743690466a8b899e10646c9e66c729500a53996ced9a6fab533cc671aab19f84

Sharing

Copy URL Twitter E-mail

General

Target

743690466a8b899e10646c9e66c729500a53996ced9a6fab533cc671aab19f84
Size

1.6MB
MD5

965751a884cb39605631b9f4371bec8a
SHA1

c5072bb7f294bfe9b6cee3da106a5eac9b76d16d
SHA256

743690466a8b899e10646c9e66c729500a53996ced9a6fab533cc671aab19f84
SHA512

3ed27974be5becd1d380033a47db03daee867650d41d47fdc78d4cd78b2b59477188d382198413951cddef869a2f07d448effe17c2c080ced0618c26f0761f20
SSDEEP

12288:433emtfBDMB+prTbcU/1wXyMwidVmzxC3b5FAA8FRpRbTVhtBQ9nTgUZMSklJcI7:4+m8wbzIGiMIGycUZMSklJcIQHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
743690466a8b899e10646c9e66c729500a53996ced9a6fab533cc671aab19f84

Files

743690466a8b899e10646c9e66c729500a53996ced9a6fab533cc671aab19f84
.dll windows x86

70950d979d28e8967877a4ba74600c29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
ResetEvent
GetExitCodeThread
DecodePointer
WaitForMultipleObjects
CreateEventW
GetDiskFreeSpaceExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetPrivateProfileStringA
LoadLibraryW
GetProcAddress
OpenProcess
MoveFileExW
RemoveDirectoryW
GetDriveTypeW
FindNextFileW
FindFirstFileW
FindClose
VerifyVersionInfoW
lstrcpyW
lstrcpynW
GlobalFree
GlobalAlloc
GetVersionExW
Sleep
OpenEventW
SetEvent
VerSetConditionMask
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
CloseHandle
WriteFile
ReadFile
GetFileSize
DeleteFileW
CreateFileW
CreateDirectoryW
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
FindResourceExW
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
OutputDebugStringA
SetEndOfFile
WriteConsoleW
FlushFileBuffers
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetTimeZoneInformation
SetStdHandle
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetFileType
GetStdHandle
GetACP
GetCurrentThread
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
GetFileAttributesExW
InterlockedFlushSList
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
SetLastError
GetLastError
RaiseException
IsDebuggerPresent
OutputDebugStringW
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
HeapCreate
InitializeCriticalSection
GetModuleHandleW
FreeResource
FreeLibrary
lstrlenW
MulDiv
GetTickCount
GlobalLock
GlobalUnlock
GetModuleHandleA
LoadLibraryA
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
QueryPerformanceCounter

user32

GetWindowRect
FindWindowW
OffsetRect
LoadIconW
EnumChildWindows
FindWindowExW
GetClassNameW
IsIconic
SetWindowTextW
SetForegroundWindow
SetWindowPos
ShowWindow
PostMessageW
DestroyWindow
SendMessageW
IntersectRect
wsprintfW
LoadCursorW
SetWindowLongW
GetWindowLongW
IsWindow
CreateWindowExW
GetDC
ReleaseDC
SetCursor
CopyRect
InflateRect
IsRectEmpty
EqualRect
PtInRect
GetDesktopWindow
ScreenToClient
GetKeyState
GetDlgItem
GetParent
TrackMouseEvent
GetMessageW
TranslateMessage
GetClassInfoExW
PeekMessageW
PostThreadMessageW
AnimateWindow
UpdateLayeredWindow
PrintWindow
SetLayeredWindowAttributes
KillTimer
IsZoomed
SetFocus
GetActiveWindow
GetCapture
SetCapture
ReleaseCapture
EnableWindow
IsWindowEnabled
EndMenu
UpdateWindow
SetActiveWindow
BeginPaint
EndPaint
InvalidateRect
GetClientRect
GetCursorPos
CreateCaret
GetCaretBlinkTime
SetCaretPos
ClientToScreen
MapWindowPoints
GetWindow
MonitorFromWindow
GetMonitorInfoW
LoadBitmapW
LoadImageW
CharNextW
DrawTextW
DestroyIcon
DrawIconEx
EnableMenuItem
GetSysColor
FillRect
SetRect
CharLowerBuffW
MapVirtualKeyA
GetSystemMetrics
UnionRect
SetRectEmpty
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
MessageBeep
IsMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
TrackPopupMenu
GetMenuItemInfoW
MoveWindow
RegisterClassExW
UnregisterClassW
CallWindowProcW
IsWindowVisible
SetTimer
DefWindowProcW
DispatchMessageW

