fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d[.]exe[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d.exe.zip
Size

34.2MB
MD5

f6d0ef3c05b59267492c6d9ba226c73a
SHA1

0a7b007c426e7d86defcae527361899fe08e49f6
SHA256

0c95e35ff7be021f1ad7cf47fdd3028566e819c0bbc3bf48228562dee8eae575
SHA512

d7a4f9512aee483cb529900c0080deb018c13e96ea03916f5afcd502065d59640496ab3fbc4bcd893ea670ef0134446372b8643d03007e74763f5fe273340503
SSDEEP

786432:/ViaxA8IsNUMzO3jkb3CpQhSEdLoO8P33:bxA8IsNURUfSEdUOq3

Score

1^/10

Malware Config

Signatures

Files

fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d.exe.zip
.zip

Password: infected
fc72eee3e3d82ddba4d58c2daad501206752b756665a802c30c95d2c73bdea8d.exe
.exe windows:6 windows x86

cdb83cf27ecfd70b7ff6f7aa8a16aca3

Code Sign

c3:80:9c:bc:a2:4c:3f:ae
Certificate

Issuer

CN=26fcbf28-f33f-44ac-88e9-d721a441c01a

Not Before

18-04-2022 17:26

Not After

19-04-2023 05:26

Subject

CN=26fcbf28-f33f-44ac-88e9-d721a441c01a

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06-04-2022 07:45

Not After

08-05-2033 07:45

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d8:c5:ee:5c:27:71:7b:9d:03:32:09:a7:69:3e:18:8f:a3:e0:d9:88
Signer

Actual PE Digest

d8:c5:ee:5c:27:71:7b:9d:03:32:09:a7:69:3e:18:8f:a3:e0:d9:88

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
VerQueryValueA
GetFileVersionInfoW

user32

CopyImage
MoveWindow
SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
SetCaretPos
GetCaretPos
ScrollWindowEx
GetDlgCtrlID
GetUpdateRgn
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoExW
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
OemToCharBuffA
LoadBitmapW
EnumChildWindows
SendNotifyMessageW
GetScrollBarInfo
LoadStringA
UnhookWindowsHookEx
SetCapture
GetCapture
ChildWindowFromPointEx
CreatePopupMenu
LoadMenuW
ShowCaret
GetMenuItemID
DestroyCaret
CharLowerBuffW
PostMessageW
SetWindowLongW
DrawMenuBar
SetParent
IsZoomed
InvalidateRgn
GetClientRect
IsChild
SendDlgItemMessageW
IntersectRect
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
GetAsyncKeyState
DestroyWindow
IsDialogMessageW
EndMenu
RegisterClassW
CharNextW
GetFocus
GetDC
SetFocus
ChangeClipboardChain
ReleaseDC
GetClassLongW
CharToOemBuffA
DrawTextW
SetScrollRange
PeekMessageA
TabbedTextOutW
MessageBeep
SetClassLongW
SetRectEmpty
LockWindowUpdate
RemovePropW
GetSubMenu
EqualRect
DestroyIcon
IsWindowVisible
CharToOemW
CharPrevW
DispatchMessageA
PtInRect
UnregisterClassW
GetTopWindow
SendMessageW
GetTabbedTextExtentW
GetMessageTime
NotifyWinEvent
GetComboBoxInfo
SendMessageTimeoutW
CreateMenu
LoadStringW
CharLowerW
SetWindowRgn
SetWindowPos
GetWindowRgn
GetMenuItemCount
GetSysColorBrush
GetWindowDC
DrawTextExW
CharLowerBuffA
EnumClipboardFormats
ScrollDC
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
EnableScrollBar
GetSysColor
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
IsRectEmpty
ValidateRect
IsCharAlphaW
GetCursor
KillTimer
BeginDeferWindowPos
WaitMessage
TranslateMDISysAccel
GetWindowPlacement
GetClipboardFormatNameW
CreateIconIndirect
GetMenuItemRect
CreateWindowExW
ChildWindowFromPoint
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
SetTimer
WindowFromPoint
BeginPaint
DrawStateW
RegisterClipboardFormatW
MapVirtualKeyW
OemToCharW
OffsetRect
IsWindowUnicode
DispatchMessageW
CreateAcceleratorTableW
DefMDIChildProcW
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
GetClipboardOwner
LoadCursorW
GetGUIThreadInfo
CharLowerA
ScrollWindow
GetLastActivePopup
UnionRect
SetMenuInfo
GetMenuInfo
GetSystemMetrics
CharUpperBuffW
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetCaretBlinkTime
InvertRect
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
ToAscii
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
LoadKeyboardLayoutW
EnumDisplaySettingsW
ActivateKeyboardLayout
DestroyAcceleratorTable
SetClipboardViewer
GetParent
CreateCaret
MonitorFromRect
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
OemToCharA
SetWindowsHookExW
EmptyClipboard
GetDoubleClickTime
GetAncestor
GetDlgItem
AdjustWindowRectEx
DrawIcon
IsWindow
EnumThreadWindows
InvalidateRect
LookupIconIdFromDirectoryEx
SetKeyboardState
GetKeyboardState
DrawFrameControl
ScreenToClient
IsCharAlphaNumericW
WindowFromDC
BringWindowToTop
SetCursor
CreateIcon
GetDialogBaseUnits
RemoveMenu
AppendMenuW
SubtractRect
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
CharUpperBuffA
CopyIcon
PostQuitMessage
ShowScrollBar
EnableMenuItem
LoadImageW
DeferWindowPos
EndDeferWindowPos
HideCaret
FindWindowExW
MonitorFromPoint
CharUpperA
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowLongW
GetWindowRect
ToUnicode
InsertMenuW
IsWindowEnabled
IsDialogMessageA
CharNextA
FindWindowW
DeleteMenu
GetKeyboardLayout

