603b9b1398b750fbef9eabab3a7784fcb93c2f0a3f28cfe2d38f43590e679bec

Sharing

Copy URL Twitter E-mail

General

Target

603b9b1398b750fbef9eabab3a7784fcb93c2f0a3f28cfe2d38f43590e679bec
Size

5.9MB
MD5

2ca767924a5b6d258de8a59a5b5546df
SHA1

18b054b93517482585d13189e4e6bb0376209566
SHA256

603b9b1398b750fbef9eabab3a7784fcb93c2f0a3f28cfe2d38f43590e679bec
SHA512

e51aed3a660b4d890a348b796708960e7d6ded1d3dc5229ecb3418d1b4e61fe12d86e666e29fa4c52056e2c21bd967362a6914661dd03dff16ae36d25bb8d911
SSDEEP

98304:XIuGWXsJGJV6K3IolRBjUcyAkqjdg7GUszggQG0vwDdFLOAkGkzdnEVomFHKnP3:XIvWXWgNua+szggQG0vWdFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603b9b1398b750fbef9eabab3a7784fcb93c2f0a3f28cfe2d38f43590e679bec

Files

603b9b1398b750fbef9eabab3a7784fcb93c2f0a3f28cfe2d38f43590e679bec
.dll windows x86

f9a204b0fce93f527fe0b78b14fe41cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDriveTypeW
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetExitCodeProcess
GenerateConsoleCtrlEvent
VirtualQuery
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GlobalFlags
GetFileAttributesExW
GetVersionExW
GetFileAttributesW
FindClose
PeekNamedPipe
CreatePipe
GetModuleFileNameW
FindNextFileW
GetCommandLineW
FindFirstFileW
CreateDirectoryW
LoadLibraryW
GetUserDefaultLCID
ExitProcess
FreeResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
MapViewOfFileEx
CreateFileMappingW
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
UnmapViewOfFile
ResetEvent
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
SwitchToThread
GetCurrentThreadId
SetLastError
HeapCreate
QueryDosDeviceW
GetCurrentProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetWaitableTimer
CreateWaitableTimerW
WriteFile
ReadFile
GetFileSize
CreateFileW
IsDebuggerPresent
ResumeThread
CopyFileW
MoveFileW
GetVolumeInformationW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
GetTickCount
FreeLibrary
ReleaseSemaphore
PostQueuedCompletionStatus
CreateEventW
CreateIoCompletionPort
GetSystemInfo
CreateThread
GetQueuedCompletionStatus
SetEvent
SetThreadPriority
WaitForSingleObject
CloseHandle
CreateSemaphoreW
Sleep
DeleteFileW
TryEnterCriticalSection
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleCP
SetFilePointerEx
GetStringTypeW
LCMapStringW
SetStdHandle
QueryPerformanceFrequency
VirtualAlloc
HeapQueryInformation
GetCommandLineA
GetFileInformationByHandle
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
GetTimeZoneInformation
GetModuleHandleExW
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetTempFileNameW
GetProfileIntW
SearchPathW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
FindResourceExW
VerifyVersionInfoW
VerSetConditionMask
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalGetAtomNameW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
lstrcpyW
GetThreadLocale
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
LocalFree
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
EncodePointer
OutputDebugStringA
SystemTimeToFileTime
GetSystemTime
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
ConvertFiberToThread
QueryPerformanceCounter
DeleteFiber
GetFileType
GetStdHandle
FormatMessageW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLastError
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree

user32

PeekMessageW
EnableWindow
InvalidateRect
GetCursorPos
GetWindowThreadProcessId
MonitorFromWindow
SetActiveWindow
WaitForInputIdle
OpenClipboard
GetMonitorInfoW
CloseClipboard
EmptyClipboard
MoveWindow
SetClipboardData
SetForegroundWindow
CopyImage
GetWindowLongW
TranslateMessage
DispatchMessageW
DefWindowProcW
PostMessageW
DestroyWindow
GetPropW
CreateWindowExW
RemovePropW
LoadStringW
GetActiveWindow
GetClassInfoW
SetTimer
RegisterClassW
SetPropW
LoadIconW
LoadCursorW
GetDesktopWindow
GetParent
LoadImageW
GetWindowRect
GetDC
GetSystemMetrics
GetWindowDC
GetClientRect
UnregisterClassW
CreateMenu
ReleaseDC
MsgWaitForMultipleObjects
MessageBoxW
AdjustWindowRectEx
EnableMenuItem
ShowWindow
GetWindow
GetProcessWindowStation
GetUserObjectInformationW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetMenuItemID
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
ShowScrollBar
GetWindowTextW
GetWindowTextLengthW
MapWindowPoints
EqualRect
GetClassLongW
GetLastActivePopup
SetScrollInfo
GetScrollInfo
GetMenuStringW
GetMenuState
RemoveMenu
GetMessageW
DrawTextExW
GrayStringW
TabbedTextOutW
CheckDlgButton
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
PostQuitMessage
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
CharNextW
CreateDialogIndirectParamW
EndDialog
DrawFocusRect
NotifyWinEvent
SendDlgItemMessageA
SetRectEmpty
GetMenuItemInfoW
InflateRect
SystemParametersInfoW
MonitorFromPoint
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
PostThreadMessageW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
CharUpperW
IsClipboardFormatAvailable
TrackMouseEvent
BringWindowToTop
LoadAcceleratorsW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LockWindowUpdate
SetClassLongW
DrawEdge
DrawFrameControl
DrawIconEx
UnionRect
GetIconInfo
GetMenuDefaultItem
EnableScrollBar
HideCaret
InvertRect
SetCursorPos
CopyIcon
FrameRect
CharUpperBuffW
UpdateLayeredWindow
SetMenuDefaultItem
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
AppendMenuW
SubtractRect
GetUpdateRect
GetDoubleClickTime
GetComboBoxInfo
DestroyCursor
GetWindowRgn
SetCursor
GetKeyState
SendMessageW
DrawTextW
CheckMenuItem
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
DestroyIcon
IsZoomed
SetRect
GetSystemMenu
CallWindowProcW
GetFocus
IsWindowVisible
SetWindowPos
SetWindowRgn
FillRect
ScreenToClient
MessageBeep
WindowFromPoint
GetScrollPos
DrawIcon
OffsetRect
GetCapture
RedrawWindow
GetScrollRange
CopyRect
GetDlgCtrlID
ClientToScreen
IsChild
GetTopWindow
GetSysColor
IsWindowEnabled
SetMenu
WinHelpW
LoadBitmapW
IsRectEmpty
IntersectRect
SetFocus
GetClassNameW
SetParent
SetCapture
SetScrollRange
SetWindowLongW
KillTimer
SetScrollPos
PtInRect
UpdateWindow
ReleaseCapture
IsIconic
GetNextDlgTabItem
IsWindow
ModifyMenuW
GetMenu
GetMenuItemCount
DeleteMenu
CreatePopupMenu
TrackPopupMenu
GetSubMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
DestroyMenu
TranslateAcceleratorW
InsertMenuW
MapVirtualKeyExW

