f8a7b4e3a19e28cef3d1384c507b06becfbfc10d8463d8dc8d160ebad3c06dc9

Sharing

Copy URL Twitter E-mail

General

Target

f8a7b4e3a19e28cef3d1384c507b06becfbfc10d8463d8dc8d160ebad3c06dc9
Size

2.6MB
MD5

80cc24fae18bdeaef5a8488273f0bb9e
SHA1

4e878b235102f3d3123ba9ad034b5a7e6b0de50f
SHA256

f8a7b4e3a19e28cef3d1384c507b06becfbfc10d8463d8dc8d160ebad3c06dc9
SHA512

fe5cf5607adc3e80a82b938956f7c95a33a9d50a3329c6665222d52500e18f83d73e1dea93e632d1af8d73b2620fca3cd79f0233bccee58451193bc08e343de0
SSDEEP

49152:muPUNe2zJOl7F7Rkt4t/5K0ABcIQ2Uxuq5:mWiJOnWty/5K0AB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8a7b4e3a19e28cef3d1384c507b06becfbfc10d8463d8dc8d160ebad3c06dc9

Files

f8a7b4e3a19e28cef3d1384c507b06becfbfc10d8463d8dc8d160ebad3c06dc9
.exe windows x86

b0c58c75f7bab63a493ecf5f2ce833d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

d3d9

Direct3DCreate9

winmm

timeGetTime

comctl32

ord17

kernel32

SystemTimeToFileTime
GetSystemTime
CreateEventA
WaitForSingleObject
GetTickCount
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GlobalMemoryStatus
GetTempFileNameW
MoveFileW
DeleteFileW
FreeResource
GetTempPathA
GetTempFileNameA
FormatMessageA
LocalFree
MoveFileA
DeleteFileA
FindNextFileA
FindFirstFileA
FindClose
SetEnvironmentVariableA
CompareStringW
GetTimeZoneInformation
IsBadCodePtr
IsBadReadPtr
VirtualProtect
SetEndOfFile
SetStdHandle
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualQuery
GetLocaleInfoA
GetStringTypeA
IsValidCodePage
RaiseException
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetOEMCP
SetUnhandledExceptionFilter
HeapSize
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
IsBadWritePtr
HeapCreate
HeapDestroy
GetCPInfo
LCMapStringW
LCMapStringA
ReadFile
GetFileType
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
GetLocalTime
GetStartupInfoA
RtlUnwind
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
GetACP
GlobalAlloc
GlobalLock
GetVersionExW
IsDBCSLeadByteEx
GetSystemDirectoryW
LoadLibraryW
GetLocaleInfoW
CompareStringA
lstrlenW
IsValidLocale
GetThreadLocale
GlobalUnlock
CreateDirectoryA
GetCurrentDirectoryA
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiA
LeaveCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
InitializeCriticalSection
InterlockedExchange
EnterCriticalSection
IsProcessorFeaturePresent
GetSystemInfo
VirtualAlloc
VirtualFree
FindResourceA
SizeofResource
LoadResource
LockResource
UnmapViewOfFile
CreateFileW
CreateFileMappingA
GetFileSize
MapViewOfFile
GetLastError
WriteFile
OutputDebugStringA
GetVersionExA
GetFullPathNameA
CreateFileA
CloseHandle
GetFileAttributesA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleA
lstrcmpA
MulDiv
Sleep
lstrcatA
lstrlenA
lstrcpynA
GetCurrentThread
SetThreadPriority
GetCommandLineA
lstrcpyA
SetCurrentDirectoryA
GlobalFree
GetStringTypeW

user32

SetWindowRgn
PostThreadMessageA
UnregisterClassA
UpdateWindow
SetFocus
IsRectEmpty
SetWindowTextA
SetRect
GetCursorPos
SendMessageA
PtInRect
UnionRect
ShowWindow
SetForegroundWindow
InvalidateRect
OffsetRect
GetFocus
PostMessageW
GetKeyboardLayoutList
SetTimer
GetSystemMetrics
EnumChildWindows
GetClassNameA
GetWindowTextA
PostMessageA
PostQuitMessage
SetCursor
DefWindowProcA
ReleaseDC
DrawTextA
SendMessageW
GetKeyboardLayout
GetActiveWindow
GetKeyState
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetCaretBlinkTime
keybd_event
InvertRect
DrawTextExA
ReleaseCapture
SetCapture
EqualRect
GetParent
IntersectRect
SetRectEmpty
CopyRect
GetAsyncKeyState
GetIconInfo
DialogBoxParamA
EndDialog
CheckRadioButton
IsDlgButtonChecked
EnableWindow
GetDlgItem
DestroyWindow
DestroyMenu
ScreenToClient
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetWindowLongA
LoadAcceleratorsA
PeekMessageA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
SetWindowPos
GetClassLongA
ClipCursor
GetWindowRect
MessageBoxA
SetWindowLongA
SetMenu
GetMenu
FindWindowExA
EnumWindows
AdjustWindowRect
wsprintfA
GetDC
GetClientRect
FillRect

gdi32

GetRegionData
ExtCreateRegion
StretchBlt
CreateRectRgn
CombineRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
BitBlt
ExtTextOutW
MoveToEx
CreateFontIndirectW
CreateFontIndirectA
GetFontLanguageInfo
GetTextMetricsW
GetCharacterPlacementW
CreatePen
GetGlyphOutlineA
GetTextMetricsA
GetObjectW
GetObjectA
GetDIBits
CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
SetTextAlign
GetStockObject
CreateCompatibleDC
GetTextExtentPoint32A
DeleteDC
SetBkMode
SetBkColor
SetTextColor
ExtTextOutA
SelectObject
DeleteObject
LineTo
CreateCompatibleBitmap
GetCurrentObject
CreateBitmap
SetDIBits
CreateDIBitmap
OffsetRgn
CreateRectRgnIndirect
CreateBrushIndirect
GetCharacterPlacementA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExW
RegCloseKey
RegQueryValueA
RegOpenKeyExW

shell32

ShellExecuteA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize

imm32

ImmGetIMEFileNameA
ImmNotifyIME
ImmGetContext
ImmGetOpenStatus
ImmGetConversionStatus
ImmIsIME
ImmGetCompositionStringW
ImmGetCandidateListW
ImmReleaseContext

shlwapi

StrCmpNA

dsound

ord11

Exports

Exports

?load_object_data@?$iserializer@Vxml_iarchive@archive@boost@@V?$vector@VSpeedInterval@ocg@vrx@@V?$allocator@VSpeedInterval@ocg@vrx@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vxml_iarchive@archive@boost@@VConfigXml@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vxml_iarchive@archive@boost@@VSpeedInterval@ocg@vrx@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?save_object_data@?$oserializer@Vxml_oarchive@archive@boost@@V?$vector@VSpeedInterval@ocg@vrx@@V?$allocator@VSpeedInterval@ocg@vrx@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vxml_oarchive@archive@boost@@VConfigXml@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vxml_oarchive@archive@boost@@VSpeedInterval@ocg@vrx@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 272KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0c58c75f7bab63a493ecf5f2ce833d4

Headers

File Characteristics

Imports

dinput8

d3d9

winmm

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

imm32

shlwapi

dsound

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 272KB - Virtual size: 268KB

.data Size: 96KB - Virtual size: 494KB

.rsrc Size: 296KB - Virtual size: 292KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 272KB - Virtual size: 268KB

.data
Size: 96KB - Virtual size: 494KB

.rsrc
Size: 296KB - Virtual size: 292KB