9a55515b82008b19e964368a5319cd2c66ea1a89f4e905802d90f798209028dc

Sharing

Copy URL

Twitter E-mail

General

Target

9a55515b82008b19e964368a5319cd2c66ea1a89f4e905802d90f798209028dc
Size

384KB
MD5

a55ace4dd31bdc34d8db14241e347b62
SHA1

e50e85560d634acfa6fe225b25554385c56db022
SHA256

9a55515b82008b19e964368a5319cd2c66ea1a89f4e905802d90f798209028dc
SHA512

e6803ddd0ded50a59e638abc048a9025ae41f97edcff9dad4dab8b4582e1cd51d7a4e25d875557e944b6e6c792015c68dda14f74f64d3ac6f0934d36cd615cfc
SSDEEP

6144:cSk/RX3/Wm0xatITComRS69TB+FVuvMLz46CJt8t0hJ6/msPZ:dk2xaXs69TKVuv2zpCJumX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a55515b82008b19e964368a5319cd2c66ea1a89f4e905802d90f798209028dc

Files

9a55515b82008b19e964368a5319cd2c66ea1a89f4e905802d90f798209028dc
.exe windows x86

58fb33ff69de2a03ae401caad65a0696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
UpdateWindow
UnregisterClassA
TranslateMessage
TranslateAcceleratorA
TrackPopupMenu
SystemParametersInfoA
ShowWindow
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetScrollInfo
SetMenuItemInfoA
SetForegroundWindow
SetFocus
SetDlgItemTextW
wsprintfW
SetDlgItemInt
SetClipboardData
SendMessageW
SendMessageA
SendDlgItemMessageW
SendDlgItemMessageA
ScrollWindow
ScreenToClient
ReleaseDC
RegisterWindowMessageA
RegisterClassExA
PostQuitMessage
AppendMenuW
CallWindowProcA
CharUpperA
CheckDlgButton
CheckRadioButton
CloseClipboard
SetDlgItemTextA
PostMessageA
OpenClipboard
MoveWindow
MessageBoxW
CreateDialogParamA
CreatePopupMenu
CreateWindowExA
CreateWindowExW
MessageBoxA
MessageBeep
LockWindowUpdate
LoadMenuA
DefWindowProcA
DestroyMenu
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawMenuBar
IsWindowVisible
GetWindowTextLengthA
GetParent
ClientToScreen
GetWindowThreadProcessId
GetForegroundWindow
LoadImageA
LoadIconA
LoadCursorA
LoadAcceleratorsA
KillTimer
IsWindow
IsIconic
IsDlgButtonChecked
IsDialogMessageA
InvalidateRect
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindow
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollInfo
GetMessagePos
GetMessageA
GetMenuItemInfoA
GetMenuCheckMarkDimensions
GetDlgItemTextW
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoExA
FindWindowA
FillRect
EnumChildWindows
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
AttachThreadInput
DrawTextA
DrawTextW
AppendMenuA

kernel32

HeapReAlloc
RtlMoveMemory
GetACP
IsBadReadPtr
IsDBCSLeadByteEx
GetTickCount
GetCurrentThreadId
MulDiv
DeviceIoControl
lstrcpyA
lstrcpyW
lstrcmpW
lstrlenW
lstrlenA
CloseHandle
CompareFileTime
CreateFileA
CreateProcessA
CreateThread
ExitProcess
FindResourceA
GetComputerNameW
GetFileAttributesA
GetFileSize
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemDirectoryA
GetSystemTime
GetTempFileNameA
GetTempPathA
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadFile
RtlZeroMemory
SizeofResource
SystemTimeToFileTime
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcatW
lstrcmpA
lstrcmpiW
lstrcmpiA
lstrcpynA

comctl32

DrawInsert
ImageList_Create
ImageList_AddIcon
ImageList_Destroy
InitCommonControls
LBItemFromPt
MakeDragList

gdi32

DeleteDC
DeleteObject
EndDoc
EndPage
GetDeviceCaps
CreateFontIndirectA
GetStockObject
CreateDIBSection
SelectObject
SetBkColor
SetBkMode
GetTextExtentPoint32A
SetTextColor
StartDocA
StartPage
CreateDCA
CreateCompatibleDC
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateDIBitmap
CreatePatternBrush
GetObjectA
CreateSolidBrush

winspool.drv

OpenPrinterA
EnumPrintersA
GetDefaultPrinterA
GetPrinterA
ClosePrinter

shell32

ShellExecuteA

comdlg32

ChooseFontA
ChooseColorA
GetOpenFileNameA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey

wsock32

inet_ntoa
htons
gethostbyname
WSAStartup
WSACleanup
inet_addr

wininet

HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

json

PbAddJSONItemInteger
PbAddJSONItemString
PbAddJSONMember
PbCatchJSON
PbCreateJSON
PbExportJSON
PbAddJSONElementAutoIndex
PbFreeJSON
PbGetJSONBoolean
PbGetJSONInteger
PbGetJSONMember
PbGetJSONQuadString
PbGetJSONString
PbExportJSONSize
PbJSONArraySize
PbJSONValue
PbSetJSONArray
PbSetJSONInteger
PbSetJSONObject
PbSetJSONString
FA2IntW
PbGetJSONElement

eprinter

Qiao_GetMailNo
YTO_GetMailNo
YTO_Print_EWaybill
structureAddress
ZTO_getMailNo
ZTO_Print_EWaybill
CheckEmptyBag
ChkAddress
BarcodePreview
Print_Data_Init
ZTO_Data_Init
Print_Label_Cmd
SF_Print_EWaybill
RouteQuery
SFOpen_Data_Init
SF_CheckDoCall
SF_CheckOrderType
SF_CheckPayMethod

vtcp

ord3
ord24
ord22
ord19
ord4
ord5
ord17

iphlpapi

GetAdaptersInfo

msvcrt

free
malloc

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58fb33ff69de2a03ae401caad65a0696

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

winspool.drv

shell32

comdlg32

version

advapi32

wsock32

wininet

json

eprinter

vtcp

iphlpapi

msvcrt

Sections

.text Size: 144KB - Virtual size: 142KB

code Size: 4KB - Virtual size: 1KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 15KB

.rsrc Size: 188KB - Virtual size: 187KB

.text
Size: 144KB - Virtual size: 142KB

code
Size: 4KB - Virtual size: 1KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 15KB

.rsrc
Size: 188KB - Virtual size: 187KB