34f5af6728b460e9334b7f02a0c0b87292692658b15aa8f17f4995c558fca466

Sharing

Copy URL Twitter E-mail

General

Target

34f5af6728b460e9334b7f02a0c0b87292692658b15aa8f17f4995c558fca466
Size

1.6MB
MD5

ec7f56a8ced0b8d79eb7ed0e5c65fca0
SHA1

831fab43d631d22ef77c31a6a3f8843f0130c39a
SHA256

34f5af6728b460e9334b7f02a0c0b87292692658b15aa8f17f4995c558fca466
SHA512

8f22f2cbe5d78b72e764f6db497ce353e096cf370431266395a8228749787e3dae3817e06610fe80677b1e342caeb9aeff94967297abaa7519cb3355d607adb9
SSDEEP

49152:JmXSV5mM1tJcH8/io3mfEN3e9kVAtpE0Y:YXSV5mM1tJm8PyK3e9Dty0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34f5af6728b460e9334b7f02a0c0b87292692658b15aa8f17f4995c558fca466

Files

34f5af6728b460e9334b7f02a0c0b87292692658b15aa8f17f4995c558fca466
.exe windows x86

557bbc6f4ce8e02923fc17698499b2a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcpynA
WriteFile
lstrlenW
lstrcmpiW
WideCharToMultiByte
FormatMessageW
LocalFree
CreateMutexW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetDateFormatW
FlushFileBuffers
GetLocalTime
CreateSemaphoreW
GetCurrentThreadId
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
VirtualFree
VirtualAlloc
InterlockedExchange
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
GetVersionExW
CreateThread
SetEndOfFile
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetModuleHandleA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetFileSize
LoadLibraryA
GetCurrentDirectoryA
CreateFileA
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
GetStringTypeA
GetModuleFileNameA
HeapSize
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
HeapCreate
GetFileType
GetStdHandle
SetHandleCount
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
CompareStringW
CompareStringA
GetStringTypeW
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
FindFirstFileA
FindNextFileW
FindClose
GetFileSizeEx
MultiByteToWideChar
GetProcessHeap
HeapFree
HeapAlloc
FindFirstFileW
OutputDebugStringW
ReadFile
CreateFileW
SetFilePointer
ReleaseSemaphore
QueryPerformanceCounter
MulDiv
lstrcmpW
ResumeThread
IsDebuggerPresent
OpenFileMappingW
CreateEventW
VirtualAllocEx
OpenMutexW
Sleep
VirtualFreeEx
GetModuleHandleW
GetCurrentProcess
UnmapViewOfFile
MapViewOfFile
lstrcpyW
GetProcAddress
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCPInfo
HeapReAlloc
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
DeleteFileW
InterlockedCompareExchange
LoadLibraryW
FreeLibrary
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
QueryPerformanceFrequency
ResetEvent
GetLastError
RaiseException
SetEvent
WaitForSingleObject
CreateDirectoryW
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA

user32

wsprintfW
GetSystemMetrics
IsWindowVisible
SetWindowPos
SystemParametersInfoW
GetWindowRect
DispatchMessageW
DefWindowProcW
SetWindowTextW
LoadIconW
TranslateMessage
BeginPaint
DeleteMenu
PostMessageW
PostQuitMessage
GetMessageW
ShowCursor
EndPaint
EnumDisplaySettingsW
GetMonitorInfoW
AdjustWindowRect
UpdateWindow
CreateWindowExW
ShowWindow
GetCursorPos
GetAsyncKeyState
InvalidateRect
PeekMessageW
GetDesktopWindow
RedrawWindow
SetWindowLongW
MonitorFromWindow
ReleaseDC
GetClassNameW
SetCursorPos
MessageBoxW
SendMessageW
GetSystemMenu
RegisterWindowMessageW
MsgWaitForMultipleObjects
GetQueueStatus
PostThreadMessageW
GetMessageExtraInfo
ClientToScreen
ScreenToClient
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
SetForegroundWindow
LoadCursorW
FindWindowW
GetClientRect
EnumWindows
GetDC
RegisterClassExW
SetRect

gdi32

DeleteDC
DeleteObject
SelectObject
GetStockObject
GetGlyphOutlineW
GetObjectW
GetDeviceCaps
StretchDIBits
GetTextMetricsW
SetTextColor
CreateFontIndirectW
SetBkColor
SetBkMode
CreateCompatibleDC
SetMapMode
AddFontResourceExW
RemoveFontResourceExW

comdlg32

GetSaveFileNameW

advapi32

CryptReleaseContext
RegCloseKey
CryptGetHashParam
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptHashData
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoTaskMemFree

dsound

ord11

winmm

timeKillEvent
timeBeginPeriod
timeEndPeriod
timeGetTime
timeSetEvent

ogg

ogg_page_serialno
ogg_stream_pagein
ogg_sync_buffer
ogg_page_eos
ogg_page_granulepos
ogg_sync_wrote
ogg_stream_packetout
ogg_sync_init
ogg_stream_clear
ogg_sync_clear
ogg_sync_pageout
ogg_stream_init

vorbis

vorbis_synthesis_pcmout
vorbis_block_init
vorbis_synthesis_headerin
vorbis_info_init
vorbis_block_clear
vorbis_dsp_clear
vorbis_info_clear
vorbis_synthesis_blockin
vorbis_synthesis_read
vorbis_comment_clear
vorbis_synthesis_init
vorbis_synthesis
vorbis_comment_init

imm32

ImmGetCompositionStringW
ImmReleaseContext
ImmSetOpenStatus
ImmGetContext

canvas

?ResizeWindow@Canvas@@QAEJHH@Z
?Render@Canvas@@QAE_NAAUtagRECT@@@Z
??0Canvas@@QAE@PAUHWND__@@PAVULog@@HHHH_N@Z
??1Canvas@@QAE@XZ
?Draw@Canvas@@QAE_NHHHPBE@Z
?ResizeScreen@Canvas@@QAEJHH@Z

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

557bbc6f4ce8e02923fc17698499b2a1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

dsound

winmm

ogg

vorbis

imm32

canvas

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 173KB - Virtual size: 173KB

.data Size: 15KB - Virtual size: 48KB

.rsrc Size: 176KB - Virtual size: 175KB

.reloc Size: 62KB - Virtual size: 61KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 173KB - Virtual size: 173KB

.data
Size: 15KB - Virtual size: 48KB

.rsrc
Size: 176KB - Virtual size: 175KB

.reloc
Size: 62KB - Virtual size: 61KB