e956dcf8b25ccc0d1c61e40075cbe18cef9e22f1b58f79998bbf2638642a7815

Sharing

Copy URL

Twitter E-mail

General

Target

e956dcf8b25ccc0d1c61e40075cbe18cef9e22f1b58f79998bbf2638642a7815
Size

1.3MB
MD5

67753ac9fe4f92b79506a40197db937e
SHA1

21221e792df2118cd16fa491c871058cef3105bd
SHA256

e956dcf8b25ccc0d1c61e40075cbe18cef9e22f1b58f79998bbf2638642a7815
SHA512

104bb766e506a3e3fd6efe6dc239d334a0fcd65cecbc2818ddddd7dcc4aeda6fef5318eb17ffc580aa44c5f591793d79ef699504c066857418b92f4e9aa5f41a
SSDEEP

24576:/iry1KswscUUk//tmUsDnpEYxky/+oBc63Fc:7pz//EDnpU6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e956dcf8b25ccc0d1c61e40075cbe18cef9e22f1b58f79998bbf2638642a7815

Files

e956dcf8b25ccc0d1c61e40075cbe18cef9e22f1b58f79998bbf2638642a7815
.exe windows:6 windows x64

bfde56b5ffeabf9addf800f470ee0755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

d3d11

D3D11CreateDevice

d2d1

ord1

dwrite

DWriteCreateFactory

kernel32

FreeLibrary
GetProcAddress
LoadLibraryExW
DecodePointer
CloseHandle
RaiseException
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
Sleep
CreateThread
SuspendThread
GetSystemPowerStatus
ResumeThread
WaitForMultipleObjectsEx
LocalFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
CreateFileW
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
MultiByteToWideChar
EncodePointer
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
OutputDebugStringW
GetACP
IsValidCodePage
GetOEMCP
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
SetEndOfFile
WriteConsoleW
GetCurrentProcessId
RtlUnwind
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
ExitProcess
GetCommandLineW
GetCommandLineA
RtlUnwindEx
RtlPcToFileHeader

user32

MoveWindow
QueryDisplayConfig
GetDisplayConfigBufferSizes
DestroyCursor
LoadCursorW
GetClientRect
GetWindowRect
MessageBoxW
AdjustWindowRect
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
CloseDesktop
OpenInputDesktop
FindWindowW
SetThreadDesktop

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW

ole32

CLSIDFromProgID
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocString

Exports

Exports

ctlAUXAccess
ctlCheckDriverVersion
ctlClose
ctlEngineGetActivity
ctlEngineGetProperties
ctlEnumEngineGroups
ctlEnumFans
ctlEnumFrequencyDomains
ctlEnumMemoryModules
ctlEnumPowerDomains
ctlEnumTemperatureSensors
ctlEnumerateDevices
ctlEnumerateDisplayOutputs
ctlEnumerateMuxDevices
ctlFanGetConfig
ctlFanGetProperties
ctlFanGetState
ctlFanSetDefaultMode
ctlFanSetFixedSpeedMode
ctlFanSetSpeedTableMode
ctlFrequencyGetAvailableClocks
ctlFrequencyGetProperties
ctlFrequencyGetRange
ctlFrequencyGetState
ctlFrequencyGetThrottleTime
ctlFrequencySetRange
ctlGetAdaperDisplayEncoderProperties
ctlGetCurrentScaling
ctlGetCurrentSharpness
ctlGetDeviceProperties
ctlGetDisplayProperties
ctlGetIntelArcSyncInfoForMonitor
ctlGetIntelArcSyncProfile
ctlGetLACEConfig
ctlGetMuxProperties
ctlGetPowerOptimizationCaps
ctlGetPowerOptimizationSetting
ctlGetSet3DFeature
ctlGetSetRetroScaling
ctlGetSetVideoProcessingFeature
ctlGetSharpnessCaps
ctlGetSupported3DCapabilities
ctlGetSupportedRetroScalingCapability
ctlGetSupportedScalingCapability
ctlGetSupportedVideoProcessingCapabilities
ctlGetZeDevice
ctlI2CAccess
ctlInit
ctlMemoryGetBandwidth
ctlMemoryGetProperties
ctlMemoryGetState
ctlOverclockGetProperties
ctlOverclockGpuFrequencyOffsetGet
ctlOverclockGpuFrequencyOffsetSet
ctlOverclockGpuLockGet
ctlOverclockGpuLockSet
ctlOverclockGpuVoltageOffsetGet
ctlOverclockGpuVoltageOffsetSet
ctlOverclockPowerLimitGet
ctlOverclockPowerLimitSet
ctlOverclockTemperatureLimitGet
ctlOverclockTemperatureLimitSet
ctlOverclockVramFrequencyOffsetGet
ctlOverclockVramFrequencyOffsetSet
ctlOverclockVramVoltageOffsetGet
ctlOverclockVramVoltageOffsetSet
ctlOverclockWaiverSet
ctlPanelDescriptorAccess
ctlPciGetProperties
ctlPciGetState
ctlPixelTransformationGetConfig
ctlPixelTransformationSetConfig
ctlPowerGetEnergyCounter
ctlPowerGetLimits
ctlPowerGetProperties
ctlPowerSetLimits
ctlPowerTelemetryGet
ctlReservedCall
ctlSetCurrentScaling
ctlSetCurrentSharpness
ctlSetIntelArcSyncProfile
ctlSetLACEConfig
ctlSetPowerOptimizationSetting
ctlSetRuntimePath
ctlSoftwarePSR
ctlSwitchMux
ctlTemperatureGetProperties
ctlTemperatureGetState
ctlWaitForPropertyChange

Sections

.text
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bfde56b5ffeabf9addf800f470ee0755

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

d2d1

dwrite

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 310KB - Virtual size: 309KB

.rdata Size: 126KB - Virtual size: 125KB

.data Size: 128KB - Virtual size: 137KB

.pdata Size: 17KB - Virtual size: 16KB

.rsrc Size: 146KB - Virtual size: 145KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 310KB - Virtual size: 309KB

.rdata
Size: 126KB - Virtual size: 125KB

.data
Size: 128KB - Virtual size: 137KB

.pdata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 146KB - Virtual size: 145KB

.reloc
Size: 568KB - Virtual size: 572KB