: 79KB

.rsrc Size: 344KB - Virtual size: 344KB

.reloc Size: 115KB - Virtual size: 115KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 381KB - Virtual size: 380KB

.data
Size: 37KB - Virtual size: 79KB

.rsrc
Size: 344KB - Virtual size: 344KB

.reloc
Size: 115KB - Virtual size: 115KB