9081221702b298ad49fca8992f6b6d27_mafia_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9081221702b298ad49fca8992f6b6d27_mafia_JC.exe
Size

6.0MB
MD5

9081221702b298ad49fca8992f6b6d27
SHA1

e87b0ea2f764d83896beca7f51d613f64c660ccc
SHA256

999bca94a74dc8412620f9c2cd32ef47441322f250180f8811ed2ed6abb74ef6
SHA512

5869e32b0a4c3a1c0f9268b57b5692f3143c397071a5a5fa6550fd53af1f68024a5bb697907cd94f4faf56ac3cff0af4c6b7e2b4a5884596d483e088857cba34
SSDEEP

98304:yX5/jS/cv+RC42niKzyMP6c5k0MPlHIXkZdtmKYSDMhj4Alu+Nu/FQ4ktii+5tIL:SuC4T9KDvumKglo/zXTzTApOlrh76UDK

Score

1^/10

Malware Config

Signatures

Files

9081221702b298ad49fca8992f6b6d27_mafia_JC.exe
.exe windows x86

14aa956864b93dd895ef90abab4f7f5a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

be:5c:67:85:10:fc:0b:57:c9:b1:a7:82:4d:93:c8:1e
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

31/08/2021, 00:00

Not After

31/08/2023, 23:59

Subject

CN=joyimpact inc,OU=Development,O=joyimpact inc,ST=Seoul,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

91:d8:a5:d7:a8:b0:02:d2:7e:eb:28:dd:39:7b:f7:22:8b:1d:b0:06
Signer

Actual PE Digest

91:d8:a5:d7:a8:b0:02:d2:7e:eb:28:dd:39:7b:f7:22:8b:1d:b0:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

d3dx9_42

D3DXLoadSurfaceFromFileInMemory
D3DXSaveSurfaceToFileA
D3DXCreateFontIndirectW
D3DXCreateFontW
D3DXMatrixRotationYawPitchRoll
D3DXVec3TransformCoord
D3DXLoadSurfaceFromFileA
D3DXCreateSprite
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileExA
D3DXMatrixRotationZ
D3DXMatrixScaling
D3DXMatrixLookAtLH
D3DXVec3Normalize
D3DXSaveSurfaceToFileInMemory
D3DXMatrixRotationY
D3DXMatrixRotationAxis
D3DXMatrixOrthoLH
D3DXMatrixOrthoOffCenterLH
D3DXMatrixMultiply
D3DXMatrixInverse
D3DXCreateTexture
D3DXGetImageInfoFromFileA
D3DXVec3Project
D3DXVec2Normalize
D3DXIntersectTri
D3DXMatrixMultiplyTranspose
D3DXVec3Transform
D3DXMatrixRotationX
D3DXQuaternionSlerp
D3DXMatrixRotationQuaternion
D3DXQuaternionRotationMatrix
D3DXMatrixTransformation2D
D3DXMatrixPerspectiveFovLH
D3DXMatrixTranspose
D3DXCreateBuffer
D3DXFillCubeTexture
D3DXFillTexture
D3DXLoadSurfaceFromSurface
D3DXCreateLine
D3DXCreateTextureFromFileExW
D3DXCreateTextureFromResourceExW
D3DXCreateCubeTextureFromFileExW
D3DXCreateCubeTextureFromResourceExW
D3DXCreateVolumeTextureFromFileExW
D3DXCreateVolumeTextureFromResourceExW
D3DXCreateEffectFromFileW
D3DXCreateEffectFromResourceW
D3DXCreateCubeTextureFromFileExA
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileInMemory
D3DXMatrixTranslation
D3DXComputeNormalMap
D3DXSaveTextureToFileA
D3DXCreateCubeTexture

d3d9

Direct3DCreate9

dsound

ord11

winmm

mmioOpenW
mmioWrite
mmioAdvance
mmioSetInfo
mmioSeek
mmioCreateChunk
mmioGetInfo
mmioDescend
mmioRead
mmioAscend
timeGetTime
mmioClose
PlaySoundW

