f30bc41df75a0e29ece348774c69eb959b8c63ab155b1ca77502fe2d5ff2c98e

Sharing

Copy URL

Twitter E-mail

General

Target

f30bc41df75a0e29ece348774c69eb959b8c63ab155b1ca77502fe2d5ff2c98e
Size

6.0MB
MD5

316db8066160f07a946ff4e9dbadceb1
SHA1

ead643832b89401b2536ad6d4e818027cc76262f
SHA256

f30bc41df75a0e29ece348774c69eb959b8c63ab155b1ca77502fe2d5ff2c98e
SHA512

79d249620e188e7c7f4c461a389e6bc41fabf7a0066dca3ebb0b3a61507d87969c562d776b0b4144654e8f240709c06beb8261fca169180f2a73dd91d862f653
SSDEEP

98304:2uMeL88xWDnkJYmUN7f+fDGvfuEMq3mmhczuzrn+ITT/0AtxINv1FZ4HfmEr:2/eL88YDnkJtGf+7Gvrn2mhcqzt/0A7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f30bc41df75a0e29ece348774c69eb959b8c63ab155b1ca77502fe2d5ff2c98e

Files

f30bc41df75a0e29ece348774c69eb959b8c63ab155b1ca77502fe2d5ff2c98e
.exe windows x86

fd528bad7a760bbfef7ebe5fe3862853

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9_37

D3DXLoadMeshHierarchyFromXA
D3DXFrameCalculateBoundingSphere
D3DXFrameDestroy
D3DXCreateEffectFromFileA
D3DXVec4Normalize
D3DXMatrixRotationY
D3DXMatrixRotationZ
D3DXLoadSurfaceFromSurface
D3DXCreateFontIndirectA
D3DXQuaternionRotationYawPitchRoll
D3DXPlaneTransform
D3DXVec2Normalize
D3DXQuaternionSquadSetup
D3DXQuaternionNormalize
D3DXPlaneFromPointNormal
D3DXMatrixRotationAxis
D3DXVec3CatmullRom
D3DXComputeNormals
D3DXQuaternionRotationAxis
D3DXPlaneIntersectLine
D3DXCleanMesh
D3DXWeldVertices
D3DXValidMesh
D3DXGeneratePMesh
D3DXQuaternionSquad
D3DXLoadMeshFromXA
D3DXMatrixTranspose
D3DXQuaternionSlerp
D3DXSaveSurfaceToFileA
D3DXSaveTextureToFileA
D3DXCreateTexture
D3DXVec3Normalize
D3DXMatrixRotationX
D3DXCreateLine
D3DXMatrixRotationQuaternion
D3DXVec3TransformCoord
D3DXMatrixInverse
D3DXQuaternionMultiply
D3DXMatrixTranslation
D3DXMatrixScaling
D3DXMatrixMultiply
D3DXCreateTextureFromFileExA
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateMeshFVF
D3DXPlaneFromPoints
D3DXGetFVFVertexSize
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXCreateSprite
D3DXVec3Project
D3DXVec3TransformNormal
D3DXQuaternionInverse

cbugtrap

BT_InstallSehFilter
BT_SetAppName
BT_SetSupportServer
BT_SetSupportURL
BT_SetFlags
_BT_SetAppExeName@4
BT_SetActivityType
BT_SetReportFilePath

kernel32

SetUnhandledExceptionFilter
IsDebuggerPresent
GetDriveTypeA
GetCommandLineA
GetStartupInfoA
RtlUnwind
RaiseException
VirtualAlloc
GetSystemInfo
HeapReAlloc
ExitProcess
ExitThread
CreateThread
HeapSize
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
WaitForSingleObject
UnhandledExceptionFilter
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
Process32First
FindResourceA
GetModuleFileNameA
OpenProcess
Sleep
DeleteFileA
MoveFileA
CreateProcessA
CloseHandle
GetLastError
CreateMutexA
lstrlenA
MulDiv
MultiByteToWideChar
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
InterlockedDecrement
FreeLibrary
lstrcmpA
InterlockedExchange
CompareStringA
LoadLibraryA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
FreeResource
CreateToolhelp32Snapshot
GetACP
GetVersion
HeapFree
TerminateProcess
lstrcpyA
VirtualQuery
GetPriorityClass
VirtualProtect
WriteProcessMemory
Process32Next
Module32Next
Module32First
SetEvent
FindNextFileA
ResetEvent
WaitForMultipleObjects
SleepEx
CreateFileW
CreateEventA
GlobalAddAtomA
GetCurrentProcessId
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleHandleW
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
GetProcessHeap
HeapAlloc
SetCurrentDirectoryA
CompareStringW
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
IsDBCSLeadByteEx
CreateDirectoryA
GetSystemDirectoryA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetTickCount
SetErrorMode
GetOEMCP
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GlobalFlags
GetCurrentDirectoryA
WritePrivateProfileStringA
FileTimeToSystemTime
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection

