01053e870a6c9e29de14d907205d3cca803a2ba29c1ae4557dc8be19315b6374

Sharing

Copy URL

Twitter E-mail

General

Target

01053e870a6c9e29de14d907205d3cca803a2ba29c1ae4557dc8be19315b6374
Size

7.3MB
MD5

81796dd80f4d32c32b58dc03b77f08f2
SHA1

cb950d46cd18f22140ff94581b2679eb2d8c297e
SHA256

01053e870a6c9e29de14d907205d3cca803a2ba29c1ae4557dc8be19315b6374
SHA512

425c5855d0513bca765540dc8d4e2a8d79fb0476b8626bf6ce2d8fa247adf9b82ecf22781a9e0efe1833a78904ebd39a21fd4aa1bdd03cfd56d15e29a5b248e3
SSDEEP

98304:Q1EOw2nfOkwjLaOLGJBFAkzW7SrSySwbKJmdUDFb0nuUtLhW9ofjpu3iyCMfVxaT:sqCKLSdEFboNxfVu3aCVhLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01053e870a6c9e29de14d907205d3cca803a2ba29c1ae4557dc8be19315b6374

Files

01053e870a6c9e29de14d907205d3cca803a2ba29c1ae4557dc8be19315b6374
.exe windows x86

818cb769147fe2442d44b1869308816a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dsound

ord1
ord3

kernel32

LCMapStringA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
GetConsoleMode
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
GetConsoleCP
InitializeCriticalSectionAndSpinCount
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
WriteConsoleA
IsValidCodePage
SizeofResource
LockResource
LoadResource
FindResourceW
DeleteFileW
InterlockedExchange
GetSystemTime
Sleep
CreateThread
lstrcmpiW
CreateDirectoryW
CreateFileW
GetFileSize
ReadFile
CloseHandle
WriteFile
MulDiv
GetTickCount
SetCurrentDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
SetEndOfFile
GetFileSizeEx
CopyFileW
WaitForSingleObject
WideCharToMultiByte
lstrlenW
GetVersionExW
MoveFileExW
SetFilePointer
CreateProcessW
CreateMutexW
GetLastError
GetCommandLineW
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
FindFirstFileW
FindNextFileW
FindClose
SetThreadPriority
GetFileTime
FileTimeToSystemTime
GetPrivateProfileStringW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
CreateEventW
SetEvent
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
WritePrivateProfileStringW
GetPrivateProfileIntW
GetSystemDefaultLangID
GetLocaleInfoW
lstrlenA
GetSystemInfo
GetCurrentProcess
OpenProcess
TerminateProcess
IsBadCodePtr
lstrcpyW
GetCurrentProcessId
DuplicateHandle
GetFileType
SystemTimeToFileTime
GetCurrentDirectoryW
DosDateTimeToFileTime
SetFileTime
GetSystemDirectoryW
LocalFree
FormatMessageW
GlobalSize
SetLastError
GetModuleHandleA
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
InterlockedDecrement
FileTimeToLocalFileTime
LocalAlloc
MoveFileW
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
GetVolumeInformationW
GetFullPathNameW
ResumeThread
SuspendThread
lstrcmpA
CompareStringA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GlobalGetAtomNameW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetFileAttributesW
SetErrorMode
GetTempFileNameW
GetTempPathW
SearchPathW
GetProfileIntW
VirtualProtect
FindResourceExW
GetStartupInfoW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
VirtualQuery
ExitProcess
HeapReAlloc
HeapSize
RtlUnwind
RaiseException
ExitThread
SetStdHandle
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP

user32

CharUpperW
DestroyMenu
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetLastActivePopup
EndPaint
BeginPaint
GetMenuState
GetMenuStringW
InsertMenuW
RemoveMenu
EnumChildWindows
LoadImageW
LoadMenuW
LoadBitmapW
UpdateWindow
GetWindowDC
GetWindowThreadProcessId
SetWindowRgn
GetSubMenu
DrawIconEx
DrawEdge
IsCharLowerW
GetKeyboardLayout
MapVirtualKeyExW
GetKeyNameTextW
MapVirtualKeyW
CharLowerBuffW
AdjustWindowRect
SetWindowLongA
GetActiveWindow
UnhookWindowsHookEx
SetWindowsHookExW
keybd_event
GetKeyState
CallNextHookEx
GetWindowRgn
MoveWindow
DestroyWindow
SetWindowPos
ShowWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
GetFocus
MessageBoxW
PeekMessageW
GrayStringW
DrawTextExW
TabbedTextOutW
DrawStateW
GetIconInfo
IsWindow
DrawFrameControl
InflateRect
OffsetRect
DrawTextW
ChildWindowFromPointEx
IsWindowEnabled
WindowFromPoint
GetCursorPos
GetSysColor
ReleaseCapture
SetCapture
ReleaseDC
IsWindowVisible
GetDC
ValidateRect
TranslateMessage
GetMessageW
ClientToScreen
GetCapture
DestroyIcon
SetRect
EnableWindow
InvalidateRect
GetWindowRect
ScreenToClient
PostMessageW
GetParent
SetCursor
PostQuitMessage
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
LoadCursorW
CopyRect
GetWindowInfo
AppendMenuW
CreatePopupMenu
FindWindowW
GetForegroundWindow
SetForegroundWindow
IsZoomed
RedrawWindow
MessageBeep
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
GetSysColorBrush
GetAsyncKeyState
SwapMouseButton
DrawIcon
GetSystemMetrics
IsIconic
SetWindowLongW
GetWindowLongW
LoadIconW
SystemParametersInfoW
KillTimer
SendMessageW
GetClientRect
DestroyCursor
CreateMenu
GetDoubleClickTime
SubtractRect
CopyIcon
CharUpperBuffW
GetUpdateRect
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
PtInRect
FillRect
SetTimer
SetRectEmpty
WaitMessage
DeleteMenu
PostThreadMessageW
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableW
NotifyWinEvent
SetParent
SetClassLongW
GetSystemMenu
IsMenu
IsRectEmpty
BringWindowToTop
LockWindowUpdate
RegisterClipboardFormatW
OpenClipboard
CopyImage
SetClipboardData
UnregisterClassW
CloseClipboard
EmptyClipboard
CharNextW
InvalidateRgn
GetNextDlgGroupItem
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
DrawFocusRect
SetCursorPos
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
IsClipboardFormatAvailable
DefFrameProcW

