986faa981b8c92def465eafec020aea0f1215135cc92aaf03dcc46817867e162

Sharing

Copy URL Twitter E-mail

General

Target

986faa981b8c92def465eafec020aea0f1215135cc92aaf03dcc46817867e162
Size

3.3MB
MD5

1eba8290320e72aadc87c0eca8cb0817
SHA1

1b8120f2c0b141619fb4a63845af115cdec05227
SHA256

986faa981b8c92def465eafec020aea0f1215135cc92aaf03dcc46817867e162
SHA512

ce0d7e560cb86f84023a1e7b9a5eb34aa09052643460abe41d4221f96dd8bf61205d480778383311bb8ddb571cfc9eb1496364337f3a4147e47f8fd4f63ba935
SSDEEP

49152:7T3q85bxJfC5FMKpP/y1ef3M3kkgG/4WU3S07xdPEl0IqDW1liis0aRTiH9vviKg:P3PjCTMy3iP/4hjg5ziib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
986faa981b8c92def465eafec020aea0f1215135cc92aaf03dcc46817867e162

Files

986faa981b8c92def465eafec020aea0f1215135cc92aaf03dcc46817867e162
.dll windows x86

9a827b29c7da6510bcd807d6fac6b3a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdiplus

GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageI
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipDisposeImage
GdipFree
GdiplusShutdown
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipBitmapSetPixel
GdipDrawImageRectRectI
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawImageRectI

kernel32

InterlockedExchangeAdd
CreateDirectoryW
GetSystemDirectoryW
GetDiskFreeSpaceExW
GetDriveTypeW
DuplicateHandle
AllocConsole
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
lstrcmpA
GetSystemInfo
VirtualAlloc
VirtualFree
GetModuleHandleA
lstrcatA
FormatMessageW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
GetCurrentProcessId
GetVersionExA
CompareStringW
InterlockedExchange
CompareStringA
GetLocaleInfoW
EnumResourceLanguagesW
ConvertDefaultLocale
SetEvent
CreateEventW
GetThreadLocale
FindClose
FindNextFileW
FindFirstFileW
GlobalGetAtomNameW
QueryPerformanceCounter
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalFlags
SetErrorMode
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
GetFileSizeEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
SetStdHandle
GetFileType
RtlUnwind
HeapReAlloc
GetCommandLineA
RaiseException
ExitProcess
ExitThread
HeapSize
VirtualQuery
GetTimeZoneInformation
HeapCreate
HeapDestroy
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStartupInfoA
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleA
GetConsoleOutputCP
GetExitCodeProcess
LocalFree
GetDriveTypeA
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
SetEnvironmentVariableW
QueryPerformanceFrequency
FlushFileBuffers
WriteFile
SetFilePointer
WriteConsoleW
GetStdHandle
GetConsoleWindow
MulDiv
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
VirtualProtectEx
VirtualQueryEx
GetCurrentThreadId
LocalFileTimeToFileTime
SystemTimeToFileTime
lstrlenA
ReadFile
CreateProcessW
GetStartupInfoW
CreatePipe
WaitForSingleObject
ExpandEnvironmentStringsW
GetModuleHandleW
IsBadWritePtr
GetFileSize
GetFileTime
LoadLibraryA
TerminateThread
GetPrivateProfileIntW
lstrcmpiW
GetTickCount
GetSystemDefaultLCID
SuspendThread
ResumeThread
Beep
InterlockedDecrement
InterlockedIncrement
DeleteFileW
GetFileAttributesW
CreateThread
CopyFileW
SetCurrentDirectoryA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetFileTime
CreateFileW
lstrcmpW
FlushInstructionCache
VirtualProtect
TlsGetValue
FreeConsole
GetCurrentThread
SetThreadPriority
TlsSetValue
Sleep
WideCharToMultiByte
SetCurrentDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
TlsFree
GetCurrentDirectoryW
IsBadReadPtr
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateMutexW
SetLastError
GetVersionExW
TlsAlloc
GetLastError
GetCurrentProcess
lstrcpynW
lstrcpyW
GetModuleFileNameW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenW
GetModuleFileNameA
MultiByteToWideChar
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryA
GetCommandLineW

