9b717d407f119b99779556a79e95159107bdb1299f4b15380822a176be0e5110

Sharing

Copy URL Twitter E-mail

General

Target

9b717d407f119b99779556a79e95159107bdb1299f4b15380822a176be0e5110
Size

8.4MB
MD5

86c447aedcd847f1efb94f0e970d13ce
SHA1

c803960f9045f075e2d648ff78ef2fb85fa85716
SHA256

9b717d407f119b99779556a79e95159107bdb1299f4b15380822a176be0e5110
SHA512

7618ed2cfd33fa874dd8049e64b70ad3caeccb71238064ccd1dfcad26563ad3ea0e2c31921c3411f6a27a76f8fbfad5304a14eb6789b34588f891eb1f0dfaaa0
SSDEEP

49152:MBl5zEhPJXNAzG+VojGO7C8sumeHdG2X0IivTkvyZESJ4104y5+n:Md6JXNAnqjGOe8sumew2X0RvTkvQGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b717d407f119b99779556a79e95159107bdb1299f4b15380822a176be0e5110

Files

9b717d407f119b99779556a79e95159107bdb1299f4b15380822a176be0e5110
.exe windows x86

b486fb08638955849306dee93fa3f5ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetFileType
SetStdHandle
SetFilePointerEx
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlUnwind
OutputDebugStringW
ExitProcess
GetACP
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetModuleHandleExW
ReadConsoleW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
lstrcpyW
SetErrorMode
VirtualProtect
GlobalGetAtomNameW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GetCurrentProcessId
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalFree
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetSystemDirectoryW
SetLastError
EncodePointer
OutputDebugStringA
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetProcessHeap
CreateMutexW
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
InterlockedExchange
GetTickCount
ReadFile
CloseHandle
CreateFileW
Sleep
GetCurrentDirectoryW
WinExec
CreateDirectoryW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
FreeLibraryAndExitThread
WriteConsoleW

user32

CharUpperW
GetMenuItemInfoW
DestroyMenu
InflateRect
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
MapDialogRect
SetWindowContextHelpId
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
GetSysColor
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetKeyNameTextW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
SetRectEmpty
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
UnionRect
GetSystemMenu
SetParent
PtInRect
FindWindowW
SendMessageW
GetClassInfoW
LoadIconW
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
RegisterClipboardFormatW
OffsetRect
GetSysColorBrush
GetAsyncKeyState
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyIcon
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
LoadImageW
IsChild
IsMenu
CreateWindowExW
MapVirtualKeyW
LoadMenuW
WaitMessage
WindowFromPoint
CopyImage
DeleteMenu
RealChildWindowFromPoint
GetWindowTextLengthW
SendDlgItemMessageA
GetSystemMetrics
GetDC
GetClientRect
SetTimer
IsIconic
DrawIcon
SetRect
InvalidateRect
KillTimer
GetWindowRect
SetForegroundWindow
PostMessageW
LoadBitmapW
SystemParametersInfoW
RegisterDeviceNotificationW
GetKeyboardLayout
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
SetWindowPos
GetCursorPos
CreatePopupMenu
AppendMenuW
ReleaseDC
EnableWindow
GetParent
UnregisterClassW
FillRect
UpdateWindow
CopyRect
SetWindowRgn
IsRectEmpty
IntersectRect
IsZoomed
ScreenToClient
SetCapture
ReleaseCapture
IsWindow
LoadCursorW
UpdateLayeredWindow
PostQuitMessage
UnhookWindowsHookEx
RegisterWindowMessageW
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
UnpackDDElParam
ReuseDDElParam
TrackMouseEvent
GetMenuDefaultItem
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoExW
HideCaret
InvertRect
NotifyWinEvent
EnumDisplayMonitors
SetClassLongW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
PostThreadMessageW
LockWindowUpdate
MonitorFromPoint
GetComboBoxInfo
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW

gdi32

GetPixel
CreateSolidBrush
SetPixel
GetStockObject
CreateFontIndirectW
CreateRectRgn
CombineRgn
CopyMetaFileW
CreateDCW
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
PtInRegion
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetBkColor
GetTextColor
GetRgnBox
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
CreatePolygonRgn
SetTextColor
SetBkColor
CreateBitmap
GetDIBits
GetObjectW
CreateFontW
BitBlt
SelectObject
DeleteDC
CreateCompatibleBitmap
StretchBlt
CreateCompatibleDC
GetDeviceCaps
SetWindowOrgEx
DeleteObject

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragFinish
DragQueryFileW
SHGetFileInfoW
Shell_NotifyIconW
ShellExecuteW
SHGetFolderPathW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathIsDirectoryW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetThemeSysColor
GetWindowTheme
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
IsAppThemed

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CreateStreamOnHGlobal
CoCreateGuid

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
VariantChangeType
VariantCopy
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipLoadImageFromFileICM
GdipFree
GdipAlloc
GdipCloneImage
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRect
GdipDisposeImage
GdipReleaseDC
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStream
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipDeleteFontFamily
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP

winmm

PlaySoundW
timeKillEvent
timeEndPeriod

keyboardhook

??1CKeyboardHook@@UAE@XZ
?StartHook@CKeyboardHook@@QAEHPAUHWND__@@@Z
?StopHook@CKeyboardHook@@QAEHXZ
??0CKeyboardHook@@QAE@XZ

hid

HidD_GetHidGuid
HidD_GetPreparsedData
HidP_GetCaps
HidD_FreePreparsedData
HidD_SetFeature
HidD_GetFeature
HidD_GetAttributes

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 6.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b486fb08638955849306dee93fa3f5ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

winmm

keyboardhook

hid

setupapi

oleacc

imm32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 400KB - Virtual size: 400KB

.data Size: 25KB - Virtual size: 6.8MB

.gfids Size: 106KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 5.8MB - Virtual size: 5.8MB

.reloc Size: 160KB - Virtual size: 160KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 400KB - Virtual size: 400KB

.data
Size: 25KB - Virtual size: 6.8MB

.gfids
Size: 106KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

.reloc
Size: 160KB - Virtual size: 160KB