user32

MessageBoxW
SetCursorPos
AdjustWindowRect
ClipCursor
GetIconInfo
MsgWaitForMultipleObjects
PostThreadMessageA
CreateDialogIndirectParamA
EndDialog
RegisterClipboardFormatA
DestroyMenu
CharUpperA
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextA
TabbedTextOutA
FillRect
GetDesktopWindow
ReleaseCapture
SetCapture
ClientToScreen
GetDC
ReleaseDC
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
HideCaret
InvertRect
ShowCaret
CreateCaret
SetCaretPos
GetKeyboardLayout
GetCaretPos
LoadCursorFromFileA
ShowCursor
DrawTextExA
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
ScreenToClient
EqualRect
keybd_event
SendMessageTimeoutA
SendMessageCallbackA
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetWindowsHookExA
CallNextHookEx
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindow
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
PostQuitMessage
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetTimer
GetClientRect
EnableWindow
SendMessageA
FindWindowA
DestroyCursor
SetCursor
KillTimer
UpdateWindow
LoadCursorA
LoadIconA
AdjustWindowRectEx
UnregisterClassA
wsprintfA
PostMessageA
MessageBoxA
TranslateMessage
PeekMessageA
DispatchMessageA
GetMessageA
IsDialogMessageA

gdi32

GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateCompatibleDC
CreatePen
CreateSolidBrush
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CreateFontIndirectA
GetTextExtentPoint32A
GetMapMode
CreateFontA
GetTextMetricsA
GetDIBits
GetDeviceGammaRamp
SetDeviceGammaRamp
CreateDIBSection
GetTextExtentPoint32W
ExtTextOutW
TextOutW
CreateFontW
DeleteObject
MoveToEx
LineTo
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
GetStockObject
GetDeviceCaps
CreateBitmap
GetClipBox
SetTextColor
DeleteDC
SetBkColor

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

CryptEncrypt
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
CryptAcquireContextA
CryptDecrypt
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptCreateHash
CryptDeriveKey
CryptHashData
RegQueryValueExA

shell32

SHGetSpecialFolderPathA

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

winmm

timeSetEvent
timeKillEvent
timeGetTime
mmioWrite
mmioSetInfo
mmioAdvance
mmioGetInfo
mmioCreateChunk
mmioSeek
mmioAscend
mmioRead
mmioDescend
mmioOpenA
mmioClose

ole32

CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitialize
OleInitialize

oleaut32

SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

oledlg

ord8

psapi

GetProcessMemoryInfo
EnumProcesses
GetProcessImageFileNameA
GetModuleFileNameExA

d3d9

Direct3DCreate9

d3dxof

DirectXFileCreate

dsound

ord11

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

dinput8

DirectInput8Create

imm32

ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetProperty
ImmSetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmReleaseContext
ImmNotifyIME
ImmGetContext

dbghelp

ImageDirectoryEntryToData

ws2_32

connect
closesocket
ioctlsocket
WSAGetLastError
socket
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACloseEvent
WSAEventSelect
send
recv
WSAStartup
WSACleanup
inet_addr
htons
WSACreateEvent

odbc32

ord13
ord72
ord12
ord19
ord11
ord9
ord26
ord7
ord39
ord31
ord24
ord75
ord36
ord35
ord48
ord49
ord43

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 126.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd528bad7a760bbfef7ebe5fe3862853

Headers

DLL Characteristics

File Characteristics

Imports

d3dx9_37

cbugtrap

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

winmm

ole32

oleaut32

oledlg

psapi

d3d9

d3dxof

dsound

version

dinput8

imm32

dbghelp

ws2_32

odbc32

Sections

.text Size: 4.5MB - Virtual size: 4.5MB

.rdata Size: 599KB - Virtual size: 598KB

.data Size: 204KB - Virtual size: 126.3MB

.rsrc Size: 41KB - Virtual size: 40KB

.reloc Size: 602KB - Virtual size: 601KB

.text
Size: 4.5MB - Virtual size: 4.5MB

.rdata
Size: 599KB - Virtual size: 598KB

.data
Size: 204KB - Virtual size: 126.3MB

.rsrc
Size: 41KB - Virtual size: 40KB

.reloc
Size: 602KB - Virtual size: 601KB