imm32

ImmGetCandidateListA
ImmGetIMEFileNameA
ImmGetVirtualKey
ImmReleaseContext
ImmSetCompositionStringW
ImmNotifyIME
ImmGetContext
ImmGetDefaultIMEWnd
ImmGetOpenStatus
ImmGetConversionStatus
ImmIsIME
ImmSetConversionStatus
ImmAssociateContext
ImmSetOpenStatus
ImmSimulateHotKey
ImmGetCandidateListW
ImmGetCompositionStringW
ImmDestroyContext
ImmCreateContext
ImmGetCompositionStringA

ws2_32

inet_addr
WSACleanup
recv
inet_ntoa
connect
WSAGetLastError
send
socket
htons
bind
listen
WSAAsyncSelect
closesocket
WSAStartup
gethostname
gethostbyname

wininet

HttpSendRequestW
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetCrackUrlA
InternetOpenUrlA
FindCloseUrlCache
FindNextUrlCacheEntryA
DeleteUrlCacheEntryA
FindFirstUrlCacheEntryA
HttpQueryInfoW
InternetReadFile
InternetOpenA
InternetSetOptionW

iphlpapi

GetAdaptersInfo

msvfw32

MCIWndCreateA

shlwapi

PathFindFileNameW
PathFileExistsA
PathIsDirectoryA
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW

dinput8

DirectInput8Create

kernel32

DeleteCriticalSection
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrlenW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetWindowsDirectoryA
QueryPerformanceFrequency
FindNextFileW
MulDiv
QueryPerformanceCounter
SetThreadAffinityMask
GetCurrentThread
GetProcessAffinityMask
GetCurrentProcess
LoadLibraryW
GetVersionExA
ExpandEnvironmentStringsW
CompareStringA
LoadLibraryA
IsDBCSLeadByteEx
GetLocaleInfoA
GetTickCount
FreeLibrary
lstrcmpW
CompareStringW
lstrcatW
GetCurrentDirectoryA
GetLocalTime
CopyFileA
SetCurrentDirectoryA
CreateDirectoryA
GetSystemDirectoryA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetSystemTimeAsFileTime
GetPrivateProfileStringA
InterlockedDecrement
GetCommandLineA
InitializeCriticalSection
SetFileAttributesA
SetFileTime
GetFileTime
GetFileSize
GetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
DeleteFileW
FindNextFileA
lstrlenA
lstrcpynA
MoveFileW
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
OutputDebugStringW
VirtualFree
VirtualAlloc
CreateThread
GetVersionExW
GetModuleHandleW
GetProcAddress
GetSystemInfo
Sleep
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
WaitForSingleObject
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
DeactivateActCtx
ActivateActCtx
FileTimeToSystemTime
FileTimeToLocalFileTime
SetThreadPriority
TerminateThread
RemoveDirectoryA
RemoveDirectoryW
DeleteFileA
GetTempPathW
DuplicateHandle
GetModuleFileNameA
GetFullPathNameW
SetFileAttributesW
GetVolumeInformationW
FindFirstFileW
lstrcpyW
GetFullPathNameA
GetVolumeInformationA
lstrcpyA
SetLastError
GetModuleFileNameW
GetShortPathNameW
CreateFileW
GetFileAttributesW
lstrcmpiW
GetStringTypeExW
GlobalAddAtomW
GlobalFlags
CreateEventW
InterlockedCompareExchange
SetEnvironmentVariableA
GetProcessHeap
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleCtrlHandler
FatalAppExitA
WriteConsoleW
SetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
SetHandleCount
LCMapStringW
GetStringTypeW
SuspendThread
SetEvent
GetCurrentThreadId
ResumeThread
GetThreadLocale
lstrcmpA
GetAtomNameW
GlobalGetAtomNameW
GetCurrentProcessId
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
CreateActCtxW
ReleaseActCtx
lstrcpynW
InterlockedIncrement
GlobalDeleteAtom
GlobalFindAtomW
FreeResource
InterlockedExchange
GetLocaleInfoW
GetSystemDefaultUILanguage
GetDriveTypeW
HeapDestroy
HeapCreate
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTimeZoneInformation
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GetWindowsDirectoryW
GetNumberFormatW
GetTempFileNameW
ConvertDefaultLocale
GetUserDefaultUILanguage
SetErrorMode
GetFileAttributesExW
GetFileSizeEx
GetCurrentDirectoryW
GetPrivateProfileIntW
WritePrivateProfileStringW
CreateDirectoryW
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetProfileIntW
SearchPathW
VirtualProtect
TerminateProcess
GetFileType
SetStdHandle
VirtualQuery
HeapSize
HeapQueryInformation
GetStartupInfoW
HeapSetInformation
ExitProcess
GetConsoleMode
GetConsoleCP
FindFirstFileExA
GetDriveTypeA
GetDateFormatW
GetTimeFormatW
ExitThread
HeapReAlloc
HeapFree
DecodePointer
EncodePointer
HeapAlloc
ReplaceFileW
RaiseException
LocalLock
LocalUnlock
FindResourceExW
GetDiskFreeSpaceW
GetPrivateProfileStringW

