4593df2a531d502e159af6c3377586e81198e694dcd02f2086aba78754d74b4e

Sharing

Copy URL Twitter E-mail

General

Target

4593df2a531d502e159af6c3377586e81198e694dcd02f2086aba78754d74b4e
Size

2.3MB
MD5

f671394d53940df481e38fb23dc71312
SHA1

bb4c9f247e5fcc18b50423831472b1f6d9f60021
SHA256

4593df2a531d502e159af6c3377586e81198e694dcd02f2086aba78754d74b4e
SHA512

721d54ff5254d0cadf2aa80a446e745835a6304db7dc0bd035e761210960d25a322fb3440103d55ab2c8d38bf8cd737078b8a7ee1a414fa1c353832f392c02e2
SSDEEP

49152:MC8z0aGdeVdxPry3DStAn9GBsSL6gDtVAsjSBI8OR2BgEn7rRUuoCH0rqc:MC8zWdubyz7GBsSL6gDtSRIZR2BgE7r7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4593df2a531d502e159af6c3377586e81198e694dcd02f2086aba78754d74b4e

Files

4593df2a531d502e159af6c3377586e81198e694dcd02f2086aba78754d74b4e
.dll windows x86

5ce00e1827b6137884cb4e504ce9e069

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

PlaySoundW

kernel32

IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetStdHandle
ExitProcess
QueryPerformanceFrequency
HeapQueryInformation
GetFileType
SetStdHandle
GetModuleHandleExW
GetTimeZoneInformation
GetEnvironmentStringsW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
RaiseException
OutputDebugStringW
EnumSystemLocalesW
FindFirstFileExW
FindNextFileW
GetACP
IsValidCodePage
FreeLibraryAndExitThread
FreeEnvironmentStringsW
SetEnvironmentVariableW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
GetTempFileNameW
Sleep
GetOEMCP
SearchPathW
GetProfileIntW
GetTickCount64
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
FindResourceExW
GetWindowsDirectoryW
GetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
lstrcpyW
FileTimeToSystemTime
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
SetErrorMode
LocalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalGetAtomNameW
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
SetEvent
GetVersionExW
GetCurrentThread
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
lstrcmpA
GetCurrentProcessId
MulDiv
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
GetModuleHandleA
SetLastError
OutputDebugStringA
GetPrivateProfileIntW
lstrcatA
lstrcpyA
FreeLibrary
LoadLibraryW
CopyFileA
lstrcpynA
_llseek
_lclose
OpenFile
_lread
DeleteCriticalSection
DecodePointer
HeapReAlloc
HeapSize
GetModuleFileNameA
DeleteFileW
GetSystemDefaultLangID
WaitForSingleObject
GetExitCodeThread
GetCommandLineW
CopyFileW
GetVolumeInformationW
GetDriveTypeW
GetLogicalDriveStringsW
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
GetModuleHandleW
GetProcAddress
FormatMessageW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetModuleFileNameW
LocalFree
LocalAlloc
WriteConsoleW
GlobalSize
WriteFile
SetFilePointer
GlobalReAlloc
ReadFile
GetFileSize
CloseHandle
CreateFileW
GlobalHandle
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
GetLastError
MultiByteToWideChar
CreateThread
FindResourceW
LoadResource
LockResource
SizeofResource
TerminateThread
ExitThread

