67b2bfcfc7c0ad07a82441dd9808ff854deb0d8192c0c94f9ddf4e18f9d5c1c3

Sharing

Copy URL Twitter E-mail

General

Target

67b2bfcfc7c0ad07a82441dd9808ff854deb0d8192c0c94f9ddf4e18f9d5c1c3
Size

2.6MB
MD5

f64ff8c6e0f9823570ca8634df68271b
SHA1

54b7b65c66f01dc8873c15fd6aab35b8b98e3e69
SHA256

67b2bfcfc7c0ad07a82441dd9808ff854deb0d8192c0c94f9ddf4e18f9d5c1c3
SHA512

6128850ca344d9fb28b37af603f7918bc276c200e1116a957488fc44e9665c4bdb42687367f0bf63db4f1d4af06cc85d6d68fd9cc2d2a7f62f5e4c6a15108c64
SSDEEP

24576:TYiPzGfl0cz6bzs3s+KVevq22MoDZtU00wjKgB0M2XZSVjW4IzU9LyEbc1xeJ6gy:TGlIbzscVVgO94zCvbTyxtZHKpUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b2bfcfc7c0ad07a82441dd9808ff854deb0d8192c0c94f9ddf4e18f9d5c1c3

Files

67b2bfcfc7c0ad07a82441dd9808ff854deb0d8192c0c94f9ddf4e18f9d5c1c3
.dll windows:4 windows x86

3bb661112aa6b2c865e91be2c05493b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

InvalidateRect
KillTimer
EnumChildWindows
GetDoubleClickTime
CharLowerA
wvsprintfA
SwapMouseButton
ChangeDisplaySettingsA
OpenIcon
EnumThreadWindows
ClipCursor
GetAsyncKeyState
GetKeyboardState
LoadCursorFromFileA
SetClassLongA
WindowFromPoint
ReleaseDC
UpdateLayeredWindow
GetDC
MoveWindow
IsIconic
IsZoomed
ShowWindow
CreateWindowExA
SetPropA
DestroyWindow
RemovePropA
GetPropA
IsWindow
GetParent
mouse_event
ExitWindowsEx
GetGUIThreadInfo
SetActiveWindow
AttachThreadInput
MapVirtualKeyA
SetCapture
GetDlgItem
FindWindowA
CharUpperA
GetWindowRect
keybd_event
UnhookWindowsHookEx
EnumDisplaySettingsA
SetCursorPos
SetLayeredWindowAttributes
SetWindowLongA
GetWindowLongA
ClientToScreen
GetForegroundWindow
OpenClipboard
GetCursorPos
CallWindowProcA
PostMessageA
GetWindowTextLengthA
GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
IsWindowVisible
GetWindow
GetDesktopWindow
FindWindowExA
SendMessageTimeoutA
ShowCursor
MsgWaitForMultipleObjects
SendInput
EnumWindows
GetWindowInfo
GetClientRect
EnableWindow
SetFocus
SendMessageA
SetWindowTextA
GetAncestor
SetForegroundWindow
GetKeyState
GetFocus
SetTimer
DefWindowProcA
UpdateWindow
GetLastActivePopup
ValidateRect
GetActiveWindow
GetNextDlgTabItem
ShowWindowAsync
SetWindowPos
GetDlgCtrlID
GetCaretPos
FlashWindow
PrintWindow
RegisterWindowMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
UnloadKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoA
GetKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
MessageBoxA
wsprintfA
CloseClipboard
GetClipboardData
PostQuitMessage
SetClipboardData
EmptyClipboard
GetSystemMetrics
SetCursor
EndDialog
CreateDialogIndirectParamA
DestroyMenu
LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetClassLongA
GetMessageTime
GetMessagePos
GetWindowPlacement
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
IsDialogMessageA
UnregisterClassA
FlashWindowEx
PtInRect
GetMenuItemCount
CallNextHookEx
TabbedTextOutA
DrawTextA
SetParent
SetWindowsHookExA
ReleaseCapture
GrayStringA
SendDlgItemMessageA
CreateWindowStationA
IsWindowEnabled
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
AdjustWindowRectEx
CallWindowProcA
SendDlgItemMessageA
RegisterWindowMessageA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GrayStringA
SetWindowTextA
GetWindowTextA
DrawTextA
GetDlgItem
RemovePropA
GetMessageTime
GetLastActivePopup
MapWindowPoints
GetForegroundWindow
TabbedTextOutA
GetClassNameA
GetDesktopWindow
LoadIconA
TranslateMessage
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
EndPaint
BeginPaint
GetWindowDC
CharUpperA
GetWindowTextLengthA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
ScreenToClient
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
GetSysColorBrush
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBoxA
GetCursorPos
GetSystemMetrics
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
LoadStringA
UnregisterClassA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
IsDialogMessageA
ScrollWindowEx
CloseClipboard
wsprintfA