user32

CopyRect
OffsetRect
SetRect
PtInRect
InflateRect
ReleaseCapture
SetCapture
SystemParametersInfoW
ScreenToClient
GetCursorPos
GetCaretBlinkTime
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetKeyState
wsprintfW
CharUpperA
MessageBoxW
GetSystemMetrics
CharUpperW
GetActiveWindow
IsIconic
CloseWindow
DestroyWindow
GetKeyboardLayoutNameA
DefWindowProcW
LoadCursorW
CreateWindowExW
LoadIconW
RegisterClassW
AdjustWindowRect
SetCursor
LoadAcceleratorsW
TranslateAcceleratorW
DispatchMessageW
GetWindowLongA
SetWindowLongA
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowThreadProcessId
GetSysColorBrush
GetSysColor
GetWindowTextW
GetWindowTextLengthW
ValidateRect
IsWindowVisible
UnregisterClassW
SetWindowTextW
GetClassNameW
GetDlgCtrlID
GetWindow
RealChildWindowFromPoint
GetDesktopWindow
DestroyIcon
SetScrollPos
GetScrollPos
CheckDlgButton
CheckRadioButton
GetDlgItem
GetDlgItemInt
GetDlgItemTextW
SendDlgItemMessageW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
IsDialogMessageW
IsWindow
MoveWindow
ScrollWindowEx
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CallWindowProcW
GetWindowPlacement
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
AdjustWindowRectEx
GetClassInfoW
GetClassInfoExW
ShowScrollBar
SetForegroundWindow
GetScrollRange
SetScrollRange
TrackPopupMenu
TrackPopupMenuEx
ScrollWindow
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassLongW
IsChild
WinHelpW
SendDlgItemMessageA
RegisterWindowMessageW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
GetMenuItemInfoW
DestroyMenu
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
EnumDisplayMonitors
SetLayeredWindowAttributes
ShowOwnedPopups
DeleteMenu
InvalidateRect
SetTimer
KillTimer
RedrawWindow
GetMenuDefaultItem
CreatePopupMenu
IsRectEmpty
MapVirtualKeyW
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
MessageBeep
GetIconInfo
CopyImage
LoadImageW
GetNextDlgGroupItem
DrawIconEx
GetDialogBaseUnits
IsZoomed
SetWindowRgn
SetParent
WindowFromPoint
SetClassLongW
LoadMenuW
GetSystemMenu
DrawStateW
DrawEdge
DrawFrameControl
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
BringWindowToTop
LockWindowUpdate
GetKeyNameTextW
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
InsertMenuItemW
GetMenuBarInfo
ReuseDDElParam
UnpackDDElParam
PostThreadMessageW
WaitMessage
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
InSendMessage
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
SendNotifyMessageW
FrameRect
GetUpdateRect
RegisterClipboardFormatW
CopyIcon
CharUpperBuffW
GetDoubleClickTime
SubtractRect
EnumChildWindows
MapDialogRect
DrawIcon
DestroyCursor
WindowFromDC
GetWindowRgn
GetDCEx
GetTabbedTextExtentW
UpdateWindow
DestroyAcceleratorTable
LoadBitmapW
GetWindowTextA
SetFocus
PostMessageW
wsprintfA
ChangeDisplaySettingsW
EnumDisplaySettingsW
ShowWindow
GetWindowLongW
SetWindowPos
GetWindowRect
GetClientRect
SetWindowLongW
SetMenu
GetMenu
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
FillRect
CharNextA
CharPrevA
MessageBoxA
IsWindowUnicode
SendMessageW
GetFocus
PostMessageA
CharNextW
GetKeyboardLayout
SendMessageA
PeekMessageA
GetMessageA
SystemParametersInfoA
GetDC
ReleaseDC
ShowCursor
GetCapture
GetAsyncKeyState
SetRectEmpty
ClientToScreen
SetCursorPos
PeekMessageW
DispatchMessageA
TranslateMessage
GetMessageW
PostQuitMessage
keybd_event
EqualRect
IntersectRect

