748308faed13b03e9642fe11721c27cea92ab06d8648c643f0467a15fe14f046

Sharing

Copy URL Twitter E-mail

General

Target

748308faed13b03e9642fe11721c27cea92ab06d8648c643f0467a15fe14f046
Size

1.9MB
MD5

e7c31648a54d519a37bfbac8d5a5c3dd
SHA1

f933540a4ab292d82efe18afc6e83697b0df0612
SHA256

748308faed13b03e9642fe11721c27cea92ab06d8648c643f0467a15fe14f046
SHA512

2aa970f5760a6563743a7efe7907d1f34526f79ed58d552314a536e3bfd710fa484553dc51093d894bd50011496e6fcfe846aa71729e335d8aec2d4ec39767ab
SSDEEP

24576:XEAfPCQxCg4cNpfitQ90gVGWoTlminOUundVRtClTcUv0LRvrlG5Bb4TwBWn:NqQpuzDJudsZ+L509SwBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
748308faed13b03e9642fe11721c27cea92ab06d8648c643f0467a15fe14f046

Files

748308faed13b03e9642fe11721c27cea92ab06d8648c643f0467a15fe14f046
.exe windows:4 windows x86

844305a17cf92527a5e3b1e9d7ab69d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA
PlaySoundA

msvfw32

DrawDibClose
DrawDibDraw
DrawDibOpen

avifil32

AVIStreamInfoA
AVIStreamLength
AVIStreamStart
AVIFileGetStream
AVIFileOpenA
AVIStreamSampleToTime
AVIFileInfoA
AVIStreamTimeToSample
AVIFileInit
AVIFileExit
AVIStreamOpenFromFileA
AVIStreamRelease
AVIStreamWrite
AVIStreamRead
AVIStreamFindSample
AVIStreamSetFormat
AVIFileRelease
AVIStreamReadFormat
AVIFileCreateStreamA

mpr

WNetOpenEnumA
WNetEnumResourceA
WNetConnectionDialog
WNetAddConnection2A
WNetCancelConnectionA
WNetCloseEnum

pano360api_003908

?SetLicenseCode@PanoramicDisplay@@QAEHPAD00H00@Z
?SetLensType@PanoramicDisplay@@QAEHH@Z
?GetHWND@PanoramicDisplay@@QAEPAUHWND__@@XZ
?GetDisplaySourceFrameBuffer@PanoramicDisplay@@QAEPAEPAH0@Z
?ChangeCamera@PanoramicDisplay@@QAEHPADHH@Z
?SetAutoPanSpeed@PanoramicDisplay@@QAEHH@Z
?SetPTZ@PanoramicDisplay@@QAEHHNNN@Z
?SetFlip@PanoramicDisplay@@QAEHH@Z
?SetMirror@PanoramicDisplay@@QAEHH@Z
?Set360PALAlignment@PanoramicDisplay@@QAEHNHHHHHHHN@Z
?Set360Alignment@PanoramicDisplay@@QAEHNHHHHHH@Z
?SetLensFOV@PanoramicDisplay@@QAEHN@Z
?SetShowType@PanoramicDisplay@@QAEHH@Z
?Set180Alignment@PanoramicDisplay@@QAEHNHHHHHHNN@Z
?MoveWindow@PanoramicDisplay@@QAEXHH@Z
?GetShowType@PanoramicDisplay@@QAEHXZ
?GetLensType@PanoramicDisplay@@QAEHXZ
??1PanoramicDisplay@@QAE@XZ
?UpdateNewFrame@PanoramicDisplay@@QAEHXZ
?GetMirror@PanoramicDisplay@@QAEHXZ
?GetFlip@PanoramicDisplay@@QAEHXZ
?GetAutoPanSpeed@PanoramicDisplay@@QAEHXZ
?Alignment@PanoramicDisplay@@QAEHXZ
?GetPTZ@PanoramicDisplay@@QAEHHPAN00@Z
?Get180Alignment@PanoramicDisplay@@QAEHPANPAH1111100@Z
?Get360PALAlignment@PanoramicDisplay@@QAEHPANPAH1111110@Z
?Get360Alignment@PanoramicDisplay@@QAEHPANPAH11111@Z
?SendBufferBGR24@PanoramicDisplay@@QAEHPAE@Z
?GetLensFOV@PanoramicDisplay@@QAENXZ
?ChangeCamera@PanoramicDisplay@@QAEHHH@Z
??0PanoramicDisplay@@QAE@PAUHWND__@@HHHHH@Z

