3efb00d420efb7ad28ac86ed70228c227cb2a959c7e2368dc9764b167a4e0710

Sharing

Copy URL Twitter E-mail

General

Target

3efb00d420efb7ad28ac86ed70228c227cb2a959c7e2368dc9764b167a4e0710
Size

1.0MB
MD5

8b9468ba88a8945832d52667ac783429
SHA1

c0be7b2b0652083fe8007d2eb00aaa086c5b5680
SHA256

3efb00d420efb7ad28ac86ed70228c227cb2a959c7e2368dc9764b167a4e0710
SHA512

542bd4534939ef2c98f01a2e94095fd09485aa1da2a7144dfbbcdd61cce72939b951c38d5e9cd5a18df3850990fd9ae1af6227b244dcd7450af57e2deece3693
SSDEEP

24576:YRt9wYADov9NQdkjow0V5infMY/L9OQkQpWqPD8L7+uDXlHg4TEJ66Sft:ut6DYNV5HkY/HHPKqs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3efb00d420efb7ad28ac86ed70228c227cb2a959c7e2368dc9764b167a4e0710

Files

3efb00d420efb7ad28ac86ed70228c227cb2a959c7e2368dc9764b167a4e0710
.exe windows x86

55d20e81616c09dfb4f2a9f86497ba11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dog_windows_3153203

ord22
ord3
ord15
ord17
ord13
ord4
ord14

kernel32

HeapSize
HeapReAlloc
GetACP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateThread
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
GetTimeZoneInformation
HeapFree
RtlUnwind
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
Sleep
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
DeleteFileA
GetLocalTime
MoveFileA
FileTimeToSystemTime
SystemTimeToFileTime
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
GetProfileStringA
GetTickCount
WaitForSingleObject
GetTempFileNameA
Beep
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateFileA
CloseHandle
GetLastError
WriteFile
ReadFile
SetEvent
OpenFileMappingA
CreateEventA
GetModuleFileNameA
SetThreadExecutionState
CreateMutexA
LoadLibraryA
GetProcAddress
DeviceIoControl
GetVersionExA
FreeLibrary
GetSystemTime
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
InterlockedIncrement
InterlockedDecrement
lstrlenA
TerminateProcess
SetLastError
MulDiv
LocalFree
lstrcpynA
ResumeThread
SetThreadPriority
SuspendThread
FindClose
FindFirstFileA
FindNextFileA
lstrcmpA
GetCurrentThread
GetFullPathNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
FileTimeToLocalFileTime
GetCurrentDirectoryA
DuplicateHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileSize
LocalFileTimeToFileTime
SetErrorMode
ExitThread

user32

IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
EnableMenuItem
SetDlgItemTextA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
CreateDialogIndirectParamA
EndDialog
wvsprintfA
LoadStringA
ValidateRect
GetMessageA
IsZoomed
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PostQuitMessage
ShowOwnedPopups
GetClassNameA
GetSysColorBrush
InsertMenuA
DeleteMenu
CharUpperA
FindWindowA
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
GetSystemMetrics
LoadBitmapA
IsWindow
LoadIconA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
PeekMessageA
DrawEdge
ChildWindowFromPointEx
GetCursorPos
UpdateWindow
DrawMenuBar
SystemParametersInfoA
RemoveMenu
GetMenu
GetMenuItemCount
GetMenuStringA
CheckMenuRadioItem
IsWindowVisible
KillTimer
DrawIcon
ScreenToClient
ClipCursor
SetTimer
LoadAcceleratorsA
TranslateAcceleratorA
GetAsyncKeyState
FrameRect
LoadMenuA
LoadImageA
GetIconInfo
CreateIconIndirect
FillRect
DrawStateA
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
IsWindowUnicode
InvalidateRect
ReleaseDC
SetRectEmpty
IsRectEmpty
SetFocus
GetWindowRect
LoadCursorA
SetCursor
SetRect
SetParent
DrawFrameControl
CopyRect
DrawTextA
OffsetRect
ReleaseCapture
SetCapture
GetDC
PtInRect
GetSysColor
InflateRect
CharNextA
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetFocus
GetClientRect
GetKeyState
EnableWindow
SendMessageA
PostMessageA
GetParent
TranslateMessage
DispatchMessageA
CheckMenuItem
IsIconic

gdi32

GetTextExtentPointA
GetWindowOrgEx
GetTextFaceA
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetTextColor
GetNearestColor
GetBkColor
LPtoDP
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
GetCharWidthA
StretchDIBits
CombineRgn
SetRectRgn
CreateRectRgnIndirect
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocA
GetClipBox
CreateFontA
GetTextMetricsA
GetCurrentObject
Ellipse
CreatePen
CreateDCA
GetDeviceCaps
CreateDIBSection
GetPixel
SetPixel
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
CreateSolidBrush
RoundRect
GetObjectA
CreateFontIndirectA
PatBlt
DPtoLP
SelectObject
GetStockObject
Rectangle
GetTextExtentPoint32A
CreateDIBitmap

comdlg32

ChooseColorA
GetFileTitleA
PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
ShellExecuteExA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy

gts

GT_AlarmOn
GT_LmtsOn
GT_SetCaptureSense
GT_EncOn
GT_StepDir
GT_CtrlMode
GT_EncSns
GT_LmtSns
GT_SetDo
GT_Reset
GT_Close
GT_SetEncPos
GT_SetPrfPos
GT_GetEncPos
GT_AlarmOff
GT_GetCaptureStatus
GT_Update
GT_SetPos
GT_SetVel
GT_SetTrapPrm
GT_PrfTrap
GT_GetPrfVel
GT_SetCaptureMode
GT_ClearCaptureStatus
GT_SetBacklash
GT_LaserPowerMode
GT_LaserPrfCmd
GT_SetHSIOOpt
GT_BufLaserFollowRatioEx
GT_BufLaserFollowModeEx
GT_LaserOutFrq
GT_SetDac
GT_GetDo
GT_GetHSIOOpt
GT_ClrSts
GT_AxisOn
GT_AxisOff
GT_LmtsOff
GT_ZeroPos
GT_SetStopDec
GT_Open
GT_GetPrfPos
GT_SetCrdPrm
GT_CrdClear
GT_SetupLookAheadCrd
GT_InitLookAheadEx
GT_SetCrdStopDec
GT_CrdDataEx
GT_SetOverride
GT_CrdSpace
GT_BufIOEx
GT_BufLaserOnEx
GT_BufLaserOffEx
GT_CrdStart
GT_LnXYEx
GT_Stop
GT_GetCrdVel
GT_CrdStatus
GT_GetDi
GT_SetCardNo
GT_GetSts
GT_GetDiRaw

ws2_32

WSAStartup
WSACleanup
closesocket
htons
socket
send
inet_addr
sendto
recvfrom

Sections

.text
Size: 776KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_BSS
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55d20e81616c09dfb4f2a9f86497ba11

Headers

File Characteristics

Imports

dog_windows_3153203

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

gts

ws2_32

Sections

.text Size: 776KB - Virtual size: 773KB

.rdata Size: 104KB - Virtual size: 102KB

.data Size: 48KB - Virtual size: 134KB

_BSS Size: 4KB - Virtual size: 32B

.rsrc Size: 108KB - Virtual size: 105KB

.text
Size: 776KB - Virtual size: 773KB

.rdata
Size: 104KB - Virtual size: 102KB

.data
Size: 48KB - Virtual size: 134KB

_BSS
Size: 4KB - Virtual size: 32B

.rsrc
Size: 108KB - Virtual size: 105KB