gdi32

SetTextColor
SetBkColor
DeleteObject
CreateDCA
DeleteDC
TextOutA
SetBkMode
GetObjectW
GetDIBits
GetTextExtentPoint32A
GetDeviceCaps
AddFontResourceExA
RemoveFontResourceExA
SelectObject
CopyMetaFileW
CreateDCW
CreateBitmap
SaveDC
RestoreDC
CreateDIBSection
CreateCompatibleDC
DeleteMetaFile
CloseMetaFile
CreateMetaFileW
GetTextFaceW
GetTextAlign
GetStretchBltMode
RemoveFontMemResourceEx
CreateFontA
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetStockObject
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
RoundRect
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
Rectangle
SetPixel
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
GetCurrentObject
StretchDIBits
CreateFontW
GetCharWidthW
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
DPtoLP
PatBlt
GetMapMode
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
CombineRgn
SetRectRgn
GetTextCharsetInfo
GetClipBox
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
StartDocW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectW
GetTextExtentPoint32W
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsW
EnumFontFamiliesW
StretchBlt

advapi32

RegCloseKey
SetFileSecurityW
RegEnumValueW
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
GetFileSecurityW
RegDeleteKeyW
RegSetValueW
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteW
SHGetSpecialFolderPathA
ExtractIconW
SHGetFileInfoW
ShellExecuteExW
SHAppBarMessage
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
SHAddToRecentDocs

ole32

OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
PropVariantCopy
StgCreateDocfileOnILockBytes
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleLoad
GetHGlobalFromILockBytes
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleRegEnumVerbs
OleRegGetMiscStatus
OleRun
OleSetMenuDescriptor
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleQueryCreateFromData
OleQueryLinkFromData
OleIsRunning
GetRunningObjectTable
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
CoFreeUnusedLibraries
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleSetContainedObject
CoCreateInstance
CoInitializeEx
CoUninitialize
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgIsStorageFile
StgOpenStorage
CreateFileMoniker
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfile
CreateStreamOnHGlobal
CLSIDFromString
StringFromGUID2
CoDisconnectObject
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
OleGetClipboard
WriteClassStg
OleInitialize
OleUninitialize
OleCreate
CoInitialize
CoCreateGuid

oleaut32

SysFreeString
SysStringLen
VariantClear
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysAllocString
VariantInit
SysAllocStringByteLen
SysStringByteLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
VariantChangeType
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
GetErrorInfo
SetErrorInfo
CreateErrorInfo

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_DrawEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipFree
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipAlloc

oledlg

OleUIBusyW

winspool.drv

DocumentPropertiesW
OpenPrinterW
GetJobW
ClosePrinter

comdlg32

GetFileTitleW

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 856KB - Virtual size: 855KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 367KB - Virtual size: 31.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 353KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14aa956864b93dd895ef90abab4f7f5a

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

be:5c:67:85:10:fc:0b:57:c9:b1:a7:82:4d:93:c8:1eCertificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

91:d8:a5:d7:a8:b0:02:d2:7e:eb:28:dd:39:7b:f7:22:8b:1d:b0:06Signer

Headers

DLL Characteristics

File Characteristics

Imports

version

d3dx9_42

d3d9

dsound

winmm

imm32

ws2_32

wininet

iphlpapi

msvfw32

shlwapi

dinput8

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msimg32

comctl32

oleacc

gdiplus

oledlg

winspool.drv

comdlg32

Sections

.text Size: 4.4MB - Virtual size: 4.4MB

.rdata Size: 856KB - Virtual size: 855KB

.data Size: 367KB - Virtual size: 31.6MB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 353KB - Virtual size: 352KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

be:5c:67:85:10:fc:0b:57:c9:b1:a7:82:4d:93:c8:1e
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

91:d8:a5:d7:a8:b0:02:d2:7e:eb:28:dd:39:7b:f7:22:8b:1d:b0:06
Signer

.text
Size: 4.4MB - Virtual size: 4.4MB

.rdata
Size: 856KB - Virtual size: 855KB

.data
Size: 367KB - Virtual size: 31.6MB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 353KB - Virtual size: 352KB