d5652fc17dfec3d4483c8a0b5b1b6a5d2745f8183a972ec88eacddc08ea2d0bb

Sharing

Copy URL

Twitter E-mail

General

Target

d5652fc17dfec3d4483c8a0b5b1b6a5d2745f8183a972ec88eacddc08ea2d0bb
Size

1.5MB
MD5

18ef7551901d591673c1cf1d5d2a47be
SHA1

9635782ab7b78e38e29d1be4d08e9dcec17d180a
SHA256

d5652fc17dfec3d4483c8a0b5b1b6a5d2745f8183a972ec88eacddc08ea2d0bb
SHA512

b4517d0b663a906147628a26de5d276c6a98d7b1bc6c9f40f67557951a51d9849f2d3be3fa1aff310fff67bd881b59f0abfc93eabc00fb52bd73b41b660dad78
SSDEEP

49152:Nc8uxZKQVcuacIR3CWbmwTF+evDaUZHZ6p88yarIM:DuL17FI5CCmwTIGaeH888yaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Win32/CascView.exe
unpack001/x64/CascView.exe

Files

d5652fc17dfec3d4483c8a0b5b1b6a5d2745f8183a972ec88eacddc08ea2d0bb
.zip
History.txt
Win32/CascView.exe
.exe windows x86

b243577f610d67408c5b0434a2ed9f9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SetFilePointer
FreeResource
IsBadReadPtr
DeleteFileW
WriteFile
WriteConsoleW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetCurrentThreadId
LCMapStringW
DecodePointer
GetFileType
GetStdHandle
GetModuleHandleExW
GetFileAttributesExW
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlUnwind
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FileTimeToSystemTime
EnumResourceNamesW
LoadLibraryExW
GetVersionExW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentProcess
GetTempPathW
FileTimeToLocalFileTime
FreeLibrary
IsDebuggerPresent
GetEnvironmentVariableW
CreateDirectoryW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetEndOfFile
GetFileTime
ReleaseMutex
WaitForSingleObject
CreateMutexW
HeapSize
HeapDestroy
GetProcessHeap
CompareStringW
SetLastError
HeapReAlloc
GetTickCount
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
FormatMessageW
MulDiv
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
SetThreadPriority
WideCharToMultiByte
GlobalFree
ReadFile
HeapAlloc
GetFileSize
CreateFileW
LeaveCriticalSection
EnterCriticalSection
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
LockResource
LoadResource
SizeofResource
FindResourceW
HeapFree
CloseHandle
GetFullPathNameW
CreateThread
MultiByteToWideChar
GetFileAttributesW
GetLocaleInfoW
SetEnvironmentVariableW
GetModuleFileNameW

user32

SetMenu
GetDlgItemTextW
LoadStringW
SetDlgItemTextW
SendMessageW
GetFocus
GetParent
GetComboBoxInfo
PostQuitMessage
GetWindowPlacement
EnableMenuItem
SetScrollPos
CallWindowProcW
SetWindowLongW
GetDlgItem
IsChild
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
PtInRect
AdjustWindowRectEx
CharUpperA
CharLowerA
DestroyIcon
DrawIconEx
SetRect
GetIconInfo
DrawFrameControl
GetWindowTextW
MessageBeep
EndDialog
CheckDlgButton
IsDlgButtonChecked
SetWindowTextW
GetAsyncKeyState
ShowWindow
SetTimer
GetWindowLongW
PostMessageW
GetClientRect
GetSystemMetrics
LoadImageW
GetWindowRect
SetWindowPos
IsWindowVisible
CreateCursor
MessageBoxW
FillRect
DrawTextExW
GetSystemMenu
DialogBoxIndirectParamW
SetFocus
InvalidateRect
KillTimer
GetClassNameW
SetWindowTextA
EnableWindow
GetWindowTextA
GetWindowTextLengthW
CharUpperBuffA
IsWindow
GetMessageW
TranslateMessage
AppendMenuW
DeleteMenu
SetMenuItemInfoW
GetMenuItemInfoW
WindowFromPoint
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetSysColor
CreateWindowExW
CreateDialogParamW
DialogBoxParamW
IsDialogMessageW
TranslateAcceleratorW
LoadAcceleratorsW
LoadIconW
RegisterClassExW
LoadCursorW
GetClassInfoExW
DefWindowProcW
IntersectRect
EndPaint
BeginPaint
SetCursor
ScreenToClient
GetCursorPos
SetCapture
ReleaseCapture
SystemParametersInfoW
UpdateWindow
GetScrollInfo
TabbedTextOutW
ShowCaret
SetCaretPos
GetTabbedTextExtentW
CreateCaret
SetScrollInfo
DestroyCaret
HideCaret
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetSubMenu
GetMenuStringW
GetMenuItemCount
LoadMenuW
ClientToScreen
IsWindowEnabled
ReleaseDC
GetDC
DestroyWindow
GetWindow
GetTopWindow
LoadStringA
IsCharLowerW
IsCharUpperW
DispatchMessageW