user32

LoadImageW
DestroyIcon
InsertMenuItemW
DestroyMenu
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
ReleaseCapture
BringWindowToTop
IntersectRect
InflateRect
MapVirtualKeyW
GetKeyNameTextW
ShowOwnedPopups
GetCursorPos
TranslateMessage
GetMessageW
PostQuitMessage
CharUpperW
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetWindowThreadProcessId
OffsetRect
SetRectEmpty
SendDlgItemMessageA
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
UnpackDDElParam
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
EnumDisplayMonitors
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
EnableWindow
SendMessageW
PostMessageW
FindWindowW
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetSubMenu
LoadMenuW
GetDesktopWindow
GetWindowLongW
SetActiveWindow
IsWindowEnabled
ReuseDDElParam
RealChildWindowFromPoint
GetMenuItemInfoW
SystemParametersInfoW
CopyImage
GetSysColorBrush
MapDialogRect
TrackMouseEvent
DeleteMenu
UnionRect
GetSystemMenu
SetParent
GetMenuDefaultItem
GetNextDlgGroupItem
SetCapture
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
WindowFromPoint
DrawFocusRect
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetWindowLongW
DrawStateW
SetClassLongW
DrawEdge
DrawFrameControl
IsZoomed
SetCursorPos
CopyIcon
FrameRect
LockWindowUpdate
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetSysColor
InvalidateRect
PostThreadMessageW
GetDC
ReleaseDC
SetCursor
LoadCursorW
IsRectEmpty
GetWindowRect
GetClientRect
ClientToScreen
ScreenToClient
CopyRect
SetRect
SetScrollRange
SetScrollPos
GetParent
GetScrollRange
GetScrollPos
GetClassInfoW
IsDialogMessageW
MessageBoxW
IsWindowVisible
LoadIconW
ModifyMenuW
GetAsyncKeyState
IsIconic
GetSystemMetrics
DrawIcon
SetTimer
KillTimer
FillRect
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
SetWindowRgn
UnregisterClassW
DestroyWindow
WaitMessage
RegisterDeviceNotificationW
UnregisterDeviceNotification
DefWindowProcW
PtInRect
GetKeyboardLayout
DestroyCursor
GetWindowRgn
IsWindow
CreateDialogIndirectParamW
CreateMenu
SetLayeredWindowAttributes
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
GetDoubleClickTime
SetMenuDefaultItem
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
TrackPopupMenu
IsCharLowerW

gdi32

SetDIBColorTable
SetStretchBltMode
DeleteDC
GdiFlush
CreateHalftonePalette
GetDIBColorTable
CreateDCW
CreateCompatibleBitmap
SetPaletteEntries
GetNearestPaletteIndex
DPtoLP
CreateBitmap
SetMapMode
SetBkColor
CreatePen
PatBlt
SetPixel
GetPixel
GetRgnBox
PtInRegion
SetBrushOrgEx
CreateRectRgn
SetTextColor
CopyMetaFileW
CreateHatchBrush
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
CreateDIBSection
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
CombineRgn
SetRectRgn
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesExW
GetBkColor
EnumFontFamiliesW
GetTextCharsetInfo
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
DeleteObject
GetStockObject
CreateDIBitmap
SelectPalette
GetSystemPaletteEntries
SelectObject
CreateFontIndirectW
GetDeviceCaps
Rectangle
GetPaletteEntries
StretchBlt
BitBlt
RealizePalette
CreateCompatibleDC
CreatePalette
GetDIBits
GetObjectW
CreateSolidBrush

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
CommandLineToArgvW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderPathW

comctl32

ImageList_Replace
ImageList_Draw
ImageList_SetImageCount

shlwapi

PathFindExtensionW
PathIsDirectoryW
PathIsUNCW
PathFileExistsW
PathFindFileNameW
StrFormatKBSizeW
PathRemoveFileSpecW
PathStripToRootW

uxtheme

DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
IsAppThemed
GetThemePartSize
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
DrawThemeParentBackground

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromString
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CoUninitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid

oleaut32

VariantCopy
VarBstrFromDate
LoadTypeLi
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SysAllocString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipDrawImageI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipAlloc
GdipFree
GdipCreateBitmapFromFile
GdipCloneImage
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapLockBits

libcurl

curl_slist_append
curl_global_cleanup
curl_easy_cleanup
curl_easy_getinfo
curl_easy_perform
curl_easy_setopt
curl_easy_escape
curl_easy_init
curl_slist_free_all

sensor_io

Sensor_GetThreshold
Sensor_LoadRawImage
Sensor_GetImageSize
Sensor_GetLastError
Sensor_GetXrayState
Sensor_GetLastErrorText
Sensor_CloseDevice
Sensor_GetHdrMode
Sensor_GetImageBits
Sensor_GetHwVersion
Sensor_OpenDevice
Sensor_GetRegionCode
Sensor_GetBinningMode
Sensor_GetDeviceInfo
Sensor_GetRealTimeThreshold

hdrimagecorrect

Sensor_CorrectImage

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Exports

Exports

DS_Entry

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ce00e1827b6137884cb4e504ce9e069

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

libcurl

sensor_io

hdrimagecorrect

oleacc

imm32

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 376KB - Virtual size: 376KB

.data Size: 25KB - Virtual size: 48KB

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 147KB - Virtual size: 146KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 376KB - Virtual size: 376KB

.data
Size: 25KB - Virtual size: 48KB

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 147KB - Virtual size: 146KB