oledlg

OleUIPasteSpecialW
OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIInsertObjectA

oleaut32

SafeArrayPutElement
SafeArrayAllocData
LoadTypeLib
VariantClear
SysReAllocStringLen
CreateErrorInfo
GetActiveObject
SafeArrayAllocDescriptor
SysStringByteLen
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopy
SafeArrayCopy
SafeArrayDestroy
UnRegisterTypeLib
SafeArrayDestroyDescriptor
SafeArrayAccessData
SysFreeString
VariantInit
GetErrorInfo
SetErrorInfo
SysAllocString
SafeArrayCreate
SafeArrayGetElement
SafeArrayUnaccessData
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayCreateVector
SafeArrayRedim
RegisterTypeLib
VariantChangeType
VariantCopyInd

advapi32

RegSetValueExW
RegSetValueExA
RegConnectRegistryW
RegEnumKeyW
CryptDecrypt
CryptDestroyKey
CryptImportKey
CryptEncrypt
GetUserNameW
LookupAccountNameW
CryptDestroyHash
RegQueryInfoKeyW
RegUnLoadKeyW
CryptReleaseContext
CryptGetHashParam
RegSaveKeyW
RegReplaceKeyW
RegQueryValueW
RegCreateKeyExA
RegCreateKeyExW
CryptAcquireContextW
CryptDeriveKey
CryptGetKeyParam
CryptSetKeyParam
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegFlushKey
RegQueryValueExA
RegQueryValueExW
RegEnumValueW
ConvertSidToStringSidW
CryptHashData
RegCloseKey
CryptCreateHash
RegRestoreKeyW

msvcrt

_endthreadex
wcstombs
strcspn
_atoi64
_beginthreadex
isupper
toupper
wcslen
memchr
memcmp
memcpy
memset
sprintf
atol
towupper
strcat
strcpy
strcmp
strlen
strchr
_stricmp
strstr
iscntrl
_mbscspn
isxdigit
_gcvt
isgraph
islower
tolower
strncpy
_ismbblead
isalpha
isalnum
_itoa
memmove
isprint
isdigit
isspace
towlower
ispunct

winhttp

WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpConnect
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpWriteData
WinHttpSetCredentials
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSendRequest
WinHttpQueryOption

