ssText3d[.]scr

Sharing

Copy URL Twitter E-mail

General

Target

ssText3d.scr
Size

248KB
MD5

32ce75924e3c480de64d537cca0269b0
SHA1

eecffc31a6ea719c5150e54da198fb715e261011
SHA256

4eb14f13e5e507808d14245c9c913d3da533c9c9eb01485015693b318a71588a
SHA512

d489020292c73f42683fb27305580f27a715fb852fb1e96a999a799afbd11c10834bb044c280803e3cd77de512998bc218e0b0d48a911b45e1f0bb8981893666
SSDEEP

6144:/kFIKA/JFaXTKMSoId+Xss6kxorcJW8S4KcWjeMBDbF7v8y:8FIKA/nNModxs6qorr8db0D5Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ssText3d.scr

Files

ssText3d.scr
.exe windows x64

9e9c88f7957b51faf8f42f5d49164745

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

EventActivityIdControl
RegQueryValueExW
EventUnregister
RegOpenKeyExW
RegSetValueExW
EventSetInformation
RegCreateKeyExW
EventRegister
EventWriteTransfer
RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

GlobalUnlock
GlobalLock
MulDiv
GetLastError
ReleaseSRWLockExclusive
OutputDebugStringW
InitOnceComplete
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
GlobalFree
CloseHandle
HeapSetInformation
HeapAlloc
GetWindowsDirectoryW
GetProcAddress
CreateMutexExW
GetTimeFormatW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsProcessorFeaturePresent
GetModuleHandleA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameA
InitOnceBeginInitialize
CreateSemaphoreExW
HeapFree
SetLastError
lstrlenW
ReleaseSemaphore
GetModuleHandleExW
GetPrivateProfileIntW
GetPrivateProfileSectionW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
GetPrivateProfileStringW
FormatMessageW
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
lstrcmpW
IsDebuggerPresent

gdi32

GetGlyphOutlineW
GetObjectW
GetOutlineTextMetricsW
ExcludeClipRect
SetTextColor
SetBkColor
CreateFontW
GetDeviceCaps
GetStockObject
ScriptStringFree
ScriptStringAnalyse
ScriptStringGetOrder
GetCurrentObject
CreateFontIndirectW
DeleteDC
CreateDCW
SelectObject
DeleteObject

user32

GetSystemMetrics
SystemParametersInfoA
SetRectEmpty
PostMessageW
GetMessageW
PostQuitMessage
TranslateMessage
DispatchMessageW
EnumDisplaySettingsW
LoadCursorW
LoadIconW
RegisterClassW
GetClientRect
AdjustWindowRect
CreateWindowExW
SystemParametersInfoW
PeekMessageW
SetTimer
KillTimer
SetCursor
BeginPaint
EnableWindow
EndPaint
DefWindowProcW
SetWindowPos
UnionRect
ScreenToClient
InvalidateRect
UpdateWindow
SetRect
DrawTextW
MessageBoxW
GetWindowTextW
SendMessageW
CheckDlgButton
SetWindowTextW
CheckRadioButton
EndDialog
LoadStringW
OffsetRect
SetDlgItemTextW
GetDlgItemTextW
SendDlgItemMessageW
IsDlgButtonChecked
DialogBoxParamW
IntersectRect
GetDlgItem
FillRect

msvcrt

_onexit
__dllonexit
_unlock
?terminate@@YAXXZ
sqrtf
_commode
_fmode
_acmdln
__C_specific_handler
_initterm
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
free
time
rand
memcpy_s
srand
_vsnwprintf
_lock
iswdigit
_atoi64
qsort
malloc
calloc
realloc
_finite
_callnewh
acosf
atan2f
cosf
memcpy
memset
sinf

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetStartupInfoW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-sysinfo-l1-1-0

GetVersionExA
GetSystemTimeAsFileTime

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-com-l1-1-0

CoInitializeEx
PropVariantClear
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-libraryloader-l1-2-0

LockResource
LoadResource
SizeofResource

api-ms-win-core-heap-l2-1-0

GlobalAlloc

winbrand

BrandingFormatString

comctl32

ord17

comdlg32

ChooseFontW
GetOpenFileNameW
ChooseColorW

d3d9

Direct3DCreate9

glu32

gluTessBeginPolygon
gluTessBeginContour
gluTessVertex
gluTessEndContour
gluTessEndPolygon
gluNewTess
gluTessCallback
gluTessNormal
gluTessProperty
gluDeleteTess

winmm

timeGetTime

Sections

.text
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e9c88f7957b51faf8f42f5d49164745

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-heap-l2-1-0

winbrand

comctl32

comdlg32

d3d9

glu32

winmm

Sections

.text Size: 172KB - Virtual size: 169KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 22KB

.pdata Size: 8KB - Virtual size: 6KB

.rsrc Size: 28KB - Virtual size: 25KB

.reloc Size: 4KB - Virtual size: 604B

.text
Size: 172KB - Virtual size: 169KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 22KB

.pdata
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 28KB - Virtual size: 25KB

.reloc
Size: 4KB - Virtual size: 604B