94ac061953faa6d3b7283ef37995f47272b38ee07d3a2e26573ffb64f9c59b95

Sharing

Copy URL Twitter E-mail

General

Target

94ac061953faa6d3b7283ef37995f47272b38ee07d3a2e26573ffb64f9c59b95
Size

13.2MB
MD5

ec484ed370b1fbdbf005f0742b04d866
SHA1

7551f8d099c94d8a0b121a1a14e824924dab6789
SHA256

94ac061953faa6d3b7283ef37995f47272b38ee07d3a2e26573ffb64f9c59b95
SHA512

f87c53ec90a6a082f21eb36876c0e1e4f963cb6945d55a322a2bfdf72a1e5c09d0bfb1985d275d06bc5adc80e0bff1f515927d2b277ca8f609be1a14c3fcde88
SSDEEP

196608:KNrdR4eJs5TOUbM/cBv2Xalncyhz2KQcBui2yIgujuY+anoKNA7Vfh7dZBCbfkjp:KNJ6eM6LwcyCrjuAnoKNAZgbgp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94ac061953faa6d3b7283ef37995f47272b38ee07d3a2e26573ffb64f9c59b95

Files

94ac061953faa6d3b7283ef37995f47272b38ee07d3a2e26573ffb64f9c59b95
.exe windows x86

25daec9fe28f25c8634d480f135abe6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
ExitProcess
GetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
CompareStringW
GetTempFileNameA
Sleep
SearchPathA
GetProfileIntA
LCMapStringW
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetStringTypeW
GetWindowsDirectoryA
FindResourceExW
lstrcpyA
GetTickCount
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
WriteConsoleW
InterlockedExchange
GetEnvironmentVariableA
TerminateThread
VirtualFree
CreateProcessA
GetFileTime
GetFileSizeEx
GetFileInformationByHandle
GetSystemDefaultLangID
GetFullPathNameW
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetUserDefaultLangID
MapViewOfFile
GetACP
CreateFileMappingA
GetCPInfo
GetOEMCP
VirtualProtect
GetThreadLocale
GetVolumeInformationA
lstrcmpiA
LoadLibraryExA
GetCurrentProcess
OpenFileMappingA
UnmapViewOfFile
GetHandleInformation
IsBadReadPtr
GetModuleHandleExA
SetCurrentDirectoryA
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
DeleteFileA
GetUserDefaultUILanguage
lstrlenA
SetCurrentDirectoryW
GetCurrentDirectoryW
GetDriveTypeW
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryA
GlobalFlags
GetFileAttributesExW
MoveFileExW
GetExitCodeProcess
GetSystemDirectoryA
GetLogicalDrives
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
ExpandEnvironmentStringsA
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
CopyFileA
FormatMessageA
LocalFree
GlobalSize
LeaveCriticalSection
EnterCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
MulDiv
GlobalUnlock
FindResourceA
GlobalFree
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryW
FindResourceW
GetLastError
RaiseException
SetStdHandle
DecodePointer
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
CloseHandle
SetEvent
WaitForSingleObject
CreateEventA
GetCurrentThreadId
SetThreadPriority
ResumeThread
OutputDebugStringA
SetLastError
GetCurrentThread
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
Beep

user32

UnregisterClassA
LoadIconW
wsprintfA
IsIconic
DrawIcon
GetSystemMetrics
EnableWindow
ShowCursor
CreateCursor
GetCursor
RegisterClassExA
DialogBoxIndirectParamA
GetClientRect
UnhookWindowsHookEx
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetParent
LoadBitmapW
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
PostMessageA
PostQuitMessage
ShowOwnedPopups
SetCursor
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetWindowThreadProcessId
GetLastActivePopup
SetWindowPos
SetWindowContextHelpId
GetWindow
SendMessageA
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
FillRect
RegisterWindowMessageA
GetMessagePos
GetMessageTime
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsWindow
IsMenu
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
SetFocus
GetCapture
GetMenu
SetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
TrackPopupMenu
TrackPopupMenuEx
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetWindowTextLengthA
GetWindowRect
AdjustWindowRectEx
MapWindowPoints
CopyRect
EqualRect
PtInRect
SetWindowLongA
GetClassLongA
GetClassNameA
GetTopWindow
LoadIconA
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
ShowWindow
MoveWindow
CheckDlgButton
SendDlgItemMessageA
SetWindowTextA
IsDialogMessageA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetDesktopWindow
GetMenuStringA
GetMenuState
InsertMenuA
AppendMenuA
RemoveMenu
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorA
CopyImage
SystemParametersInfoA
DeleteMenu
SetTimer
KillTimer
InvalidateRect
DestroyIcon
CharUpperA
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
LoadCursorW
CharNextA
OffsetRect
CopyAcceleratorTableA
InvalidateRgn
SetRect
IntersectRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
InflateRect
DestroyMenu
GetMenuItemInfoA
SetRectEmpty
GetAsyncKeyState
GetDialogBaseUnits
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
InsertMenuItemA
LoadImageA
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
TrackMouseEvent
LoadImageW
GetMenuDefaultItem
GetKeyNameTextA
MapVirtualKeyA
UnionRect
GetSystemMenu
SetParent
PostThreadMessageA
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
SetWindowRgn
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
SetCursorPos
CopyIcon
FrameRect
LockWindowUpdate
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
WindowFromDC
GetWindowRgn
DestroyCursor
LoadBitmapA
wvsprintfA
MapDialogRect

msimg32

GradientFill
TransparentBlt
AlphaBlend

shlwapi

PathFindFileNameA
PathIsUNCA
PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