user32

DeferWindowPos
AdjustWindowRectEx
RegisterClassW
GetClassInfoExW
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetClassLongW
GetCapture
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
DestroyMenu
CharNextW
GetSysColorBrush
UnregisterClassW
CopyAcceleratorTableW
GetNextDlgGroupItem
PostThreadMessageW
CharUpperW
SetRectEmpty
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
SetMenuInfo
GetMenuItemInfoW
IsMenu
GetMenuItemID
ModifyMenuW
MessageBoxA
wsprintfW
ChildWindowFromPoint
IsClipboardFormatAvailable
EndPaint
BeginPaint
GetCursorInfo
ClientToScreen
SetMenu
TrackPopupMenu
CreatePopupMenu
CreateMenu
SetLayeredWindowAttributes
SetParent
FlashWindowEx
ShowCaret
HideCaret
EnumChildWindows
SetFocus
GetNextDlgTabItem
DestroyAcceleratorTable
GetActiveWindow
IsWindowEnabled
GetDesktopWindow
CreateAcceleratorTableW
GetWindowLongW
IsDialogMessageW
TranslateAcceleratorW
WindowFromDC
DrawIconEx
GetIconInfo
GetCursor
AttachThreadInput
GetWindowThreadProcessId
GetWindowDC
GetScrollInfo
VkKeyScanW
MessageBeep
InsertMenuW
RegisterClassExW
DefWindowProcW
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowTextLengthW
FrameRect
DestroyWindow
ChangeClipboardChain
SetClipboardViewer
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
WindowFromPoint
ReleaseCapture
SetCapture
SetCursor
LoadCursorW
GetFocus
InflateRect
GetComboBoxInfo
DrawTextW
CopyRect
GetSysColor
SetActiveWindow
ExitWindowsEx
SetTimer
CreateWindowExW
IntersectRect
GetDlgCtrlID
EndDialog
GetForegroundWindow
DialogBoxParamW
SetWindowTextW
GetDlgItem
RedrawWindow
RemoveMenu
GetSubMenu
LoadMenuW
LockWindowUpdate
GetParent
EnableMenuItem
GetMenuItemCount
UpdateWindow
IsZoomed
PtInRect
InvalidateRect
GetMessageW
SetWindowPos
SetForegroundWindow
ShowWindow
DrawIcon
IsIconic
RegisterHotKey
UnregisterHotKey
MoveWindow
SetWindowLongW
PostMessageW
CheckMenuItem
DeleteMenu
OffsetRect
AppendMenuW
GetSystemMenu
LoadBitmapW
mouse_event
KillTimer
SetClipboardData
EmptyClipboard
EnumWindows
GetClassNameW
IsWindowVisible
GetWindowTextW
CloseClipboard
GetClipboardData
OpenClipboard
RegisterClipboardFormatW
IsWindow
EqualRect
SetRect
MessageBoxW
keybd_event
GetAsyncKeyState
SetCursorPos
GetKeyState
GetCursorPos
IsChild
FindWindowW
GetClassInfoW
LoadIconW
LoadImageW
LoadImageA
DispatchMessageW
TranslateMessage
SetScrollInfo
GetMenu
SystemParametersInfoA
GetWindowPlacement
CreateDialogIndirectParamW
GetLastActivePopup
GetMenuStringW
InvalidateRgn
SetWindowRgn
DrawFocusRect
GetWindow
PeekMessageW
ReleaseDC
GetDC
SetPropW
CallWindowProcW
RemovePropW
GetPropW
GetMenuState
DrawStateW
FillRect
PrintWindow
GetMenuInfo
ScreenToClient
GetWindowRect
SystemParametersInfoW
GetSystemMetrics
GetKeyNameTextW
MapVirtualKeyW
SendMessageW
GetClientRect
EnableWindow
IsRectEmpty

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
Rectangle
GetBkMode
Ellipse
CreateFontW
CreateHatchBrush
GetMapMode
CreatePatternBrush
SaveDC
RestoreDC
SetStretchBltMode
SetMapMode
ExcludeClipRect
LineTo
MoveToEx
GetCurrentObject
StretchBlt
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateEllipticRgn
LPtoDP
GetRgnBox
CombineRgn
CreateRectRgnIndirect
DeleteObject
DPtoLP
CreateRectRgn
RoundRect
GetPixel
GetBitmapBits
CreatePen
GetBkColor
GetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
CreateSolidBrush
BitBlt
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectW
DeleteDC
GetDeviceCaps
CreateDCW
CreateBitmap
CreateDIBSection
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBitmapBits
GetTextExtentPointA
GetTextMetricsA
GetTextMetricsW
CreatePalette
CreateDIBitmap
SetBkColor
SetBkMode
SetTextColor
GetClipBox

msimg32

TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegDeleteValueW
RegOpenKeyExW
RegOpenKeyW
RegEnumKeyW
GetUserNameW
RegDeleteKeyW
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
DragQueryFileW
DragFinish
ShellExecuteExW
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHFileOperationW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathRelativePathToW
PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
CoUninitialize

oleaut32

SysAllocString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantChangeType
VariantInit
VariantCopy
VariantClear
SafeArrayDestroy
OleCreateFontIndirect
GetErrorInfo

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winmm

PlaySoundW

winhttp

WinHttpReceiveResponse
WinHttpOpen
WinHttpConnect
WinHttpReadData
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpSendRequest

iphlpapi

GetAdaptersInfo

Exports

Exports

InitApp
MsgFilter
PlayFile
PlayPack
StartApp

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 454KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a827b29c7da6510bcd807d6fac6b3a2

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

winmm

winhttp

iphlpapi

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 545KB - Virtual size: 545KB

.data Size: 79KB - Virtual size: 454KB

.rsrc Size: 235KB - Virtual size: 234KB

.reloc Size: 167KB - Virtual size: 167KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 545KB - Virtual size: 545KB

.data
Size: 79KB - Virtual size: 454KB

.rsrc
Size: 235KB - Virtual size: 234KB

.reloc
Size: 167KB - Virtual size: 167KB