gdi32

SelectObject
GetTextMetricsW
GetFontLanguageInfo
DeleteObject
DeleteDC
CreateCompatibleDC
CreateFontIndirectW
StretchBlt
GetTextExtentPoint32W
TextOutW
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
SetTextColor
ExtTextOutW
SetBkColor
GetStockObject
SetBkMode
SetTextAlign
BitBlt
SetDIBits
GetDIBits
CreateDIBSection
GetDIBColorTable
CreateBitmapIndirect
SetDIBitsToDevice
CreateDIBPatternBrushPt
Rectangle
StretchDIBits

comdlg32

GetOpenFileNameW
ChooseFontW
GetSaveFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListW
DragQueryFileW
SHGetFileInfoW
ShellExecuteExW
ShellExecuteW

ole32

RevokeDragDrop
CoCreateInstance
OleInitialize
PropVariantClear
CoTaskMemAlloc
ReleaseStgMedium
CreateStreamOnHGlobal
RegisterDragDrop
DoDragDrop

oleaut32

SafeArrayDestroy
SafeArrayRedim
SafeArrayPutElement
SafeArrayCreateVector
SafeArrayCopy

urlmon

URLDownloadToFileW

comctl32

ImageList_Add
ImageList_DrawIndirect
ImageList_Destroy
ImageList_SetBkColor
ImageList_Create
PropertySheetW
ImageList_AddMasked
ImageList_GetIcon
ImageList_ReplaceIcon
InitCommonControlsEx
ord8
CreatePropertySheetPageW

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetCheckConnectionW
InternetReadFile

gdiplus

GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipGetDpiX
GdipGetDpiY
GdipCreateBitmapFromStream
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
GdipDrawImageI
GdipDeleteGraphics
GdiplusStartup
GdiplusShutdown
GdipBitmapSetResolution

ws2_32

WSAStartup
recv
send
socket
WSAGetLastError
closesocket
connect
getaddrinfo

Sections

.text
Size: 546KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 505KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64/CascView.exe
.exe windows x64

469fce02e0d98b43cad23a599c59a31e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FindClose
FindNextFileW
FindFirstFileW
SetFilePointer
FreeResource
IsBadReadPtr
DeleteFileW
WriteFile
GetCurrentThreadId
WriteConsoleW
SetFilePointerEx
GetStringTypeW
SetStdHandle
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
ReleaseMutex
GetDateFormatW
SetConsoleCtrlHandler
GetFileType
GetStdHandle
GetModuleHandleExW
GetFileAttributesExW
GetCommandLineW
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FileTimeToSystemTime
EnumResourceNamesW
LoadLibraryExW
GetVersionExW
GetLocalTime
GetSystemTimeAsFileTime
OpenProcess
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetTempPathW
FileTimeToLocalFileTime
FreeLibrary
IsDebuggerPresent
SearchPathW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
CreateDirectoryW
GetFileTime
MapViewOfFile
CreateFileMappingW
MoveFileExW
UnmapViewOfFile
SetEndOfFile
WaitForSingleObject
CreateMutexW
HeapSize
HeapDestroy
GetProcessHeap
CompareStringW
SetLastError
HeapReAlloc
GetTickCount
GlobalReAlloc
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
FormatMessageW
MulDiv
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
SetThreadPriority
WideCharToMultiByte
GlobalFree
ReadFile
HeapAlloc
GetFileSize
CreateFileW
LeaveCriticalSection
EnterCriticalSection
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
LockResource
LoadResource
SizeofResource
FindResourceW
HeapFree
CloseHandle
GetFullPathNameW
CreateThread
MultiByteToWideChar
GetFileAttributesW
GetLocaleInfoW
SetEnvironmentVariableW
GetModuleFileNameW
RemoveDirectoryW
GetTimeFormatW

user32

GetDlgItemTextW
LoadStringW
SetDlgItemTextW
SendMessageW
CallWindowProcW
SetMenu
GetComboBoxInfo
PostQuitMessage
GetWindowPlacement
EnableMenuItem
SetScrollPos
GetParent
SetWindowLongPtrW
GetDlgItem
GetFocus
IsChild
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
PtInRect
AdjustWindowRectEx
CharUpperA
CharLowerA
DestroyIcon
DrawIconEx
SetRect
GetIconInfo
GetWindowTextW
MessageBeep
EndDialog
CheckDlgButton
IsDlgButtonChecked
SetWindowTextW
GetAsyncKeyState
ShowWindow
SetTimer
GetWindowLongPtrW
PostMessageW
GetClientRect
GetSystemMetrics
LoadImageW
GetWindowLongW
GetWindowRect
SetWindowLongW
CreateCursor
MessageBoxW
SendDlgItemMessageA
FillRect
DrawTextExW
GetSystemMenu
DialogBoxIndirectParamW
SetWindowPos
IsWindowVisible
SetFocus
InvalidateRect
KillTimer
GetClassNameW
SetWindowTextA
EnableWindow
GetWindowTextA
GetWindowTextLengthW
CharUpperBuffA
IsWindow
DrawFrameControl
AppendMenuW
DeleteMenu
SetMenuItemInfoW
GetMenuItemInfoW
WindowFromPoint
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetSysColor
CreateWindowExW
CreateDialogParamW
DialogBoxParamW
IsDialogMessageW
TranslateAcceleratorW
LoadAcceleratorsW
LoadIconW
RegisterClassExW
LoadCursorW
GetClassInfoExW
DefWindowProcW
IntersectRect
EndPaint
BeginPaint
SetCursor
ScreenToClient
GetCursorPos
SetCapture
ReleaseCapture
SystemParametersInfoW
UpdateWindow
GetScrollInfo
TabbedTextOutW
ShowCaret
SetCaretPos
GetTabbedTextExtentW
CreateCaret
SetScrollInfo
DestroyCaret
HideCaret
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetSubMenu
GetMenuStringW
GetMenuItemCount
LoadMenuW
ClientToScreen
IsWindowEnabled
ReleaseDC
GetDC
DestroyWindow
GetWindow
GetTopWindow
LoadStringA
IsCharLowerW
IsCharUpperW
DispatchMessageW
TranslateMessage
GetMessageW

