430b7f774c69d79b4b2d3a196ed6097b1010cb66fc0fd5a9cd6835b9861d52d1

Sharing

Copy URL Twitter E-mail

General

Target

430b7f774c69d79b4b2d3a196ed6097b1010cb66fc0fd5a9cd6835b9861d52d1
Size

936KB
MD5

a3640ff9c05d1638b54a1f16da340103
SHA1

34413be2b8fdfdd65b7bd8788813e6311136b71d
SHA256

430b7f774c69d79b4b2d3a196ed6097b1010cb66fc0fd5a9cd6835b9861d52d1
SHA512

3e9386caf45294e97372ff7f9c111515cade6cb917e26c10ee31322d105a3ad30f556ec76f9c4cab3ab188f3f7108ae3b94e95f840071f39673d048f1d24d318
SSDEEP

12288:rCfiVqdBTx7/u+eyphkC6XyECcuo2YwD5s2S83h+zaegl/06/OM:rVazruDyp1OyECcwt5sA3TBb/OM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
430b7f774c69d79b4b2d3a196ed6097b1010cb66fc0fd5a9cd6835b9861d52d1

Files

430b7f774c69d79b4b2d3a196ed6097b1010cb66fc0fd5a9cd6835b9861d52d1
.exe windows x86

592d5a168a1e0832dc79cce11832b55d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

netsdk

Net_AddCamera
Net_QueryTimeSetup
Net_TimeSetup
Net_FileUpdate
Net_DisConnCamera
Net_DelCamera
Net_BlackWhiteListSend
Net_Log
Net_ConnCamera

kernel32

GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
GetTickCount
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetDriveTypeA
FindFirstFileA
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
GetStdHandle
DuplicateHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEnvironmentVariableA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FileTimeToSystemTime
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetVersionExW
GetThreadLocale
InterlockedIncrement
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetModuleHandleA
InterlockedDecrement
GetModuleHandleW
GetLastError
SetLastError
FormatMessageW
LocalFree
MulDiv
FindClose
FindNextFileW
FindFirstFileW
CreateDirectoryW
Sleep
DeleteCriticalSection
WaitForSingleObject
InitializeCriticalSection
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryW
DeleteFileW
CloseHandle
TerminateThread
GetLocalTime
lstrlenA
lstrlenW
MultiByteToWideChar
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetLongPathNameW
GetModuleFileNameW
LockResource
CreateProcessW
GlobalUnlock
GlobalFree
GlobalLock
FreeResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceW
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA

user32

RegisterClipboardFormatW
ReleaseCapture
SetCapture
UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
CharNextW
GetWindowThreadProcessId
SetCursor
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetCursorPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetForegroundWindow
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowTextLengthW
GetWindowTextW
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
CharUpperW
GetMenuItemCount
GetSubMenu
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
DispatchMessageW
GetSysColor
KillTimer
SetWindowRgn
SetTimer
IsRectEmpty
DrawIcon
IsIconic
SystemParametersInfoW
AppendMenuW
GetSystemMenu
LoadIconW
MessageBoxW
PostMessageW
GetMessageW
PostThreadMessageW
ReleaseDC
GetDC
GetClientRect
SetWindowLongW
GetWindowLongW
CallWindowProcW
GetParent
TrackMouseEvent
DrawTextW
CopyRect
GetClassNameW
GetSystemMetrics
EnableWindow
SendMessageW
FillRect
GetWindowRect
InvalidateRect
GetClassInfoExW
UnregisterClassA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
PtVisible
CreateBitmap
OffsetViewportOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetMapMode
GetRgnBox
GetWindowExtEx
GetViewportExtEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
DeleteObject
CreateFontW
CreateCompatibleBitmap
BitBlt
GetObjectW
SetDIBColorTable
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
GetClipBox
SetMapMode
SetStretchBltMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateRoundRectRgn
GetTextExtentPoint32W
CreateSolidBrush
SetTextColor
CreatePen
SetBkMode
GetStockObject
Rectangle
GetDIBColorTable
StretchBlt
RectVisible

msimg32

AlphaBlend
TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
StrCmpLogicalW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
OleUninitialize
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
CoRegisterMessageFilter
CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocString
SysAllocStringLen

urlmon

URLDownloadToFileW

gdiplus

GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipFree
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdiplusStartup
GdipBitmapLockBits
GdiplusShutdown

ws2_32

inet_addr
gethostbyname

winmm

PlaySoundW

Sections

.text
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

592d5a168a1e0832dc79cce11832b55d

Headers

File Characteristics

Imports

netsdk

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

gdiplus

ws2_32

winmm

Sections

.text Size: 348KB - Virtual size: 345KB

.rdata Size: 84KB - Virtual size: 82KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 488KB - Virtual size: 486KB

.text
Size: 348KB - Virtual size: 345KB

.rdata
Size: 84KB - Virtual size: 82KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 488KB - Virtual size: 486KB