gdi32

SetPixelV
GetTextFaceW
EnumFontFamiliesExW
GetSystemPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
ExtFloodFill
LPtoDP
GetViewportOrgEx
GetBoundsRect
FrameRgn
FillRgn
GetWindowOrgEx
GetPaletteEntries
CreatePalette
RoundRect
Polygon
Ellipse
CreatePolygonRgn
CreateEllipticRgn
GetBkColor
RealizePalette
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
GetRgnBox
OffsetRgn
DPtoLP
GetMapMode
SetRectRgn
CreateRectRgnIndirect
GetDCOrgEx
CreateHatchBrush
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CopyMetaFileW
CreateDCW
CombineRgn
SetTextColor
SetBkColor
CreateDIBitmap
PatBlt
GetTextColor
Rectangle
PtInRegion
CreateRectRgn
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
Polyline
GetTextMetricsW
GetPixel
CreateFontW
GetTextExtentPoint32W
StretchDIBits
GetDIBits
CreateBitmap
SetDIBColorTable
SetPixel
GetDeviceCaps
AddFontMemResourceEx
CreatePen
GetStockObject
CreateDIBSection
GetDIBColorTable
StretchBlt
DeleteDC
CreateFontIndirectW
GetObjectW
CreateSolidBrush
DeleteObject
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegOpenKeyW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegEnumKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueW
RegEnumKeyExW
RegDeleteKeyW

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAppBarMessage

comctl32

InitCommonControlsEx
ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathFileExistsW
PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
PathIsFileSpecW
StrToIntW
UrlUnescapeW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
PropVariantClear
CLSIDFromString
CreateStreamOnHGlobal
CoCreateGuid
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoInitializeEx
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleGetClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator

oleaut32

SafeArrayDestroy
VariantCopy
VariantInit
SysAllocString
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantChangeType

gdiplus

GdipMeasureString
GdipSetStringFormatLineAlign
GdiplusShutdown
GdipFree
GdipDeletePrivateFontCollection
GdipAlloc
GdipNewPrivateFontCollection
GdipPrivateAddMemoryFont
GdipGetFontCollectionFamilyCount
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipSetStringFormatAlign
GdiplusStartup
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipCreateBitmapFromStream
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreateBitmapFromFile

winmm

midiOutClose
midiOutOpen
midiOutGetDevCapsW
midiInGetNumDevs
midiOutGetNumDevs
midiInGetDevCapsW
midiInOpen
PlaySoundW
mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
mixerGetLineInfoW
mixerClose
mixerOpen
timeEndPeriod
timeBeginPeriod
timeGetTime
midiOutShortMsg
midiInClose
midiInStart

d3d9

Direct3DCreate9

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetGetConnectedState
InternetQueryOptionW
InternetCrackUrlW
InternetReadFile
InternetOpenUrlW
InternetCanonicalizeUrlW
InternetCloseHandle
InternetOpenW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Exports

Exports

createOveStreamLoader

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 520KB - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 337KB - Virtual size: 80.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

818cb769147fe2442d44b1869308816a

Headers

DLL Characteristics

File Characteristics

Imports

dsound

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

winmm

d3d9

version

wininet

imm32

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 520KB - Virtual size: 520KB

.data Size: 337KB - Virtual size: 80.5MB

.rsrc Size: 3.7MB - Virtual size: 3.7MB

.reloc Size: 441KB - Virtual size: 441KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 520KB - Virtual size: 520KB

.data
Size: 337KB - Virtual size: 80.5MB

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

.reloc
Size: 441KB - Virtual size: 441KB