07f70b074943c3233e443587513149c4b7ec7cd252bed11bece30a2ee0d82d42

Sharing

Copy URL Twitter E-mail

General

Target

07f70b074943c3233e443587513149c4b7ec7cd252bed11bece30a2ee0d82d42
Size

15.0MB
MD5

9cce52dc7b5798cadd5f05ccbfdd1937
SHA1

1e4b3443c0e09a390609ff218e3281160aaf5cd4
SHA256

07f70b074943c3233e443587513149c4b7ec7cd252bed11bece30a2ee0d82d42
SHA512

be0855ecd5aa232c5679c4753d7a5bdb5892766c78916caa33abf8ab8c34dedf00d4f68baf81feb5976915d08fc46aa6260bfbde1d5b72cd42866ad0b6f6f399
SSDEEP

196608:Pap75J4au4YCZZ4mWTaKchJnfphSDzRDclTneYrudRwRMWbadJWN6Vz7UJeVzgCi:SBdRrnGz5aTnVrGwRM7dJWspzbsG8Pk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07f70b074943c3233e443587513149c4b7ec7cd252bed11bece30a2ee0d82d42

Files

07f70b074943c3233e443587513149c4b7ec7cd252bed11bece30a2ee0d82d42
.exe windows:6 windows x86

65ab5d8dc72767480a5e79604ced4ad3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetTempFileNameA
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
SetCurrentDirectoryA
QueryPerformanceFrequency
lstrlenA
ExpandEnvironmentStringsA
InitializeCriticalSectionEx
RtlUnwind
ExitProcess
GetModuleHandleExW
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
SetStdHandle
lstrcmpiA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
GetCurrentDirectoryA
VerifyVersionInfoA
VerSetConditionMask
GetACP
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GetThreadLocale
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetFileType
GetFullPathNameW
HeapQueryInformation
GetStdHandle
SetCurrentDirectoryW
GetCurrentDirectoryW
InitializeCriticalSection
GetDriveTypeW
FindNextFileA
SetEnvironmentVariableW
FindFirstFileA
FindFirstFileExW
FindNextFileW
FindClose
CreateFileW
FileTimeToSystemTime
SearchPathA
GetStringTypeW
CompareStringW
LCMapStringW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
IsValidCodePage
GetEnvironmentStringsW
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
CreateFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeEnvironmentStringsW
SetConsoleCtrlHandler
MoveFileExW
WriteConsoleW
GetEnvironmentVariableA
lstrcmpA
VirtualFree
TerminateThread
GetFileInformationByHandle
GetSystemDefaultLangID
GetVersionExA
GetUserDefaultLangID
GetCurrentThread
ResumeThread
SetThreadPriority
CreateEventA
WaitForSingleObject
InterlockedExchange
SetEvent
CreateProcessA
MapViewOfFile
CloseHandle
CreateFileMappingA
GetModuleFileNameA
GetCurrentProcessId
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetModuleHandleW
OpenFileMappingA
UnmapViewOfFile
GetHandleInformation
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
MultiByteToWideChar
IsBadReadPtr
GetExitCodeProcess
FindResourceExW
GetSystemDirectoryA
GetLogicalDrives
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
GetProfileIntA
GetTickCount
GetWindowsDirectoryA
GetTempPathA
Beep
GetModuleHandleExA
SetErrorMode
GetVolumeInformationA
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
CreateProcessW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
DeleteFileA
LoadLibraryA
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
lstrcpyA

