08bd97da0613a48786be2f98bd476014372b376a18c223241274d24b7cd212ce

Sharing

Copy URL Twitter E-mail

General

Target

08bd97da0613a48786be2f98bd476014372b376a18c223241274d24b7cd212ce
Size

7.4MB
MD5

22d71883177af1341dbc691c1ae4f761
SHA1

c5c73f6430f5e13e2456a169570e38fbe3e7c3eb
SHA256

08bd97da0613a48786be2f98bd476014372b376a18c223241274d24b7cd212ce
SHA512

256360dae48f7f2f391b88e484afa47e1e05951bc5779b447306161f204abcab83e11d1d4c517825c3ac76d9b36350710f896bb6bb81f8caeb7649231c3522fb
SSDEEP

49152:K9DYl/8Pnog4WzCSwPbAofaK9nPpNuYQu9FpDGkb+fS6lbHNIrjmaJXxlPE0mwuk:KVjzYblWYT+b0hlPdmnmA+

Score

1^/10

Malware Config

Signatures

Files

08bd97da0613a48786be2f98bd476014372b376a18c223241274d24b7cd212ce
.exe windows x86

ea784e8fdb83adff9cbfdbd3f326033e

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:bb:73:ea:02:c7:00:da:07:70:da:7b:63:d9:04:51
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24/07/2020, 00:00

Not After

26/08/2021, 12:00

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/05/2021, 00:00

Not After

21/08/2024, 23:59

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

96:68:55:fa:5e:f2:e1:79:46:4e:2f:12:39:be:1f:3b:1d:d6:c1:50:59:05:d0:03:6b:d1:92:70:43:fe:61:a5
Signer

Actual PE Digest

96:68:55:fa:5e:f2:e1:79:46:4e:2f:12:39:be:1f:3b:1d:d6:c1:50:59:05:d0:03:6b:d1:92:70:43:fe:61:a5

Digest Algorithm

sha256

PE Digest Matches

false

6d:5b:8b:f2:b3:6f:d8:52:2c:4d:b8:f6:ad:9c:1b:11:9b:52:1c:88
Signer

Actual PE Digest

6d:5b:8b:f2:b3:6f:d8:52:2c:4d:b8:f6:ad:9c:1b:11:9b:52:1c:88

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
Sleep
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetLocalTime
RaiseException
VirtualFree
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetLastError
InitializeCriticalSectionAndSpinCount
VirtualAlloc
LeaveCriticalSection
OpenEventW
InitializeCriticalSectionEx
FileTimeToLocalFileTime
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
LoadLibraryExA
LoadResource
SetEnvironmentVariableA
CreateFileW
GetTimeZoneInformation
EnumSystemLocalesEx
IsValidLocaleName
LCMapStringEx
GetUserDefaultLocaleName
CompareStringEx
GetDateFormatEx
GetTimeFormatEx
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
GetStringTypeW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
lstrlenA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount64
QueryPerformanceCounter
GetProcessHeap
HeapAlloc
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
InitOnceExecuteOnce
GetStartupInfoW
TerminateProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
SetConsoleCtrlHandler
FatalAppExitA
IsValidCodePage
WriteConsoleW
OutputDebugStringW
GetStdHandle
AreFileApisANSI
ExitProcess
ExitThread
CreateThread
GetFileType
SetStdHandle
VirtualQuery
SetThreadStackGuarantee
GetSystemTimeAsFileTime
GetSystemInfo
HeapValidate
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
RtlUnwind
GetModuleHandleExW
LocalUnlock
LocalLock
SearchPathA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetTickCount
GetWindowsDirectoryA
CreateSemaphoreA
WaitForMultipleObjects
CreateMutexA
ReleaseMutex
ReleaseSemaphore
GetUserDefaultUILanguage
FindResourceExW
GetCurrentDirectoryA
SetFileAttributesA
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
GetStringTypeExA
GetVolumeInformationA
MoveFileA
GetShortPathNameA
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
GetACP
GetCPInfo
GetOEMCP
PulseEvent
ResetEvent
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
VirtualProtect
GetProfileIntA
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetAtomNameA
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
SetFileTime
GetFullPathNameA
GetFileTime
GetFileAttributesA
GetDiskFreeSpaceA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetLocaleInfoEx
GetThreadPreferredUILanguages
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
RegisterApplicationRestart
RegisterApplicationRecoveryCallback
lstrcmpA
GetVersionExA
GetCurrentThread
InterlockedExchange
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
GetCurrentProcessId
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleFileNameW
FreeResource
GetVersion
OutputDebugStringA
GetFileAttributesW
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
FindResourceW
LockResource
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
LoadLibraryA
lstrcmpiA
EnterCriticalSection
SizeofResource
GetCommandLineA

