f8686f077273a875f569113e475d9dc5b63b78097297a1bcf98eec0d5ffa93e7

Sharing

Copy URL Twitter E-mail

General

Target

f8686f077273a875f569113e475d9dc5b63b78097297a1bcf98eec0d5ffa93e7
Size

2.5MB
MD5

bf65a161066ba9fab06713b287c8fae1
SHA1

80661da4d2f7d67a56f2fb8e0046ecd3c922bf49
SHA256

f8686f077273a875f569113e475d9dc5b63b78097297a1bcf98eec0d5ffa93e7
SHA512

4d6d3cbe1c0a97ed84b9d5f9c593f6ab5140a49803bf64260d2316e5b267b7797c472b03d3e8dc9139fe8db39edafa54a2cd4104b33df79c746830b0e0ba728d
SSDEEP

49152:ofJqhrR32/zQRmZMTKNOhDlugskIYmjV4zVrknPc+sjYiCwncGFW0Th76nRrJeuI:6qht3rRmZMTKNSlugsNYQ4zVr4Pc+sjd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8686f077273a875f569113e475d9dc5b63b78097297a1bcf98eec0d5ffa93e7

Files

f8686f077273a875f569113e475d9dc5b63b78097297a1bcf98eec0d5ffa93e7
.exe windows x86

4033460cee8e617833d89cbee4c82129

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipGetImagePalette
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipAlloc
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdiplusStartup
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipDisposeImage
GdipFree
GdipBitmapUnlockBits

usb2uartspiiicdll

SPISetCS1
SPISetCS0
UARTRcvData
InternalListSetLine
InternalListInitAllLine
GetBoardInformation
IICCheckSlaveAddr
GetADCVal
IICRegisterRead
IICDirectRead
IICSendAndRcvData
InternalListStop
InternalListReceive
IICSlaveRcvData
SPISlaveRcvData
InternalListTsetOnce
InternalListTimerStart
InternalListIO0Start
ConfigIICParamSlave
ConfigSPIParamSlave
ConfigIICParam
ConfigSPIParam
SPISendAndRcvData
PWMOut
PWMClose
IICSlavePreloadData
SPISlavePreloadData
IICDirectSend
IICRegisterSend
UARTSendData
CloseUsb
OpenUsb
_IFWU@4
_FWUW@8
IOSetAndRead
ConfigUARTParam
_FWUR@8

kernel32

GetFileAttributesExW
LocalReAlloc
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
GetWindowsDirectoryW
GetNumberFormatW
GetTempPathW
InitializeCriticalSectionAndSpinCount
GetProfileIntW
SearchPathW
VirtualProtect
FindResourceExW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
HeapFree
HeapAlloc
RtlUnwind
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
RaiseException
ExitThread
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
HeapSize
HeapQueryInformation
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeW
WriteConsoleW
SetEnvironmentVariableA
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
ReplaceFileW
GetTickCount
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
SetErrorMode
InterlockedExchange
SystemTimeToFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
EnterCriticalSection
LeaveCriticalSection
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileW
GetThreadLocale
GetStringTypeExW
GetCurrentProcessId
lstrcmpA
ResumeThread
ReleaseActCtx
CreateActCtxW
MulDiv
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
FindFirstFileW
FindClose
CreateMutexW
SetThreadPriority
DeleteFileW
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileAttributesW
CopyFileW
GlobalSize
InterlockedDecrement
FormatMessageW
LocalAlloc
LocalFree
InterlockedIncrement
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalAlloc
lstrcpyW
lstrcmpW
GlobalFree
CreateThread
WaitForSingleObject
GetFileSize
SetFilePointer
ReadFile
ReleaseMutex
GetModuleFileNameW
WideCharToMultiByte
Sleep
CreateFileW
WriteFile
CloseHandle
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
FreeResource
GetCPInfo
lstrlenA
lstrlenW
lstrcmpiW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetVersion
GetVersionExW
GetCurrentDirectoryW
CompareStringA
TlsFree