kernel32

SetFileTime
GetFileType
GetFileTime
FlushViewOfFile
GetACP
GetStringTypeExW
LocalFree
CloseHandle
SizeofResource
GetCurrentProcessId
TerminateThread
IsDebuggerPresent
FindNextFileW
GetFullPathNameW
WriteProfileStringW
GlobalSize
GetCPInfoExW
GetSystemTime
GetTempPathA
EnumSystemLocalesW
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetVersionExA
FreeLibrary
HeapDestroy
DosDateTimeToFileTime
GetUserDefaultLCID
GetDiskFreeSpaceA
FindFirstFileA
SetLastError
WaitNamedPipeW
GetModuleFileNameW
GetLastError
GlobalAlloc
GlobalUnlock
OpenMutexW
CompareStringW
CreateThread
HeapValidate
CreateMutexW
LoadLibraryA
ResetEvent
GetVolumeInformationW
RaiseException
FindFirstChangeNotificationW
FormatMessageW
GetCurrentThread
GetLogicalDrives
CreateFileMappingA
HeapReAlloc
IsBadReadPtr
ExpandEnvironmentStringsW
LoadLibraryExW
FileTimeToSystemTime
GetShortPathNameW
VirtualQuery
GlobalFindAtomW
VirtualQueryEx
Sleep
SetFilePointer
FlushFileBuffers
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
HeapCompact
WaitForMultipleObjects
lstrcmpiA
GetFileSize
GetStartupInfoW
GetFileAttributesW
VerLanguageNameW
GetThreadPriority
SetThreadPriority
VirtualAlloc
GetSystemInfo
GetTempPathW
LeaveCriticalSection
GetLogicalDriveStringsW
GetModuleHandleA
HeapCreate
VerSetConditionMask
GetDiskFreeSpaceW
GetUserDefaultUILanguage
GetConsoleOutputCP
lstrcpynA
GetModuleFileNameA
CompareStringA
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
HeapFree
WideCharToMultiByte
MultiByteToWideChar
FindClose
LoadLibraryW
FreeEnvironmentStringsW
SetEvent
GetLocaleInfoW
FormatMessageA
GetLocalTime
WaitForSingleObject
DeleteCriticalSection
GetTimeFormatW
SetErrorMode
GetComputerNameW
SleepEx
IsValidLocale
LoadLibraryExA
LocalAlloc
IsDBCSLeadByte
GetPrivateProfileStringW
WaitForMultipleObjectsEx
SetFileAttributesW
QueryDosDeviceW
VirtualProtect
UnlockFile
OpenFileMappingW
QueryPerformanceFrequency
FlushInstructionCache
VirtualFree
GetProcessHeap
ExitProcess
HeapAlloc
GetFileAttributesA
FindNextChangeNotification
GetLongPathNameW
RtlUnwind
GetCPInfo
GetStdHandle
DisconnectNamedPipe
GetModuleHandleW
TryEnterCriticalSection
CompareFileTime
FileTimeToDosDateTime
ReadFile
CreateProcessW
HeapSize
FindResourceW
lstrlenA
LockFileEx
CopyFileW
lstrcatA
lstrcmpA
lstrcpyA
MapViewOfFile
AreFileApisANSI
MulDiv
CreateFileA
GetLocaleInfoA
FreeResource
GetVersion
GetDriveTypeW
DeleteFileA
MoveFileW
GlobalAddAtomW
GetSystemTimeAsFileTime
OpenProcess
SwitchToThread
GetExitCodeThread
GetStringTypeW
OutputDebugStringW
LocalFileTimeToFileTime
GetFileAttributesExW
GlobalMemoryStatusEx
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
MoveFileExW
PeekNamedPipe
GlobalFree
EnterCriticalSection
GetDiskFreeSpaceExW
ReleaseMutex
GetStringTypeExA
GetFullPathNameA
GetTempFileNameW
GlobalDeleteAtom
SetCurrentDirectoryW
GetCurrentDirectoryW
InitializeCriticalSection
GlobalLock
GetCurrentProcess
AllocConsole
GetCommandLineW
GetProcAddress
ResumeThread
SearchPathW
GetVersionExW
VerifyVersionInfoW
GetEnvironmentStringsW
UnlockFileEx
GetProcessAffinityMask
SignalObjectAndWait
LCMapStringW
FindFirstFileW
LockFile
UnmapViewOfFile
GetConsoleCP
GlobalHandle
lstrlenW
SetEndOfFile
QueryPerformanceCounter
GlobalReAlloc
lstrcmpW
SystemTimeToFileTime
CreateFileW
EnumResourceNamesW
DeleteFileW
IsDBCSLeadByteEx
FindCloseChangeNotification
GetSystemDefaultLCID
GetEnvironmentVariableW
OutputDebugStringA
WriteFile
CreateFileMappingW
CreateNamedPipeW
ExitThread
TlsGetValue
GetProfileIntW
GetDateFormatW
TlsSetValue
GetSystemDefaultUILanguage
CreateDirectoryW
EnumCalendarInfoW
SetConsoleTextAttribute
GetProfileStringW
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