user32

DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuIndirectA
LoadMenuW
LoadMenuA
DrawFrameControl
DrawEdge
EndDialog
CreateDialogIndirectParamA
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExA
DlgDirListComboBoxA
DlgDirSelectExA
DlgDirListA
LoadCursorW
LoadCursorA
GetLastActivePopup
FindWindowExA
FindWindowA
SetParent
GetDesktopWindow
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDCEx
GetDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
KillTimer
SetTimer
SetCapture
GetActiveWindow
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageA
SendNotifyMessageA
DrawAnimatedRects
DrawCaption
IsDialogMessageA
SetWindowTextA
DrawTextA
IsWindowEnabled
EnableWindow
SendDlgItemMessageA
GetMenuBarInfo
CheckRadioButton
DestroyIcon
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetTopWindow
GetClassNameA
GetParent
GetClassLongA
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
ScrollWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
UnpackDDElParam
ReuseDDElParam
DestroyCursor
GetKeyNameTextA
UnregisterClassA
CharNextA
SubtractRect
UnionRect
IntersectRect
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetFocus
GetWindow
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
MapDialogRect
TabbedTextOutA
IsWindow
PostMessageA
RemoveMenu
AppendMenuA
DrawTextExA
GrayStringA
DrawStateA
GetTabbedTextExtentA
WindowFromDC
ExcludeUpdateRgn
ScrollDC
SetMenuContextHelpId
GetMenuContextHelpId
GetSysColorBrush
DrawFocusRect
FillRect
FrameRect
InvertRect
CheckMenuRadioItem
LoadBitmapA
GetWindowThreadProcessId
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
SetCursor
ReleaseCapture
LoadAcceleratorsA
TranslateAcceleratorA
ScrollWindowEx
DestroyMenu
InflateRect
SetRect
CharNextW
SetWindowLongA
SendMessageA
GetWindowLongA
IsMenu
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
CheckDlgButton
LoadImageA
MapVirtualKeyA
SystemParametersInfoA
GetSystemMetrics
SetRectEmpty
SetCursorPos
PtInRect
GetAsyncKeyState
RealChildWindowFromPoint
CopyImage
GetClipboardFormatNameA
GetDialogBaseUnits
CharUpperA
LoadAcceleratorsW
CopyAcceleratorTableA
MessageBeep
InSendMessage
IsRectEmpty
GetTabbedTextExtentW
TranslateMDISysAccel
DefMDIChildProcA
MsgWaitForMultipleObjectsEx
EnumChildWindows
CharUpperBuffA
CopyIcon
GetDoubleClickTime
ChangeWindowMessageFilter
SetClassLongA
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
OffsetRect
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetIconInfo
DrawIconEx
IsClipboardFormatAvailable
WaitMessage
IsDlgButtonChecked
RegisterClipboardFormatA
DefFrameProcA

gdi32

CopyMetaFileA
GetDeviceCaps
CloseMetaFile
CreateMetaFileA
CloseEnhMetaFile
CreateEnhMetaFileA
ExtTextOutA
CreateBitmap
SetBkColor
SetTextColor
GetObjectA
AnimatePalette
Arc
BitBlt
Chord
CombineRgn
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateFontIndirectA
CreateFontA
CreateHatchBrush
CreateICA
CreatePalette
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthA
GetCharWidthFloatA
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCurrentObject
GetCurrentPositionEx
GetFontData
GetGlyphOutlineA
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOutlineTextMetricsA
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetFontLanguageInfo
GetCharacterPlacementA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCA
RealizePalette
RoundRect
ResizePalette
SelectObject
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsA
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
TextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceA
GetKerningPairsA
UnrealizeObject
DeleteDC
DeleteObject
StretchDIBits
CreateDIBSection
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPointA
GetTextExtentPoint32W
EnumFontFamiliesExA
DeleteMetaFile
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetDIBColorTable
CreateDCA

msimg32

TransparentBlt
GradientFill
AlphaBlend

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RevertToSelf
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryInfoKeyW
RegSetValueExA
RegSetValueA
RegQueryValueExA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExW
RegEnumValueA
SetThreadToken
OpenThreadToken