user32

CreateAcceleratorTableW
CopyIcon
CharUpperBuffW
WaitMessage
IsCharLowerW
MapVirtualKeyExW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
GetUpdateRect
GetDoubleClickTime
SubtractRect
GetWindowRgn
SetDlgItemTextW
SetDlgItemInt
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
GetScrollPos
MessageBoxW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcW
SetWindowPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
SetRectEmpty
GetMenuStringW
DestroyMenu
GetWindowTextW
PeekMessageW
SetForegroundWindow
SetWindowLongW
MessageBeep
GetWindow
SetTimer
SetScrollPos
RegisterClipboardFormatW
RegisterClassExW
CreateWindowExW
ShowWindow
MoveWindow
GetMessageW
BeginPaint
EndPaint
GetKeyboardState
GetDlgItemInt
IsClipboardFormatAvailable
GetClipboardData
DestroyCaret
ShowCaret
SetCaretPos
CreateCaret
GetTabbedTextExtentW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
ShowScrollBar
EnableMenuItem
GetDlgItem
GetClassInfoW
DefWindowProcW
GetFocus
GetCursorPos
GetKeyState
TranslateMessage
DispatchMessageW
GetCaretPos
IsChild
IsWindowVisible
LoadCursorW
UpdateWindow
ScreenToClient
IsRectEmpty
KillTimer
SetScrollInfo
EnableScrollBar
GetMessagePos
ReleaseCapture
SetCapture
PtInRect
IsWindow
RedrawWindow
DrawFrameControl
DestroyCursor
LoadImageW
PostMessageW
SetCursor
GetWindowLongW
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageW
DrawFocusRect
FrameRect
OffsetRect
InflateRect
GetIconInfo
DrawStateW
IsMenu
GetMenuItemInfoW
GetSystemMetrics
SystemParametersInfoW
DrawIconEx
DestroyIcon
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetSysColorBrush
GetSysColor
EnableWindow
GetDesktopWindow
ReleaseDC
GetDC
RemoveMenu
ModifyMenuW
InsertMenuW
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuW
DeleteMenu
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
LoadBitmapW
CopyRect
SetRect
GetKeyboardLayout
ToUnicodeEx
SetClassLongW
DestroyAcceleratorTable
LockWindowUpdate
CopyImage
HideCaret
InvertRect
GetNextDlgGroupItem
InvalidateRgn
CharNextW
PostThreadMessageW
CopyAcceleratorTableW
GetMenuDefaultItem
SetMenuDefaultItem
MonitorFromPoint
UpdateLayeredWindow
UnionRect
GetAsyncKeyState
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
UnregisterClassW
SetParent
GetSystemMenu
RealChildWindowFromPoint
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
IsZoomed
SetCursorPos
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
SetWindowRgn
DrawIcon
IsIconic
CharUpperW
CreateDialogIndirectParamW
EndDialog
LoadMenuW
IntersectRect
MapVirtualKeyW
GetKeyNameTextW
GetWindowThreadProcessId
GetWindowDC
ValidateRect
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
PostQuitMessage
GetMenu

gdi32

Escape
GetStockObject
SetTextColor
SetBkColor
CreateBitmap
CreatePalette
RealizePalette
CreateRectRgnIndirect
Polygon
GetTextColor
DPtoLP
StretchBlt
CreateFontW
GetCharWidthW
SetBoundsRect
RoundRect
StretchDIBits
GetBkColor
CopyMetaFileW
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32W
SetPixel
GetPixel
Rectangle
Ellipse
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
StartDocW
SetViewportOrgEx
OffsetViewportOrgEx
BitBlt
ScaleViewportExtEx
GetBkMode
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
SetRectRgn
CombineRgn
GetMapMode
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
CreateEllipticRgn
LPtoDP
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetWindowOrgEx
GetRgnBox
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
CreatePolygonRgn
Polyline
OffsetRgn
SetDIBColorTable
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
SetStretchBltMode
SetROP2
SetViewportExtEx
PatBlt
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCW
GetDeviceCaps
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
CreateFontIndirectW
ExcludeClipRect
GetClipBox
SetMapMode
CreateHatchBrush
CreateSolidBrush
SetWindowOrgEx
CreatePen

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

GetJobW
DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumValueW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetFileSecurityW
RegEnumKeyExW

shell32

ShellExecuteW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHAddToRecentDocs
ExtractIconW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW

comctl32

ImageList_GetIconSize
_TrackMouseEvent
ImageList_DrawEx

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

ole32

RegisterDragDrop
RevokeDragDrop
OleUninitialize
CoCreateGuid
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoInitializeEx
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoUninitialize
CoInitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoLockObjectExternal
OleLockRunning
DoDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
StringFromCLSID
CoFreeUnusedLibraries

oleaut32

SafeArrayDestroy
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysFreeString
VarBstrFromDate
OleCreateFontIndirect
SystemTimeToVariantTime
SysAllocString
VariantTimeToSystemTime
GetErrorInfo

oledlg

OleUIBusyW

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 405KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4033460cee8e617833d89cbee4c82129

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

usb2uartspiiicdll

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 405KB - Virtual size: 405KB

.data Size: 27KB - Virtual size: 69KB

.rsrc Size: 281KB - Virtual size: 281KB

.reloc Size: 198KB - Virtual size: 197KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 405KB - Virtual size: 405KB

.data
Size: 27KB - Virtual size: 69KB

.rsrc
Size: 281KB - Virtual size: 281KB

.reloc
Size: 198KB - Virtual size: 197KB