shfolder

SHGetFolderPathW

wsock32

gethostbyaddr
WSACleanup
gethostbyname
bind
gethostname
closesocket
WSAGetLastError
connect
inet_addr
getpeername
WSAAsyncSelect
WSAAsyncGetServByName
WSACancelAsyncRequest
send
ntohs
htons
WSAStartup
getservbyname
getsockname
listen
socket
recv
inet_ntoa
ioctlsocket
WSAAsyncGetHostByName

crypt32

CryptUnprotectData
CertFindExtension
CertGetNameStringW
CertGetPublicKeyLength
CertDuplicateCertificateContext
CryptFindOIDInfo
CertFreeCertificateContext
CertOpenStore
CertEnumCertificatesInStore
CertGetCertificateContextProperty
CryptSignMessage
CertControlStore
CryptProtectData
CryptDecodeObject
CertNameToStrW
CertCloseStore
PFXImportCertStore
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage

gdi32

GetTextCharsetInfo
BeginPath
AngleArc
CloseFigure
SetAbortProc
PathToRegion
GetCharABCWidthsFloatW
ScaleWindowExtEx
SetArcDirection
ExtSelectClipRgn
RectInRegion
RestoreDC
GetFontLanguageInfo
GetTextMetricsW
GetWindowOrgEx
CreatePalette
CreatePen
CreateICW
CreateDCW
GetStockObject
GetCharABCWidthsW
GetFontUnicodeRanges
CreateSolidBrush
GetBkMode
ResetDCW
ModifyWorldTransform
StartPage
GetTextExtentPoint32A
GetTextCharacterExtra
SetTextCharacterExtra
StartDocW
AbortDoc
GetEnhMetaFileBits
OffsetWindowOrgEx
CreatePenIndirect
SetMapMode
GetMapMode
CreateFontIndirectW
PolyBezier
LPtoDP
DPtoLP
DeleteMetaFile
GetObjectW
GetFontData
GetWinMetaFileBits
GetTextExtentExPointW
GetOutlineTextMetricsW
PtVisible
ArcTo
GetKerningPairs
CreateEnhMetaFileW
PolylineTo
TextOutW
SetGraphicsMode
GetGraphicsMode
SetTextJustification
SetWindowOrgEx
CreatePatternBrush
DeleteEnhMetaFile
Chord
SetDIBits
CreateRectRgn
RealizePalette
GetObjectType
SetDIBColorTable
GetDIBColorTable
CreateFontW
GetGlyphOutlineW
SelectClipPath
SetEnhMetaFileBits
CreateEllipticRgn
DeleteDC
BitBlt
GetClipBox
CreateBitmap
CombineTransform
SetWinMetaFileBits
CreateDIBSection
EnumFontsW
EnumFontFamiliesW
CreateHalftonePalette
ExtFloodFill
CopyEnhMetaFileW
SetBkColor
GetBkColor
CreateCompatibleDC
GetObjectA
GetBrushOrgEx
GetCurrentPositionEx
GetTextExtentExPointA
GetNearestPaletteIndex
GetTextAlign
SetTextAlign
CreateRoundRectRgn
GetOutlineTextMetricsA
SetBrushOrgEx
GetPixel
GetViewportExtEx
SetViewportExtEx
SetPixel
SetPolyFillMode
GetPolyFillMode
StretchDIBits
WidenPath
Pie
EnumEnhMetaFile
SetBkMode
GetRandomRgn
CreateCompatibleBitmap
CreatePolygonRgn
GetEnhMetaFileHeader
CloseEnhMetaFile
RectVisible
TranslateCharsetInfo
StrokeAndFillPath
ResizePalette
CreateHatchBrush
GetTextColor
SetTextColor
StretchBlt