shell32

SHGetDesktopFolder
InitNetworkAddressControl
DragAcceptFiles
DragQueryFileA
DragFinish
SHCreateItemFromParsingName
SHGetFileInfoA
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ExtractIconA
SHGetKnownFolderPath
SHAddToRecentDocs

shlwapi

PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA
StrFormatKBSizeA

uxtheme

CloseThemeData
GetThemePartSize
IsAppThemed
DrawThemeTextEx
BufferedPaintInit
BufferedPaintUnInit
BeginBufferedPaint
EndBufferedPaint
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
OpenThemeData

dwmapi

DwmDefWindowProc
DwmSetWindowAttribute
DwmIsCompositionEnabled
DwmExtendFrameIntoClientArea

ole32

PropVariantCopy
CLSIDFromString
CoInitialize
CoCreateGuid
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CoGetMalloc
CoTreatAsClass
CoDisconnectObject
CLSIDFromProgID
CoTaskMemFree
StgOpenStorage
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoInitializeEx
CoUninitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleRegGetMiscStatus
OleRegEnumVerbs
OleCreateMenuDescriptor
OleGetClipboard
GetRunningObjectTable
CreateFileMoniker
OleDestroyMenuDescriptor
OleTranslateAccelerator
CoLockObjectExternal
GetHGlobalFromILockBytes
IsAccelerator
OleRun
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
StgIsStorageILockBytes
CreateGenericComposite
CreateItemMoniker
WriteClassStm
RevokeDragDrop
RegisterDragDrop
GetClassFile
DoDragDrop
OleSetMenuDescriptor
OleQueryCreateFromData
OleQueryLinkFromData
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateOleAdviseHolder
CreateDataAdviseHolder
OleLoad
StringFromCLSID
StgIsStorageFile
OleGetIconOfClass
OleLockRunning
OleIsRunning
OleSetContainedObject
OleSaveToStream
OleSave
CoTaskMemRealloc
StgCreateDocfile
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
CreateBindCtx
OleCreate

oleaut32

VariantClear
SysStringByteLen
SysAllocStringByteLen
VariantInit
VariantChangeType
SafeArrayGetDim
SafeArrayGetElemsize
LoadRegTypeLi
SysReAllocStringLen
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
DosDateTimeToVariantTime
SystemTimeToVariantTime
VariantTimeToSystemTime
VarDateFromUdate
VarUdateFromDate
SysAllocStringLen
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
SysStringLen
SafeArrayAccessData
SysAllocString
SysFreeString

oledlg

ord9
ord7
ord6
ord5
ord4
ord3
ord8

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipCreateBitmapFromFileICM
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImageWidth
GdipDrawImageRectI

propsys

PSGetPropertyDescriptionListFromString

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 806KB - Virtual size: 806KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 387KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea784e8fdb83adff9cbfdbd3f326033e

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

06:bb:73:ea:02:c7:00:da:07:70:da:7b:63:d9:04:51Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

96:68:55:fa:5e:f2:e1:79:46:4e:2f:12:39:be:1f:3b:1d:d6:c1:50:59:05:d0:03:6b:d1:92:70:43:fe:61:a5Signer

6d:5b:8b:f2:b3:6f:d8:52:2c:4d:b8:f6:ad:9c:1b:11:9b:52:1c:88Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

dwmapi

ole32

oleaut32

oledlg

oleacc

gdiplus

propsys

imm32

winmm

Sections

.text Size: 6.0MB - Virtual size: 6.0MB

.rdata Size: 806KB - Virtual size: 806KB

.data Size: 387KB - Virtual size: 419KB

.idata Size: 29KB - Virtual size: 28KB

.rsrc Size: 201KB - Virtual size: 201KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

06:bb:73:ea:02:c7:00:da:07:70:da:7b:63:d9:04:51
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

96:68:55:fa:5e:f2:e1:79:46:4e:2f:12:39:be:1f:3b:1d:d6:c1:50:59:05:d0:03:6b:d1:92:70:43:fe:61:a5
Signer

6d:5b:8b:f2:b3:6f:d8:52:2c:4d:b8:f6:ad:9c:1b:11:9b:52:1c:88
Signer

.text
Size: 6.0MB - Virtual size: 6.0MB

.rdata
Size: 806KB - Virtual size: 806KB

.data
Size: 387KB - Virtual size: 419KB

.idata
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 201KB - Virtual size: 201KB