df8fd58001f9f865387fde17e9a6020ad14db2ec69097338030db8a7ca4753ba

Sharing

Copy URL

Twitter E-mail

General

Target

df8fd58001f9f865387fde17e9a6020ad14db2ec69097338030db8a7ca4753ba
Size

3.3MB
MD5

2fbbdad62e8b4319da5ddb2de2654923
SHA1

ab5d760fc9a2c4f4ddb3a0e1d17ad0707cf130f3
SHA256

df8fd58001f9f865387fde17e9a6020ad14db2ec69097338030db8a7ca4753ba
SHA512

1629d4ecda869b2104057189b21adaecc33bb7fba2de6a99743cd8eaa022635860d8398e030c37b3c2cba6df582c9fbdc55dba51d104f3fa74942693bb6d32e1
SSDEEP

98304:tbdMG66cA1QUM5FtJnRFrvDiDcTYVYPbTU2PNVkCyoj9ghi1RebMIg9Cbk/V8:tbdKjnT5EWjQ2PNVNyojDIg9Cbk/V8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df8fd58001f9f865387fde17e9a6020ad14db2ec69097338030db8a7ca4753ba

Files

df8fd58001f9f865387fde17e9a6020ad14db2ec69097338030db8a7ca4753ba
.exe windows x86

501c8447095eb4b1cfba951129031845

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hid

HidD_GetAttributes
HidD_GetHidGuid

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW

libglog

?FLAGS_max_log_size@fLI@@3HA
?FLAGS_logbufsecs@fLI@@3HA
?SetLogDestination@google@@YAXHPBD@Z
?InitGoogleLogging@google@@YAXPBD@Z
??1LogMessage@google@@QAE@XZ
??0LogMessage@google@@QAE@PBDH@Z
?stream@LogMessage@google@@QAEAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ

kernel32

IsProcessorFeaturePresent
GetCPInfo
GetOEMCP
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetConsoleCP
GetConsoleMode
LCMapStringW
GetTimeZoneInformation
WriteConsoleW
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
ExitThread
HeapReAlloc
RaiseException
RtlUnwind
ExitProcess
HeapAlloc
DecodePointer
EncodePointer
HeapFree
GetStartupInfoW
HeapSetInformation
GetCommandLineW
GetUserDefaultLCID
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
GetNumberFormatW
GetWindowsDirectoryW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
GetFileSize
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
DeleteFileW
GetCurrentDirectoryW
GlobalFlags
IsDebuggerPresent
lstrlenA
GlobalGetAtomNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileW
FindClose
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
WaitForSingleObject
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcpyW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
GetModuleHandleW
FreeLibrary
CompareStringW
ActivateActCtx
DeactivateActCtx
lstrcmpW
FreeResource
GetLastError
SetLastError
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
WinExec
GetProcAddress
LoadLibraryW
CreateThread
GetStdHandle
ReadFile
CreateFileW
CloseHandle
CancelIo
Sleep
WriteFile
GetTickCount
GetOverlappedResult
ResetEvent
WaitForMultipleObjects
CreateEventW
MulDiv
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
QueryPerformanceCounter
GetACP

user32

GetWindowRgn
RealChildWindowFromPoint
LoadCursorW
DestroyMenu
GetMenuItemInfoW
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
ValidateRect
GetSystemMetrics
DrawIconEx
GetSysColorBrush
RedrawWindow
SetWindowRgn
DrawFocusRect
DrawFrameControl
DrawEdge
OffsetRect
InflateRect
IsRectEmpty
DrawStateW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
LoadMenuW
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
RegisterDeviceNotificationW
CreatePopupMenu
IsWindowVisible
AppendMenuW
GetSystemMenu
LoadIconW
EqualRect
ClipCursor
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
GetWindowRect
GetWindowLongW
DrawIcon
DestroyCursor
CreateMenu
HideCaret
GetFocus
GetParent
TrackMouseEvent
CopyRect
GetComboBoxInfo
GetDC
KillTimer
GetClientRect
SetTimer
EnableWindow
PostMessageW
SendMessageW
SystemParametersInfoW
ScreenToClient
GetCursorPos
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
SubtractRect
CharUpperBuffW
FrameRect
InvalidateRect
PtInRect
InvertRect
UnregisterClassW
GetUpdateRect
GetDoubleClickTime
DestroyAcceleratorTable
SetClassLongW
CopyIcon
EnableScrollBar
RegisterClipboardFormatW
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
UnpackDDElParam
GetMonitorInfoW
ReuseDDElParam
GetIconInfo
SetCursorPos
GetMenuDefaultItem
SetMenuDefaultItem
DestroyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
UnionRect
IsMenu
MonitorFromPoint
SetParent
LockWindowUpdate
BringWindowToTop
CharUpperW
IsIconic
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
CharNextW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
GetTopWindow
IntersectRect
UpdateLayeredWindow

gdi32

SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
CreateRectRgnIndirect
CreatePen
CreateBitmap
CreateHatchBrush
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
GetBkColor
GetTextColor
Polyline
Ellipse
Polygon
GetTextExtentPoint32W
GetTextMetricsW
SetRectRgn
GetMapMode
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
OffsetRgn
CreateRoundRectRgn
CreateDIBSection
Rectangle
SetPixel
SetDIBColorTable
RealizePalette
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetWindowOrgEx
SetPixelV
GetTextFaceW
CreateSolidBrush
PatBlt
GetObjectW
SetBkColor
SetTextColor
CreateDCW
CopyMetaFileW
CreateRectRgn
DeleteObject
GetStockObject
BitBlt
CreateFontIndirectW
GetDeviceCaps
StretchBlt
CreateCompatibleDC
GetObjectType
CreateCompatibleBitmap

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegDeleteKeyW
RegEnumKeyW

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
ShellExecuteW
SHGetFileInfoW
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

ole32

CoTaskMemFree
OleLockRunning
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitializeEx
CoInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleGetClipboard

oleaut32

VariantCopy
SysAllocString
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipFree
GdipAlloc
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipMeasureString
GdipResetClip
GdipDrawCurve
GdipSetClipHrgn
GdipDrawLineI
GdiplusStartup
GdipReleaseDC
GdipDrawImageRectI
GdipDrawRectangleI
GdipSetPenColor
GdipFillRectangle
GdipSetSolidFillColor
GdipCreateBitmapFromFile
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreatePen1
GdipFillRectangleI
GdipFillPath
GdipDeletePath
GdipCreatePath
GdipDeletePen
GdipAddPathArcI
GdipAddPathLineI
GdipDrawString
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFont
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawImageRect
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromFile

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

501c8447095eb4b1cfba951129031845

Headers

DLL Characteristics

File Characteristics

Imports

hid

setupapi

libglog

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 348KB - Virtual size: 348KB

.data Size: 27KB - Virtual size: 57KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 189KB - Virtual size: 189KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 348KB - Virtual size: 348KB

.data
Size: 27KB - Virtual size: 57KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 189KB - Virtual size: 189KB