ddraw

DirectDrawEnumerateExA

msimg32

TransparentBlt

ezffmpegdll

?FFMpeg_ScaleRGB24@@YAHPAE0HHH@Z
?FFMpeg_Init@@YAHH@Z
?FFMpeg_Close@@YAXPAJ0@Z
?FFMpeg_FreeSwsContext@@YAXPAJ@Z
?FFMpeg_AvFree@@YAXPAX@Z
?FFMpeg_Open@@YAHHHHPAPAJ0@Z
?FFMpeg_VDecoder@@YAHPAJ0PAEH@Z
?FFMpeg_VDecoderBuffer@@YAXPAJPAPAE11AAH2@Z
?FFMpeg_SwsScale@@YAXPAJ00@Z
?FFMpeg_GetSwsContext@@YAPAJPAJPAEHPAPAJ@Z

kernel32

GetProfileIntA
GlobalFlags
GetCurrentThread
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileTime
SetErrorMode
RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
GetTimeZoneInformation
GetSystemTime
GetACP
HeapReAlloc
HeapSize
TerminateProcess
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetThreadLocale
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
lstrcmpA
GetProfileStringA
GetLocalTime
FlushInstructionCache
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
MulDiv
GetTickCount
DeleteFileA
HeapFree
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
lstrcpyA
GetFileSize
WritePrivateProfileStringA
CopyFileA
CreateFileA
WriteFile
ReadFile
GetFullPathNameA
GetFileAttributesA
GlobalAlloc
GlobalFree
SizeofResource
CreateProcessA
CreateMutexA
GetLastError
SetLocalTime
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
CloseHandle
GetExitCodeThread
SetEvent
WaitForSingleObject
TerminateThread
CreateEventA
CreateThread
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
GetVersion
GetVersionExA
FindResourceA
LoadResource
LockResource
VirtualFree
VirtualAlloc
lstrcpynA
HeapAlloc
GlobalLock
GlobalUnlock
FreeLibrary
LoadLibraryA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
RemoveDirectoryA
GetLogicalDrives
GetDriveTypeA
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
DeleteCriticalSection
InitializeCriticalSection
GetLocaleInfoA
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
MultiByteToWideChar
GetProcessHeap
GlobalSize

user32

ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
GetDCEx
LockWindowUpdate
CharNextA
GetNextDlgGroupItem
PostThreadMessageA
WinHelpA
wsprintfA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
GetMessageTime
GetForegroundWindow
GetWindow
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
MessageBoxA
LoadStringA
FindWindowA
GetLastActivePopup
IsIconic
SetForegroundWindow
RegisterWindowMessageA
PeekMessageA
SetFocus
ShowWindow
CreateWindowExA
ValidateRect
BeginPaint
EndPaint
SetMenu
DrawMenuBar
GetClassNameA
SetPropA
CallWindowProcA
GetPropA
RemovePropA
SetWindowLongA
IntersectRect
DeleteMenu
SetWindowPos
GetMenuState
LoadMenuA
GetMenuStringA
InsertMenuA
AppendMenuA
ModifyMenuA
GetMenuDefaultItem
GetSubMenu
GetMenuItemID
WindowFromDC
GetMenuInfo
CopyAcceleratorTableA
MapVirtualKeyA
GetKeyNameTextA
CopyImage
GetMenuItemRect
GetMenuItemInfoA
IsMenu
SetMenuInfo
GetWindowDC
GetMenuItemCount
UnregisterClassA
SetCursorPos
SetParent
PostQuitMessage
MessageBeep
OpenClipboard
GetClipboardData
DrawFocusRect
TranslateMessage
GetMessageA
DispatchMessageA
CopyIcon
GetCursor
DestroyCursor
DefWindowProcA
GetKeyState
GetMessagePos
DrawEdge
GetDesktopWindow
UpdateWindow
GetClassInfoA
IsWindowVisible
LoadIconA
GrayStringA
DrawTextA
TabbedTextOutA
SetCursor
GetWindowLongA
FrameRect
FillRect
GetActiveWindow
WindowFromPoint
SetWindowTextA
GetParent
DrawStateA
IsWindow
CallNextHookEx
InflateRect
EqualRect
UnhookWindowsHookEx
SetWindowsHookExA
ReleaseCapture
LoadCursorA
GetSysColorBrush
RegisterClassExA
SetWindowRgn
SetRectEmpty
DrawFrameControl
OffsetRect
IsRectEmpty
MonitorFromPoint
GetMonitorInfoA
CopyRect
ClientToScreen
GetCapture
SetCapture
SetTimer
DestroyIcon
GetDC
ReleaseDC
DrawIconEx
GetIconInfo
GetSysColor
SystemParametersInfoA
GetSystemMetrics
LoadImageA
PtInRect
CreatePopupMenu
PostMessageA
InvalidateRect
RedrawWindow
LoadBitmapA
SetRect
GetClientRect
GetWindowRect
EnableWindow
GetFocus
IsChild
MenuItemFromPoint
GetCursorPos
SendMessageA
KillTimer
GetMenu
DestroyMenu
GetSystemMenu
CharUpperA
wvsprintfA
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
DefMDIChildProcA
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
BringWindowToTop
ScreenToClient
InvertRect
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetScrollPos
RegisterClassA
GetTopWindow
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
CloseClipboard

