9c6cbf898f94002aa72deb76bbd16504c2f87dc15c92be4da7e3d8a6f3b628b4

Sharing

Copy URL

Twitter E-mail

General

Target

9c6cbf898f94002aa72deb76bbd16504c2f87dc15c92be4da7e3d8a6f3b628b4
Size

4.4MB
MD5

a69cefcefae9f37619add0094a42e2fe
SHA1

4d3d6b7eb115c944f21367faf8b6db97e14e502c
SHA256

9c6cbf898f94002aa72deb76bbd16504c2f87dc15c92be4da7e3d8a6f3b628b4
SHA512

8dc3ee205bcab9ad122d3ae538ce3c46a742ba3327ef27cdf3b6753cbbb7f547c276e2a5541b552dd90bcba15b6e86189266baaa6fc6706d89bc5573e0725c94
SSDEEP

98304:JBplDycQGPf6NlH0r7ESgiKO6Dug6XoObKN9vN+Il89Rw2DBmFLOAkGkzdnEVomb:JBplDycQGPyNlUr7ESyOmi9Rw2wFLOyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c6cbf898f94002aa72deb76bbd16504c2f87dc15c92be4da7e3d8a6f3b628b4

Files

9c6cbf898f94002aa72deb76bbd16504c2f87dc15c92be4da7e3d8a6f3b628b4
.exe windows x86

1bac61d1bbc29500741eb3472d599316

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

xmdapi

?CreateTstpXMdApi@CTORATstpXMdApi@TORALEV1API@@SAPAV12@ABD0@Z

traderapi

?CreateTstpTraderApi@CTORATstpTraderApi@TORASTOCKAPI@@SAPAV12@PBD_N@Z

credittraderapi

?CreateTstpTraderApi@CTORATstpTraderApi@TORACREDITAPI@@SAPAV12@PBD_N@Z

qcvalueaddproapi

?CreateInfoQryApi@CQCValueAddProApi@QCVALUEADDPROAPI@@SAPAV12@XZ
?GetApiVersion@CQCValueAddProApi@QCVALUEADDPROAPI@@SAPBDXZ

kernel32

GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
CreateFileW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
IsProcessorFeaturePresent
GetStdHandle
ExitProcess
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStringTypeW
LCMapStringW
CompareStringW
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
SwitchToThread
QueryPerformanceFrequency
OutputDebugStringW
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
GetDateFormatW
GetUserDefaultLCID
GetTempFileNameA
GetProfileIntA
SearchPathA
GetWindowsDirectoryA
FindResourceExW
GetTempPathA
SetErrorMode
GetCurrentDirectoryA
GetACP
GetCPInfo
GetOEMCP
VirtualProtect
ResetEvent
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
lstrcmpA
GetCurrentThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
lstrcmpiA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
ResumeThread
SuspendThread
SetThreadPriority
ReleaseSemaphore
GetCurrentProcessId
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalSize
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
lstrlenA
ReleaseMutex
GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
CreateMutexA
InitializeCriticalSection
GetModuleFileNameA
GetTickCount
GetPrivateProfileStringA
CreateDirectoryA
WritePrivateProfileStringA
GetFileAttributesA
GetPrivateProfileIntA
WinExec
MultiByteToWideChar
TryEnterCriticalSection
CreateEventA
Sleep
WaitForSingleObject
CloseHandle
CreateFileA
GetVolumeInformationA
SetEndOfFile
DeviceIoControl
lstrcpynA
GetVersionExA
SetThreadUILanguage
SetThreadLocale
SetEvent
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
FindResourceW
LoadResource
RaiseException
HeapReAlloc
LockResource
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
SizeofResource
GetThreadTimes
GetVersionExW
VirtualFree
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GetTimeZoneInformation

