5f6fbf4afd53b27a9f52d000f2b0d216ec8b5f23822b34b0d5d04f9aca6d605a

Sharing

Copy URL Twitter E-mail

General

Target

5f6fbf4afd53b27a9f52d000f2b0d216ec8b5f23822b34b0d5d04f9aca6d605a
Size

624KB
MD5

86f5a86416a2af9a53e3fd62ba04d61d
SHA1

f0e7bb445dc1b4e6eb4b12c088155be3ede8694a
SHA256

5f6fbf4afd53b27a9f52d000f2b0d216ec8b5f23822b34b0d5d04f9aca6d605a
SHA512

8fcd329ab84ff0d3a1aa3545d283d90104129a745c8b746365cc55c8e61a3f294f6ce125c1cfbd468946942d3991200a07125dd2929b1875a3ff5d7b8a443f0a
SSDEEP

12288:qLvTwCXi8lwtNCFY5hH1Ygm/Ll4tl+eIO9CVRiMi7c:qkhOgyl43AACVRRi7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f6fbf4afd53b27a9f52d000f2b0d216ec8b5f23822b34b0d5d04f9aca6d605a

Files

5f6fbf4afd53b27a9f52d000f2b0d216ec8b5f23822b34b0d5d04f9aca6d605a
.exe windows x86

ab7028c689eda741357257b2e53cc729

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipCloneBrush
GdipCreateBitmapFromHBITMAP
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromScan0
GdipFillEllipseI
GdipCreatePen1
GdipDrawEllipseI
GdipDeletePen
GdipDeleteBrush
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipCloneImage
GdipAlloc
GdiplusShutdown
GdipFree
GdipLoadImageFromStream
GdipCreateFromHDC
GdipCreateImageAttributes
GdipSetImageAttributesRemapTable
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageType
GdipDrawImageRectI

kernel32

lstrcatA
GetPrivateProfileStringA
lstrcpyA
lstrlenA
LocalAlloc
SetEnvironmentVariableA
CreateThread
GetDriveTypeA
LoadLibraryA
SetErrorMode
FreeLibrary
VirtualAlloc
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CompareStringA
SetEndOfFile
SetFilePointer
CopyFileA
WriteFile
lstrcmpiA
ReadFile
GetFileSize
lstrcpynA
GetModuleFileNameA
DeleteFileA
GetWindowsDirectoryA
QueryPerformanceFrequency
CreateEventA
GetTickCount
GetCurrentThreadId
GetFileAttributesA
IsDBCSLeadByte
FindClose
lstrcmpA
FindFirstFileA
GetProcAddress
GetModuleHandleA
CreateDirectoryA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
LockResource
LoadResource
FindResourceA
GetUserDefaultLCID
GetCurrentDirectoryA
SetCurrentDirectoryA
GetEnvironmentVariableA
VerLanguageNameA
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
CompareStringW
SetLastError
GetLastError
Sleep
GlobalSize
SizeofResource
GetSystemDirectoryA
GetSystemInfo
GetVersion
GetLocalTime
GetCurrentProcess
WritePrivateProfileStringA
FindResourceExA
CreateProcessA
InterlockedIncrement
InterlockedDecrement
VirtualQuery
VirtualProtect
SearchPathA
WaitForSingleObject
SetEvent
ResetEvent
QueryPerformanceCounter
SystemTimeToFileTime
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
TlsSetValue
TlsAlloc
TlsGetValue
VirtualFree
HeapReAlloc
HeapSize
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr

user32

GetDlgItemTextA
SetForegroundWindow
LoadStringA
PeekMessageA
GetDesktopWindow
ReleaseDC
GetDC
SetWindowLongA
GetClassInfoA
GetWindowLongA
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetKeyState
ScreenToClient
MessageBeep
MapVirtualKeyA
VkKeyScanA
CharNextA
GetParent
DialogBoxIndirectParamA
SetFocus
IsRectEmpty
SubtractRect
EqualRect
IntersectRect
CopyRect
UnionRect
PtInRect
SendDlgItemMessageA
SetWindowTextA
LoadIconA
ReleaseCapture
SetCursor
LoadCursorA
SetCapture
DestroyCursor
SetClassLongA
LoadCursorFromFileA
GetMessageTime
GetMessagePos
UpdateWindow
WaitForInputIdle
EnableWindow
GetClassInfoExA
SetParent
DrawIcon
ClientToScreen
GetIconInfo
DrawTextA
DrawTextW
InflateRect
DrawFrameControl
IsCharAlphaA
IsCharAlphaNumericA
DestroyCaret
ShowCaret
SetCaretBlinkTime
CreateCaret
CharLowerBuffA
CharUpperBuffA
SetCaretPos
GetScrollPos
ShowWindow
IsWindowVisible
IsIconic
EnumChildWindows
CreateWindowExA
InvalidateRect
SetCursorPos
GetCursorPos
ShowScrollBar
AppendMenuA
GetSystemMenu
UnregisterClassA
TrackPopupMenu
DestroyMenu
SetRectEmpty
GetFocus
GetWindow
GetForegroundWindow
SetScrollPos
GetScrollRange
SetScrollRange
WindowFromPoint
ValidateRect
IsDlgButtonChecked
CheckRadioButton
GetWindowTextA
CreatePopupMenu
SetRect
SystemParametersInfoA
CharLowerA
MsgWaitForMultipleObjects
IsWindow
DestroyWindow
GetMessageA
RegisterClassExA
DrawFocusRect
DispatchMessageA
CharUpperA
RegisterWindowMessageA
EndDialog
LoadBitmapA
SetTimer
FillRect
KillTimer
DialogBoxParamA
GetClientRect
GetWindowRect
SetDlgItemTextA
GetSystemMetrics
MoveWindow
GetDlgItem
SetWindowPos
BeginPaint
EndPaint
PostMessageA
wsprintfA
MessageBoxA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetSysColor
FindWindowA
SendMessageA
RegisterClassA
TranslateMessage

gdi32

GetTextExtentPoint32A
GetSystemPaletteEntries
CreatePalette
GetDeviceCaps
CreateEllipticRgnIndirect
CreateDCA
GetTextMetricsA
StretchDIBits
RoundRect
Ellipse
SetTextCharacterExtra
TextOutA
SetTextAlign
ExtTextOutA
Polyline
CreatePolygonRgn
CreateRoundRectRgn
CreateEllipticRgn
GetPixel
SetPixel
CreateDIBitmap
LineTo
CreatePen
SetWinMetaFileBits
SetEnhMetaFileBits
PlayEnhMetaFile
SetStretchBltMode
CreateCompatibleBitmap
CreateBitmap
StretchBlt
DeleteEnhMetaFile
CreateHatchBrush
SetBkColor
Rectangle
DeleteObject
CreateSolidBrush
DeleteDC
BitBlt
SelectObject
RealizePalette
SelectPalette
UnrealizeObject
CreateCompatibleDC
SetTextColor
SetBkMode
GetStockObject
GetObjectA
CreateRectRgn
CreateRectRgnIndirect
MoveToEx
CreateFontIndirectA
EnumFontFamiliesExA
CombineRgn
AddFontResourceA
RemoveFontResourceA
SaveDC
SelectClipRgn
Polygon
EnumFontsA
PatBlt
CreatePatternBrush
RestoreDC

comdlg32

GetOpenFileNameA

ole32

CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mciSendCommandA
timeGetDevCaps
timeKillEvent
timeBeginPeriod
timeSetEvent
timeGetTime
mixerOpen

atl

ord47
ord40
ord42

Exports

Exports

AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc

Sections

.text
Size: 384KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab7028c689eda741357257b2e53cc729

Headers

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

comdlg32

ole32

oleaut32

advapi32

shell32

version

winmm

atl

Exports

Exports

Sections

.text Size: 384KB - Virtual size: 381KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 32KB - Virtual size: 39KB

.rsrc Size: 68KB - Virtual size: 67KB

Size: 108KB - Virtual size: 108KB

.text
Size: 384KB - Virtual size: 381KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 32KB - Virtual size: 39KB

.rsrc
Size: 68KB - Virtual size: 67KB