gdi32

CreatePen
GetCurrentObject
GetTextExtentExPointW
GetGlyphOutlineW
SelectObject
GetDeviceCaps
CreateFontA
SetPixel
GetTextExtentPoint32A
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
Rectangle
CreatePalette
RealizePalette
GetBkColor
GetTextColor
FillRgn
PlgBlt
GetPixel
PtInRegion
SetTextColor
SelectPalette
DeleteDC
LineTo
MoveToEx
SetViewportOrgEx
PatBlt
FloodFill
RoundRect
SetBkColor
GetCurrentPositionEx
GetTextExtentPointA
SetTextAlign
GetLayout
GetTextMetricsA
GetTextAlign
CreatePatternBrush
SetWindowOrgEx
GetNearestColor
SetBrushOrgEx
UnrealizeObject
CreateHatchBrush
SelectClipRgn
CreateRectRgnIndirect
Polygon
EndDoc
EndPage
StartPage
StartDocA
GetClipBox
SaveDC
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
GetMapMode
SetRectRgn
DPtoLP
StretchDIBits
GetCharWidthA
CopyMetaFileA
LPtoDP
CreateBitmap
CreatePolygonRgn
CreateRoundRectRgn
GetViewportOrgEx
CreateRectRgn
CombineRgn
EqualRgn
CreateSolidBrush
OffsetRgn
FrameRgn
GetStockObject
CreateFontIndirectA
DeleteObject
BitBlt
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
CreateDIBitmap
StretchBlt

comdlg32

PrintDlgA
ChooseColorA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegRestoreKeyA
RegSaveKeyA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

shell32

DragQueryFileA
DragFinish
SHGetFolderLocation
SHGetSpecialFolderLocation
SHFileOperationA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA

comctl32

ImageList_GetIconSize
ImageList_AddMasked
ImageList_Add
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_DrawIndirect
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ord17
ImageList_Replace
ord8
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetBkColor

oledlg

ord8

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CLSIDFromProgID
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CLSIDFromString
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoRevokeClassObject
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoUninitialize
OleDuplicateData
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
ReleaseStgMedium
DoDragDrop
CoGetClassObject
CoFreeUnusedLibraries

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantCopy
SysAllocStringByteLen
VariantChangeType
VarBstrFromCy
VariantTimeToSystemTime
SysStringLen
SysAllocString
OleLoadPicturePath
VariantClear

Sections

.text
Size: 884KB - Virtual size: 881KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 904KB - Virtual size: 902KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

844305a17cf92527a5e3b1e9d7ab69d8

Headers

File Characteristics

Imports

winmm

msvfw32

avifil32

mpr

pano360api_003908

ddraw

msimg32

ezffmpegdll

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 884KB - Virtual size: 881KB

.rdata Size: 160KB - Virtual size: 158KB

.data Size: 36KB - Virtual size: 51KB

.rsrc Size: 904KB - Virtual size: 902KB

.text
Size: 884KB - Virtual size: 881KB

.rdata
Size: 160KB - Virtual size: 158KB

.data
Size: 36KB - Virtual size: 51KB

.rsrc
Size: 904KB - Virtual size: 902KB