9046c01b267712d206c7e21fa894f94909602358bbf79e633bb5fd1be26b0540

Sharing

Copy URL Twitter E-mail

General

Target

9046c01b267712d206c7e21fa894f94909602358bbf79e633bb5fd1be26b0540
Size

588KB
MD5

a430f9b36cf4a975c2e6f0c8952c0887
SHA1

a7c21a0ff6546f2f9d116210b56f569aa67ed6f5
SHA256

9046c01b267712d206c7e21fa894f94909602358bbf79e633bb5fd1be26b0540
SHA512

1382b5465ebd831eeb8fb20ac465d963f899134376d405f8467512ef1ed8392923379174d52c16f905495498f59ecbbf8f89397899b36ec59061fde441ed64a0
SSDEEP

12288:r2/phMZBIz6CTmiubk+Vu0eSjVVYgeLTwDSY15HZ:rFBE63iuN9/VVZeeSov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9046c01b267712d206c7e21fa894f94909602358bbf79e633bb5fd1be26b0540

Files

9046c01b267712d206c7e21fa894f94909602358bbf79e633bb5fd1be26b0540
.exe windows x86

0c7017cf17643d37a0c28790357642ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netsdk

Net_AddCamera
Net_QueryTimeSetup
Net_TimeSetup
Net_FileUpdate
Net_DisConnCamera
Net_DelCamera
Net_BlackWhiteListSend
Net_Log
Net_ConnCamera

kernel32

GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
GetTickCount
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetDriveTypeA
FindFirstFileA
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
GetStdHandle
DuplicateHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEnvironmentVariableA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FileTimeToSystemTime
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetVersionExW
GetThreadLocale
InterlockedIncrement
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetModuleHandleA
InterlockedDecrement
GetModuleHandleW
GetLastError
SetLastError
FormatMessageW
LocalFree
MulDiv
FindClose
FindNextFileW
FindFirstFileW
CreateDirectoryW
Sleep
DeleteCriticalSection
WaitForSingleObject
InitializeCriticalSection
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryW
DeleteFileW
CloseHandle
TerminateThread
GetLocalTime
lstrlenA
lstrlenW
MultiByteToWideChar
WritePrivateProfileStringW
GetPrivateProfileIntW
GetLongPathNameW
GetModuleFileNameW
GetPrivateProfileStringW
LockResource
CreateProcessW
GlobalUnlock
GlobalFree
GlobalLock
FreeResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceW
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA

user32

RegisterClipboardFormatW
ReleaseCapture
SetCapture
UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
CharNextW
GetWindowThreadProcessId
SetCursor
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetCursorPos
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetForegroundWindow
DispatchMessageW
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowTextLengthW
GetWindowTextW
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
CharUpperW
GetMenuItemCount
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
GetLastActivePopup
GetSubMenu
GetSysColor
KillTimer
SetWindowRgn
SetTimer
IsRectEmpty
DrawIcon
IsIconic
AppendMenuW
GetSystemMenu
LoadIconW
MessageBoxW
PostMessageW
GetMessageW
PostThreadMessageW
ReleaseDC
GetDC
GetClientRect
SetWindowLongW
GetWindowLongW
CallWindowProcW
GetParent
TrackMouseEvent
DrawTextW
FillRect
CopyRect
GetClassNameW
GetSystemMetrics
EnableWindow
SendMessageW
GetWindowRect
InvalidateRect
CreateWindowExW
UnregisterClassA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
PtVisible
CreateBitmap
OffsetViewportOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetMapMode
GetRgnBox
GetWindowExtEx
GetViewportExtEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
DeleteObject
CreateFontW
CreateCompatibleBitmap
BitBlt
GetObjectW
SetDIBColorTable
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
GetClipBox
SetMapMode
SetStretchBltMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetTextExtentPoint32W
SetTextColor
CreatePen
SetBkMode
CreateSolidBrush
SelectClipRgn
CreateRoundRectRgn
GetStockObject
Rectangle
GetDIBColorTable
StretchBlt
RectVisible

msimg32

AlphaBlend
TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
StrCmpLogicalW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemFree

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocString
SysAllocStringLen

urlmon

URLDownloadToFileW

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdiplusStartup
GdipDrawImageI
GdipDisposeImage
GdipGetImageHeight
GdipGetImageGraphicsContext
GdipAlloc
GdipCloneImage
GdipFree
GdiplusShutdown
GdipGetImageWidth

ws2_32

gethostbyname
inet_addr

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c7017cf17643d37a0c28790357642ca

Headers

File Characteristics

Imports

netsdk

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

gdiplus

ws2_32

Sections

.text Size: 340KB - Virtual size: 339KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 148KB - Virtual size: 147KB

.text
Size: 340KB - Virtual size: 339KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 148KB - Virtual size: 147KB