gdi32

RoundRect
GetTextExtentPoint32W
CreateFontIndirectW
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
StretchBlt
RealizePalette
GetStockObject
GetDeviceCaps
GetSystemPaletteEntries
SelectPalette
CreatePalette
GetObjectW
SetStretchBltMode
DeleteObject
DeleteDC
Escape
ExcludeClipRect
GetClipBox
CreatePatternBrush
GetViewportExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
CreateSolidBrush
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkMode
GetViewportOrgEx
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
GetRgnBox
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
CreateEllipticRgn
Ellipse
Rectangle
CreatePen
GetTextMetricsW
CreateRoundRectRgn
RestoreDC
PatBlt
GetWindowOrgEx
CreateHatchBrush
SetPixel
GetWindowExtEx
DPtoLP
CombineRgn
CreateDCW
CopyMetaFileW
SetTextColor
SetBkColor
CreateBitmap
CreateRectRgn
GetPixel
SetRectRgn
GetMapMode
GetTextColor
GetBkColor
CreateRectRgnIndirect
GetObjectType
SetPixelV
GetTextFaceW
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
Polyline
Polygon
CreatePolygonRgn
OffsetRgn
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
ScaleWindowExtEx

advapi32

DeregisterEventSource
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
RegDeleteKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegisterEventSourceW

shell32

SHGetSpecialFolderPathW
DragFinish
DragQueryFileW
Shell_NotifyIconW
SHAppBarMessage
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteW

ole32

OleLockRunning
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
CLSIDFromProgID
OleRun
CLSIDFromString
CoSetProxyBlanket
CoTaskMemFree
DoDragDrop
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc

oleaut32

VarBstrFromDate
SysAllocStringLen
SysStringLen
SysFreeString
VariantClear
VariantChangeType
VarCmp
VariantCopy
SysAllocString
RegisterTypeLi
OleCreateFontIndirect
VariantCopyInd
LoadTypeLi
VariantInit
LHashValOfNameSys
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy

comctl32

ImageList_AddMasked
InitCommonControlsEx
ImageList_Create
ImageList_Destroy

gdiplus

GdiplusStartup
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdiplusShutdown

psapi

GetProcessImageFileNameW

shlwapi

StrPBrkW
PathFindExtensionW
StrChrW
PathFindFileNameW
StrFormatKBSizeW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW

winmm

timeGetTime
timeEndPeriod
timeGetDevCaps
timeSetEvent
timeBeginPeriod
timeKillEvent
PlaySoundW

msimg32

AlphaBlend
TransparentBlt

uxtheme

GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
DrawThemeText
GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
IsAppThemed
GetThemeSysColor

oledlg

OleUIBusyW

ws2_32

freeaddrinfo
setsockopt
htons
connect
WSAGetLastError
WSAAddressToStringW
send
getsockname
getaddrinfo
WSAStringToAddressW
WSASetLastError
shutdown
closesocket
WSAIoctl
ntohs
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
recv
WSAEnumNetworkEvents
WSACleanup
bind
WSAStartup
socket

iphlpapi

GetAdaptersInfo

bcrypt

BCryptGenRandom

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

crypt32

CertOpenStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertCloseStore

Exports

Exports

?active_implementation@simdutf@@3V?$atomic_ptr@$$CBVimplementation@simdutf@@@internal@1@A
?available_implementations@simdutf@@3Vavailable_implementation_list@internal@1@B
cjck

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9a204b0fce93f527fe0b78b14fe41cd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

psapi

shlwapi

winmm

msimg32

uxtheme

oledlg

ws2_32

iphlpapi

bcrypt

oleacc

imm32

winspool.drv

crypt32

Exports

Exports

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 45KB - Virtual size: 75KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 230KB - Virtual size: 229KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 45KB - Virtual size: 75KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 230KB - Virtual size: 229KB