DrawThemeBackground
DrawThemeText
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
GetThemeSysColor
OpenThemeData
GetWindowTheme
CloseThemeData
GetThemeColor
GetCurrentThemeName
GetThemePartSize
IsAppThemed

oledlg

ord8

gdi32

CombineRgn
GetWindowOrgEx
GetViewportOrgEx
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
SwapBuffers
SetPixelFormat
ChoosePixelFormat
SetAbortProc
SetDIBits
GetCharABCWidthsFloatA
EndDoc
StartPage
Arc
CreateBitmap
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
GetTextFaceA
CreateFontIndirectA
EndPage
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetMapMode
GetDeviceCaps
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
SetRectRgn
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetTextAlign
StartDocA
GetObjectA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
OffsetRgn
Rectangle
LPtoDP
CopyMetaFileA
CreateDCA
PatBlt
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetDIBits
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
PtVisible
CreatePalette
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CreateFontA
EnumFontFamiliesExA
CreateCompatibleBitmap

advapi32

RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyExA

ole32

DoDragDrop
CreateStreamOnHGlobal
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoUninitialize
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitializeEx
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
OleGetClipboard

oleaut32

SysAllocStringLen
SysFreeString
VariantInit
VariantClear
VariantChangeType
VariantCopy
VarBstrFromDate
SysAllocStringByteLen
OleCreateFontIndirect
LoadTypeLi
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

shell32

SHGetMalloc
SHGetDesktopFolder
DragFinish
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
ShellExecuteA
DragQueryFileA
SHGetFileInfoA
SHAppBarMessage

gdiplus

GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundA

imagehlp

SymInitialize
SymCleanup
StackWalk64

wxl_dll

textopen
lineopen
C_GET_MTEXT
deal_pkpm_layer
deal_pkpm_layer3d
deal_pkpm_ltype
getSpecialChar
_SETLAYERDIMPARA2@4
deal_pkpm_style
_CTBAR@20
INSERT_BLK
DEFINE_BLOCK
WRITE_EMF_FILE
WRITE_WMF_FILE
deal_pkpm_color

winauthorize32

_SET_CFG_PATH@8
_TESTDG3@0
_TESTDG6@0
_SET_IF_SET_CFG@4
_GET_REG_DATA@16
_TESTDG8@16
_TESTDG5@0
_TESTDG9@0
_TESTDG2@0
_SETPKPM_REGISTRYPATH@12

comctl32

ord5
InitCommonControlsEx
PropertySheetA
CreateToolbarEx

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
PrintDlgA
ChooseFontA

opengl32

glTexCoord2f
glStencilOp
glStencilFunc
glShadeModel
glSelectBuffer
glScalef
glRenderMode
glReadPixels
glReadBuffer
glRasterPos3f
glPushName
glPushMatrix
glPopName
glTexEnvf
glPolygonOffset
glPolygonMode
glPointSize
glPixelStorei
glOrtho
glNormalPointer
glNormal3d
glNewList
glMatrixMode
glMaterialfv
glLoadName
glLoadIdentity
glLineWidth
glLightfv
glLightf
glTexParameterf
glTranslatef
glVertex3f
glLightModeli
glVertexPointer
glLightModelfv
glInitNames
glIndexPointer
glHint
glGetIntegerv
glGetError
glViewport
glEnable
glEdgeFlagPointer
glGenTextures
glFlush
glEndList
glEnd
glDrawPixels
glDrawElements
glEnableClientState
glDrawBuffer
glDrawArrays
glTexCoordPointer
glDisableClientState
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glDeleteLists
glCullFace
glColorPointer
glColorMaterial
glColorMask
glColor4f
glClearStencil
glClearDepth
glClearColor
glClear
glCallList
glBlendFunc
glBindTexture
glBegin
glAlphaFunc
wglMakeCurrent
glPopMatrix
wglCreateContext
wglDeleteContext

glu32

gluPickMatrix
gluLookAt
gluBuild2DMipmaps
gluPerspective

sts_sect

m_pCfgBas
_GET_FOR_STEEL_LIB_EX4@140
_GET_STS_VER_CHAR@12
pSTS_SteelC
_READ_USER_STEEL_LIB_DLL@0
SetCfgBasPtr

portal

_REDRW_PORTAL@0
_PORTAL_DLL@4

Sections

.text
Size: 10.1MB - Virtual size: 10.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 51.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trace
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1002KB - Virtual size: 1001KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25daec9fe28f25c8634d480f135abe6e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msimg32

shlwapi

uxtheme

oledlg

gdi32

advapi32

ole32

oleaut32

winspool.drv

shell32

gdiplus

oleacc

imm32

winmm

imagehlp

wxl_dll

winauthorize32

comctl32

comdlg32

opengl32

glu32

sts_sect

portal

Sections

.text Size: 10.1MB - Virtual size: 10.1MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 1.0MB - Virtual size: 51.1MB

_RDATA Size: 79KB - Virtual size: 79KB

.trace Size: 8KB - Virtual size: 7KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 1002KB - Virtual size: 1001KB

.text
Size: 10.1MB - Virtual size: 10.1MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 1.0MB - Virtual size: 51.1MB

_RDATA
Size: 79KB - Virtual size: 79KB

.trace
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 1002KB - Virtual size: 1001KB