SetMetaRgn
GetGlyphIndicesW
SelectClipRgn
RoundRect
SetRectRgn
FillPath
GetTextCharset
PolyBezierTo
FillRgn
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
GetBitmapBits
GetSystemPaletteEntries
GetRegionData
GetEnhMetaFilePaletteEntries
ExtCreatePen
GetNearestColor
EndDoc
GetCurrentObject
SetROP2
GetROP2
ExtTextOutA
GetEnhMetaFileDescriptionW
CreateEllipticRgnIndirect
CreateBitmapIndirect
GetWindowExtEx
Arc
CreateRectRgnIndirect
SelectPalette
SetLayout
ExcludeClipRect
MaskBlt
GetCharacterPlacementW
EndPath
EndPage
EqualRgn
GetViewportOrgEx
SetViewportOrgEx
GetTextMetricsA
CreateBrushIndirect
PatBlt
StrokePath
GetCharABCWidthsA
Rectangle
SaveDC
GetWorldTransform
SetWorldTransform
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
PtInRegion
GetClipRgn
IntersectClipRect
Polyline
CombineRgn
GetStretchBltMode
CreateDIBitmap
SetStretchBltMode
GetDIBits
ExtCreateRegion
CreateFontIndirectA
LineTo
GetRgnBox
SetWindowExtEx
SelectObject
DeleteObject
UnrealizeObject
OffsetRgn
SetDCPenColor
GetTextExtentPointW
ExtTextOutW
GetTextFaceW
GdiFlush
PolyPolyline
EnumFontFamiliesExW
GetPaletteEntries

usp10

ScriptFreeCache
ScriptGetProperties
ScriptPlace
ScriptItemize
ScriptShape
ScriptLayout
ScriptApplyDigitSubstitution

mpr

WNetEnumResourceW
WNetGetUniversalNameW
WNetGetConnectionW
WNetCloseEnum
WNetOpenEnumW

winmm

sndPlaySoundW
PlaySoundW
timeGetTime

oleacc

LresultFromObject

wininet

InternetCloseHandle
HttpAddRequestHeadersA
InternetGetLastResponseInfoW
InternetConnectA
InternetSetOptionW
InternetWriteFile
HttpEndRequestW
HttpSendRequestExA
InternetReadFile
HttpOpenRequestA
InternetOpenA
HttpSendRequestA
InternetQueryDataAvailable
HttpQueryInfoA

winspool.drv

DocumentPropertiesW
WritePrinter
OpenPrinterW
ClosePrinter
SetPrinterW
GetPrinterW
EnumPrintersW
EndDocPrinter
StartPagePrinter
EndPagePrinter
DeviceCapabilitiesW
StartDocPrinterW
GetDefaultPrinterW

comdlg32

FindTextW
ReplaceTextW
ChooseFontW
CommDlgExtendedError
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW

comctl32

ImageList_GetImageInfo
FlatSB_SetScrollInfo
InitCommonControls
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
FlatSB_SetScrollProp
ImageList_GetDragImage
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_AddMasked
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
ImageList_Copy
FlatSB_GetScrollInfo
ImageList_Write
ImageList_DrawIndirect
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_LoadImageW
ImageList_Draw
ImageList_Remove
ImageList_Duplicate
ImageList_ReplaceIcon
ImageList_SetOverlayImage