user32

ShowOwnedPopups
PostQuitMessage
DrawIconEx
IsRectEmpty
DrawFocusRect
GetSysColorBrush
SetWindowRgn
DrawFrameControl
DrawEdge
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
IntersectRect
InflateRect
CharUpperA
OffsetRect
SetRectEmpty
MapVirtualKeyA
GetKeyNameTextA
TranslateMessage
GetMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
RemoveMenu
InsertMenuA
GetMenuState
GetMenuStringA
ClientToScreen
GetCursorPos
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
SetDlgItemTextA
SetCapture
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
RegisterClipboardFormatA
GetScrollInfo
SetScrollInfo
LoadIconA
GetWindow
GetLastActivePopup
GetTopWindow
GetParent
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
MapWindowPoints
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
LoadImageW
OpenClipboard
CloseClipboard
SetClipboardData
EndDeferWindowPos
GetDlgCtrlID
SetFocus
GetKeyState
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
ReleaseCapture
LoadMenuW
DeleteMenu
DestroyIcon
WindowFromPoint
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
SetLayeredWindowAttributes
LoadCursorW
EnumDisplayMonitors
CopyImage
RealChildWindowFromPoint
MapDialogRect
TrackMouseEvent
WinHelpA
IsZoomed
GetCapture
EmptyClipboard
SetCursorPos
BringWindowToTop
GetDoubleClickTime
GetIconInfo
CopyIcon
ModifyMenuA
DestroyAcceleratorTable
SetClassLongA
GetUpdateRect
WaitMessage
PostThreadMessageA
GetKeyboardLayout
EnableWindow
UnregisterClassA
SendMessageA
RedrawWindow
GetKeyboardState
UpdateWindow
KillTimer
SetTimer
SetCursor
LoadCursorA
PostMessageA
InvalidateRect
GetClientRect
LoadIconW
GetAsyncKeyState
GetSysColor
FrameRect
CopyRect
DrawTextA
DrawIcon
FillRect
LoadImageA
ReleaseDC
GetDC
GetWindowRect
IsIconic
AppendMenuA
LockWindowUpdate
RegisterHotKey
MessageBeep
GetSystemMetrics
ScreenToClient
GetMessagePos
GetSystemMenu
GetDlgItem
SetParent
IsWindowVisible
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetFocus
SetRect
DrawStateA
GetClassNameA
LoadBitmapW
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
CopyAcceleratorTableA
CharUpperBuffA
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
BeginDeferWindowPos
DeferWindowPos
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetNextDlgGroupItem
HideCaret
InvertRect
SubtractRect
IsClipboardFormatAvailable
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar

gdi32

SetTextColor
CopyMetaFileA
CreateDCA
GetDeviceCaps
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
SetBkColor
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CombineRgn
CreateFontIndirectA
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
RealizePalette
StretchBlt
SetDIBColorTable
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceA
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
SetPixel
DeleteObject
CreateFontA
GetObjectA
GetTextExtentPoint32A
SetBkMode
GetTextMetricsA
GetStockObject
OffsetWindowOrgEx
CreateSolidBrush
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

DragFinish
DragQueryFileA
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA

shlwapi

PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathIsDirectoryA
StrFormatKBSizeA

uxtheme

DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeText
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeBackground

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CreateStreamOnHGlobal
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SysAllocStringLen
VariantInit
SysFreeString
SysAllocString
SysStringLen
VariantChangeType
VariantClear
VariantCopy
VarBstrFromDate
LoadTypeLi

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
ImmAssociateContext

oledlg

ord8

gdiplus

GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc
GdipFree
GdiplusShutdown

winmm

timeBeginPeriod
timeEndPeriod
PlaySoundA

netapi32

Netbios

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1bac61d1bbc29500741eb3472d599316

Headers

DLL Characteristics

File Characteristics

Imports

xmdapi

traderapi

credittraderapi

qcvalueaddproapi

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

imm32

oledlg

gdiplus

winmm

netapi32

oleacc

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 425KB - Virtual size: 425KB

.data Size: 29KB - Virtual size: 49KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 175KB - Virtual size: 174KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 425KB - Virtual size: 425KB

.data
Size: 29KB - Virtual size: 49KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 175KB - Virtual size: 174KB