gdi32

GetTextMetricsW
GetFontLanguageInfo
DeleteObject
DeleteDC
CreateCompatibleDC
SelectObject
StretchDIBits
GetTextExtentPoint32W
GetWindowOrgEx
RestoreDC
SaveDC
SetWindowOrgEx
TextOutW
CreateFontIndirectW
GetDeviceCaps
GetObjectW
SetTextColor
ExtTextOutW
SetBkColor
GetStockObject
SetBkMode
SetTextAlign
BitBlt
SetDIBits
GetDIBits
CreateDIBSection
GetDIBColorTable
CreateBitmapIndirect
SetDIBitsToDevice
CreateDIBPatternBrushPt
Rectangle
StretchBlt
CreateCompatibleBitmap

comdlg32

ChooseFontW
GetSaveFileNameW
GetOpenFileNameW

advapi32

OpenThreadToken
AccessCheck
AddAccessAllowedAce
AdjustTokenPrivileges
AllocateAndInitializeSid
DuplicateToken
FreeSid
GetLengthSid
GetTokenInformation
InitializeAcl
IsValidSecurityDescriptor
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
LookupAccountSidW
LookupPrivilegeValueW
LogonUserW
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExA

shell32

SHGetPathFromIDListW
DragQueryFileW
SHGetFileInfoW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetMalloc
ShellExecuteW
SHBrowseForFolderW

ole32

RevokeDragDrop
CoCreateInstance
OleInitialize
PropVariantClear
CoTaskMemAlloc
ReleaseStgMedium
CreateStreamOnHGlobal
RegisterDragDrop
DoDragDrop

oleaut32

SafeArrayDestroy
SafeArrayRedim
SafeArrayPutElement
SafeArrayCreateVector
SafeArrayCopy

urlmon

URLDownloadToFileW

comctl32

ImageList_Add
ImageList_DrawIndirect
ImageList_Destroy
ImageList_SetBkColor
ImageList_Create
ImageList_AddMasked
ImageList_GetIcon
ImageList_ReplaceIcon
InitCommonControlsEx
ord8
CreatePropertySheetPageW
PropertySheetW

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetCheckConnectionW
InternetReadFile

gdiplus

GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipGetDpiX
GdipGetDpiY
GdipCreateBitmapFromStream
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
GdipDrawImageI
GdipDeleteGraphics
GdiplusStartup
GdiplusShutdown
GdipBitmapSetResolution
GdipCreateBitmapFromStreamICM

ws2_32

WSAStartup
connect
socket
send
getaddrinfo
WSAGetLastError
recv
closesocket

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 505KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b243577f610d67408c5b0434a2ed9f9d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

urlmon

comctl32

wininet

gdiplus

ws2_32

Sections

.text Size: 546KB - Virtual size: 545KB

.rdata Size: 202KB - Virtual size: 201KB

.data Size: 21KB - Virtual size: 28KB

.rsrc Size: 505KB - Virtual size: 504KB

.reloc Size: 21KB - Virtual size: 21KB

469fce02e0d98b43cad23a599c59a31e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

urlmon

comctl32

wininet

gdiplus

ws2_32

version

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 250KB - Virtual size: 249KB

.data Size: 34KB - Virtual size: 45KB

.pdata Size: 66KB - Virtual size: 65KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 505KB - Virtual size: 504KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 546KB - Virtual size: 545KB

.rdata
Size: 202KB - Virtual size: 201KB

.data
Size: 21KB - Virtual size: 28KB

.rsrc
Size: 505KB - Virtual size: 504KB

.reloc
Size: 21KB - Virtual size: 21KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 250KB - Virtual size: 249KB

.data
Size: 34KB - Virtual size: 45KB

.pdata
Size: 66KB - Virtual size: 65KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 505KB - Virtual size: 504KB

.reloc
Size: 4KB - Virtual size: 4KB