shell32

SHBrowseForFolderW
DragQueryFileW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
SHGetSpecialFolderPathW
SHGetPathFromIDListW
ShellExecuteExW
DragFinish
SHGetMalloc
SHGetFileInfoW
SHGetFolderPathW
SHGetDesktopFolder
SHFileOperationW
SHAppBarMessage
ShellExecuteW

urlmon

URLDownloadToFileW

cryptui

CryptUIDlgSelectCertificateW
CryptUIDlgViewCertificateA

ole32

CreateDataAdviseHolder
StgCreateDocfileOnILockBytes
OleRegEnumVerbs
CreateBindCtx
CoCreateGuid
CoCreateInstance
CLSIDFromString
OleGetClipboard
OleSetClipboard
IsEqualGUID
OleFlushClipboard
CreateStreamOnHGlobal
StringFromGUID2
CreateILockBytesOnHGlobal
CLSIDFromProgID
OleCreateFromData
CoGetClassObject
CoInitialize
OleDraw
CoTaskMemAlloc
StringFromCLSID
DoDragDrop
RevokeDragDrop
IsAccelerator
OleGetIconOfClass
CoUninitialize
ReleaseStgMedium
RegisterDragDrop
ProgIDFromCLSID
OleInitialize
CoInitializeEx
OleUninitialize
OleCreateLinkFromData
CoTaskMemFree
OleSetMenuDescriptor

secur32

QueryContextAttributesW
EncryptMessage
DecryptMessage
AcquireCredentialsHandleW
QuerySecurityPackageInfoW
CompleteAuthToken
FreeContextBuffer
DeleteSecurityContext
FreeCredentialsHandle
AcceptSecurityContext
InitializeSecurityContextW

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 44.5MB - Virtual size: 44.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 270KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 949KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 236B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33.2MB - Virtual size: 33.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

cdb83cf27ecfd70b7ff6f7aa8a16aca3

Code Sign

c3:80:9c:bc:a2:4c:3f:aeCertificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

d8:c5:ee:5c:27:71:7b:9d:03:32:09:a7:69:3e:18:8f:a3:e0:d9:88Signer

Headers

DLL Characteristics

File Characteristics

Imports

version

user32

oledlg

oleaut32

advapi32

msvcrt

winhttp

kernel32

shfolder

wsock32

crypt32

gdi32

usp10

mpr

winmm

oleacc

wininet

winspool.drv

comdlg32

comctl32

shell32

urlmon

cryptui

ole32

secur32

Exports

Exports

Sections

.text Size: 44.5MB - Virtual size: 44.5MB

.itext Size: 270KB - Virtual size: 270KB

.data Size: 637KB - Virtual size: 637KB

.bss Size: - Virtual size: 949KB

.idata Size: 27KB - Virtual size: 27KB

.didata Size: 28KB - Virtual size: 27KB

.edata Size: 512B - Virtual size: 152B

.tls Size: - Virtual size: 236B

.rdata Size: 512B - Virtual size: 93B

.reloc Size: 3.6MB - Virtual size: 3.6MB

.rsrc Size: 33.2MB - Virtual size: 33.2MB

c3:80:9c:bc:a2:4c:3f:ae
Certificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

d8:c5:ee:5c:27:71:7b:9d:03:32:09:a7:69:3e:18:8f:a3:e0:d9:88
Signer

.text
Size: 44.5MB - Virtual size: 44.5MB

.itext
Size: 270KB - Virtual size: 270KB

.data
Size: 637KB - Virtual size: 637KB

.bss
Size: - Virtual size: 949KB

.idata
Size: 27KB - Virtual size: 27KB

.didata
Size: 28KB - Virtual size: 27KB

.edata
Size: 512B - Virtual size: 152B

.tls
Size: - Virtual size: 236B

.rdata
Size: 512B - Virtual size: 93B

.reloc
Size: 3.6MB - Virtual size: 3.6MB

.rsrc
Size: 33.2MB - Virtual size: 33.2MB