kernel32

ExitProcess
VirtualFree
VirtualAlloc
lstrcpynA
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedDecrement
FreeLibrary
LocalReAlloc
DebugActiveProcess
HeapFree
GlobalFree
GlobalSize
GlobalUnlock
GetLongPathNameA
GlobalAlloc
GetExitCodeProcess
ReadFile
PeekNamedPipe
CreateProcessA
CreatePipe
GetComputerNameA
GetVersionExA
DeviceIoControl
CreateFileA
Sleep
VirtualProtectEx
SetProcessWorkingSetSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
Thread32Next
Thread32First
TerminateProcess
SetThreadContext
SuspendThread
RtlFillMemory
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
TlsSetValue
FormatMessageA
HeapReAlloc
SetFilePointer
TlsGetValue
SetErrorMode
lstrcmpiA
lstrcatA
lstrcpyA
MulDiv
GlobalFlags
SetLastError
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
GetLastError
CreateThread
GetTimeFormatA
GetDateFormatA
OpenEventA
GetProcessTimes
InitializeCriticalSection
CopyFileA
WaitForSingleObject
ResumeThread
GetCurrentProcessId
SetWaitableTimer
CreateWaitableTimerA
OpenThread
GetModuleFileNameA
VirtualFreeEx
TerminateThread
VirtualAllocEx
GetFileSize
Module32Next
GetShortPathNameA
CreateEventA
IsDebuggerPresent
DeleteFileA
WriteProcessMemory
VirtualQueryEx
GetVolumeInformationA
MultiByteToWideChar
Process32Next
LoadResource
IsBadReadPtr
SetEndOfFile
FindResourceA
GetTickCount
GetUserDefaultLCID
GetProcessVersion
FlushFileBuffers
SetStdHandle
IsBadCodePtr
GetCPInfo
GetOEMCP
GetCommandLineA
RtlUnwind
Process32First
HeapAlloc
GetProcessHeap
GetCurrentProcess
MoveFileA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
ReadProcessMemory
OpenProcess
FileTimeToSystemTime
GetLocalTime
GetThreadTimes
LCMapStringA
lstrlenA
GetCurrentThread
GetModuleHandleA
GetExitCodeThread
CreateRemoteThread
lstrcpyn
GetProcAddress
LoadLibraryA
LocalFree
WideCharToMultiByte
RtlMoveMemory
LocalAlloc
CloseHandle
Module32First
CreateToolhelp32Snapshot
lstrcmpA
GlobalDeleteAtom
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
GetStartupInfoA
FindNextFileA
FindFirstFileA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
LCMapStringW
RaiseException
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetVersion
FindClose
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
SetFileAttributesA
SetLocalTime
GetCurrentThreadId
GetCurrentDirectoryA
WriteFile
WritePrivateProfileStringA
GlobalLock
InterlockedIncrement
FindClose
FindFirstFileA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateEventA
CreateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
GetVersionExA
GetLastError
LoadLibraryA
FreeLibrary
GetFullPathNameA
InterlockedDecrement
LocalFree
FileTimeToLocalFileTime
lstrcpynA
DuplicateHandle
FlushFileBuffers
UnlockFile
SetEndOfFile
lstrcmpiA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetFileTime
GetCurrentThread
GlobalFlags
SetErrorMode
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
GetSystemTime
GetLocalTime
RaiseException
HeapSize
GetACP
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
GetFileAttributesA
DeleteFileA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
CloseHandle
LockFile
SuspendThread
TerminateThread
ReleaseMutex
CreateMutexA
FileTimeToSystemTime
GetVersion
GetTimeZoneInformation
SetLastError
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
GetUserDefaultLCID
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc

ole32

OleInitialize
OleUninitialize
CLSIDFromString
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
CoCreateInstance
OleIsCurrentClipboard
OleFlushClipboard
OleRun
CoUninitialize
CoInitialize

shell32

SHBrowseForFolderA
SHFileOperationA
SHGetSpecialFolderLocation
SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHChangeNotify
SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA

shlwapi

PathFindExtensionA
PathMakeSystemFolderA
PathRenameExtensionA
PathIsSystemFolderA
PathIsDirectoryEmptyA
PathIsDirectoryA
PathRemoveBlanksA
PathFindFileNameA
PathFileExistsA
PathUnmakeSystemFolderA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