gdi32

GetClipRgn
GetObjectType
GetStockObject
RectInRegion
ExcludeClipRect
RestoreDC
SaveDC
SelectClipRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePen
BitBlt
SetViewportOrgEx
SelectObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
TextOutW
ExtSelectClipRgn
Rectangle
DeleteObject
CreateDIBitmap
SetBkColor
SetBkMode
SetTextColor
ExtTextOutW
OffsetViewportOrgEx
CombineRgn
GetCurrentObject
GetRgnBox
StretchBlt
GetObjectW
CreateFontIndirectW
GetObjectA
GetTextExtentPointW
GetTextExtentPoint32W
GetClipBox
GetDeviceCaps
GetTextColor
GetTextMetricsW
CreateSolidBrush
GetViewportOrgEx
LineTo
RoundRect
CreateDIBSection
ExtCreatePen
MoveToEx

advapi32

RegDeleteKeyW
RegOpenKeyExW
OpenProcessToken
DuplicateTokenEx
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegCreateKeyExW
RegSetValueExW
RegCloseKey

shell32

ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
StringFromCLSID
CoCreateGuid
CoTaskMemFree
CreateBindCtx

oleaut32

SysAllocStringLen
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantInit
VariantClear
SysAllocString
VarBstrCmp
SysFreeString

shlwapi

PathIsDirectoryW
SHDeleteKeyW
StrToIntExA
StrToIntW
PathIsUNCW
PathIsRootW
wvnsprintfW

wininet

InternetOpenA
HttpQueryInfoA
HttpEndRequestA
HttpSendRequestExA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetWriteFile
InternetQueryDataAvailable
InternetSetOptionA

gdiplus

GdipSetCompositingMode
GdipFillRectangleI
GdipDrawImageRectRectI
GdipSetImageAttributesWrapMode
GdipSetImageAttributesColorMatrix
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateTexture2I
GdipLoadImageFromStream
GdipLoadImageFromFile
GdipLoadImageFromStreamICM
GdipLoadImageFromFileICM
GdipCloneImage
GdipDisposeImage
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetImageHeight
GdipGetImageWidth

imm32

ImmReleaseContext
ImmGetContext

msimg32

GradientFill
AlphaBlend

Exports

Exports

CheckDiskFreeSpace
ClearVirtualFolderAndUnpinIcon
CloseTeraBox
CloseUI
CloseUninstallUI
FindMainWindowAndShow
FindUninstallMainWindowAndShow
GetChangedInstallPath
GetTeraBoxVersion
GetUiState
GetUninstallUiState
GetWindowsVersion
InitSkin
InitUninstallSkin
IsInstallChromeExtension
IsInstallOfficeAddin
IsInstallPathChanged
IsTeraBoxRun
IsUiInitializedDone
LaunchAsUser
PromptDegradeTipDlg
PromptMessageBox
SetInstallPackageSize
SetInstallPath
SetIsInstallForAllUser
SetMultiUserDefDir
SetNsisState
SetOverwriteModeFlag
SetProductName
SetProductVersion
SetProgress
SetUninstallNsisState
SetUninstallVersion
ShowUI
ShowUninstallUI
UnInitSkin
UninitUninstallSkin
UninstallPromptMessageBox
UploadInstallLog
UploadUninstallLog
WaitForUserNextInstructionArrival
WaitForUserNextUninstallInstructionArrival
WriteChannel

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 631KB - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70950d979d28e8967877a4ba74600c29

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

wininet

gdiplus

imm32

msimg32

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 194KB - Virtual size: 193KB

.data Size: 24KB - Virtual size: 110KB

.idata Size: 13KB - Virtual size: 12KB

.gfids Size: 1KB - Virtual size: 1KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 631KB - Virtual size: 630KB

.reloc Size: 57KB - Virtual size: 57KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 194KB - Virtual size: 193KB

.data
Size: 24KB - Virtual size: 110KB

.idata
Size: 13KB - Virtual size: 12KB

.gfids
Size: 1KB - Virtual size: 1KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 631KB - Virtual size: 630KB

.reloc
Size: 57KB - Virtual size: 57KB