GetDeviceCaps
SetMapMode
GetStockObject
RestoreDC
SaveDC
CreateCompatibleDC
CreateBitmap
SetViewportOrgEx
CreateDIBSection
SelectObject
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetBkColor
DeleteObject
DeleteDC
CreateRectRgn
GetTextExtentPointA
CreateFontIndirectA
SetBkMode
SetTextColor
TextOutA
GetPixel
CreateCompatibleBitmap
GetObjectA
Escape
ExtTextOutA
PtVisible
RectVisible
ScaleViewportExtEx
LineTo
MoveToEx
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
EndPage
GetObjectA
GetStockObject
CreateFontIndirectA
CreateSolidBrush
FillRgn
CreateRectRgn
CombineRgn
PatBlt
CreatePen
SelectObject
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
CreateRectRgnIndirect
SetBkColor
ExtSelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextMetricsA
EndDoc
GetDeviceCaps
DeleteDC
StartDocA
StartPage
BitBlt
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
CreateBitmap

gdiplus

GdipCreatePen1
GdipSetClipHrgn
GdipDeletePath
GdipDeletePen
GdipResetClip
GdipDrawPath
GdipSetSmoothingMode
GdipDeleteGraphics
GdiplusStartup
GdipCreateFromHDC
GdipDrawRectangle

wininet

HttpSendRequestA
InternetCloseHandle
InternetTimeToSystemTime
InternetSetCookieA
HttpQueryInfoA
InternetReadFile
InternetTimeFromSystemTime
HttpOpenRequestA
InternetOpenA
InternetConnectA
InternetCloseHandle

oleaut32

SysAllocString
VariantClear
SafeArrayDestroy
SafeArrayCreate
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VarR8FromBool
SysFreeString
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SystemTimeToVariantTime
VariantChangeType
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
VariantTimeToSystemTime
VarR8FromCy
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElement
VariantCopyInd
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
UnRegisterTypeLi
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantCopy

dbghelp

MakeSureDirectoryPathExists

advapi32

CryptHashData
LookupAccountSidA
GetUserNameA
CryptDestroyHash
CryptGetHashParam
CryptCreateHash
CryptReleaseContext
OpenProcessToken
RegFlushKey
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
CryptAcquireContextA
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA
RegCloseKey

comdlg32

GetFileTitleA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

psapi

GetModuleFileNameExA

winhttp

WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter
DocumentPropertiesA
OpenPrinterA
ClosePrinter

comctl32

ord17
ImageList_Destroy
ord17

oledlg

ord8

iphlpapi

GetAdaptersInfo

winmm

waveOutPrepareHeader
waveOutUnprepareHeader
waveOutPause
waveOutReset
waveOutClose
waveOutGetNumDevs
waveOutOpen
midiOutUnprepareHeader
midiStreamOpen
midiStreamProperty
midiOutPrepareHeader
midiStreamOut
waveOutRestart
waveOutWrite
midiStreamStop
midiStreamRestart
midiStreamClose
midiOutReset

ws2_32

WSAAsyncSelect
closesocket
send
select
WSAStartup
recvfrom
ioctlsocket
recv
inet_ntoa
WSACleanup
ntohl
accept
getpeername

rasapi32

RasHangUpA
RasGetConnectStatusA

Exports

Exports

go
��
��
ȡע��

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 452KB - Virtual size: 690KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bb661112aa6b2c865e91be2c05493b1

Headers

File Characteristics

Imports

user32

kernel32

ole32

shell32

shlwapi

version

gdi32

gdiplus

wininet

oleaut32

dbghelp

advapi32

comdlg32

psapi

winhttp

winspool.drv

comctl32

oledlg

iphlpapi

winmm

ws2_32

rasapi32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 188KB - Virtual size: 185KB

.data Size: 452KB - Virtual size: 690KB

.rsrc Size: 24KB - Virtual size: 22KB

.reloc Size: 140KB - Virtual size: 138KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 188KB - Virtual size: 185KB

.data
Size: 452KB - Virtual size: 690KB

.rsrc
Size: 24KB - Virtual size: 22KB

.reloc
Size: 140KB - Virtual size: 138KB