user32

EnableWindow
LoadIconW
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
DialogBoxIndirectParamA
GetCursor
CreateCursor
LoadBitmapA
ShowCursor
GetWindowRgn
DestroyCursor
GetComboBoxInfo
WindowFromDC
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
PostThreadMessageA
ModifyMenuA
CharUpperBuffA
FrameRect
CopyIcon
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetKeyNameTextA
InvertRect
HideCaret
GetIconInfo
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
LoadImageA
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
SetClassLongA
LockWindowUpdate
BringWindowToTop
SetParent
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
MapVirtualKeyA
ToAsciiEx
DestroyWindow
SendMessageA
IsIconic
GetSystemMetrics
GetSystemMenu
DrawIcon
GetClientRect
AppendMenuA
RegisterClassExA
wvsprintfA
GetWindowPlacement
GetKeyboardState
UnregisterClassA
LoadIconA
GetWindowLongA
UnhookWindowsHookEx
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
SetFocus
SetScrollPos
GetScrollPos
GetWindowTextA
GetWindowTextLengthA
GetWindow
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetParent
LoadBitmapW
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
PostMessageA
DefWindowProcA
CallWindowProcA
GetClassInfoA
GetClassInfoExA
IsWindow
IsMenu
IsChild
SetWindowPos
wsprintfA
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgItem
GetDlgCtrlID
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
TrackPopupMenuEx
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
ValidateRect
RedrawWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
GetWindowRect
AdjustWindowRectEx
MessageBoxA
ScreenToClient
MapWindowPoints
GetSysColor
CopyRect
EqualRect
PtInRect
SetWindowLongA
GetClassLongA
GetClassNameA
GetTopWindow
GetLastActivePopup
SetWindowsHookExA
CallNextHookEx
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
MoveWindow
CheckDlgButton
SendDlgItemMessageA
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
DrawStateA
InvalidateRect
FillRect
GetWindowThreadProcessId
GetMessageA
TranslateMessage
GetCursorPos
PostQuitMessage
ShowOwnedPopups
SetCursor
SetWindowContextHelpId
MapDialogRect
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetDC
GetWindowDC
ReleaseDC
ClientToScreen
DestroyMenu
GetMenuItemInfoA
InflateRect
SystemParametersInfoA
GetSysColorBrush
LoadCursorA
RealChildWindowFromPoint
CopyImage
SetRectEmpty
OffsetRect
GetAsyncKeyState
GetDialogBaseUnits
SetLayeredWindowAttributes
LoadCursorW
EnumDisplayMonitors
DeleteMenu
SetTimer
KillTimer
DestroyIcon
CharUpperA
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
CharNextA
CopyAcceleratorTableA
InvalidateRgn
SetRect
IntersectRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
TrackMouseEvent
LoadImageW
CreatePopupMenu
GetMenuDefaultItem
IsZoomed
LoadMenuW
SetWindowRgn
NotifyWinEvent
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
GetKeyboardLayout

gdi32

SwapBuffers
SetPixelFormat
ChoosePixelFormat
SetAbortProc
EndPage
GetViewportOrgEx
GetWindowOrgEx
PtInRegion
DeleteDC
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
CreateFontA
RoundRect
SetPixelV
SetDIBits
StartPage
OffsetRgn
LPtoDP
SetDIBColorTable
StretchBlt
SetPixel
GetDIBits
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
CreateDIBSection
CreateRoundRectRgn
EnumFontFamiliesExA
GetCharABCWidthsFloatA
DPtoLP
SetRectRgn
PatBlt
EndDoc
CombineRgn
GetRgnBox
GetTextColor
GetBkColor
Rectangle
GetTextCharsetInfo
EnumFontFamiliesA
CreateRectRgnIndirect
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsA
GetTextExtentPoint32A
CreateFontIndirectA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
CopyMetaFileA
CreateDCA
GetDeviceCaps
StartDocA
SetTextAlign
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
CreateBitmap
SetBkColor
SetTextColor
GetObjectA
SetBkMode
SelectPalette
SelectObject
CreateSolidBrush
DeleteObject
GetStockObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
GetTextFaceA
PtVisible
Arc
GetMapMode
LineTo
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect

msimg32

GradientFill
TransparentBlt
AlphaBlend

shlwapi

PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
PathStripToRootA
PathIsUNCA

uxtheme

IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetThemePartSize

oledlg

ord8

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDrawImageI
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

wxl_dll

deal_pkpm_ltype
deal_pkpm_layer3d
deal_pkpm_layer
textopen
C_GET_MTEXT
deal_pkpm_style
getSpecialChar
WRITE_WMF_FILE
WRITE_EMF_FILE
DEFINE_BLOCK
INSERT_BLK
_SETLAYERDIMPARA2@4
lineopen
_CTBAR@20
deal_pkpm_color

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumValueA
RegEnumKeyExA

ole32

CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoInitializeEx
CoCreateGuid
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleLockRunning
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
OleCreateMenuDescriptor
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoDisconnectObject

oleaut32

VariantInit
VariantClear
VariantChangeType
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocStringByteLen
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
SysAllocStringLen
SysFreeString

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetDesktopFolder
DragQueryFileA
DragFinish
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHAppBarMessage

comctl32

PropertySheetA
InitCommonControlsEx
ord5
CreateToolbarEx

comdlg32

GetOpenFileNameA
ChooseColorA
PrintDlgA
GetSaveFileNameA
ChooseFontA

winauthorize32

_TESTDG1@0
_TESTDG2@0
_TESTDG3@0
_TESTDG4@0
_SET_IF_SET_CFG@4
_TESTDG5@0
_TESTDG0@20
_TESTDG7@0
_TESTDG8@16
_SET_CFG_PATH@8
_TESTDG9@0
_SETPKPM_REGISTRYPATH@12
_GET_REG_DATA@16
_TESTDG6@0

sts_dim

CNMenuDLG

steel_sect

_WRITE_PK_FILE_DATA@8
_GET_PROGRAM_RUN_PATH@12
_GET_STS_XG_TYPE@20
_SET_IF_CODE2013@4
InquireSteelSection
_GUI_STS_XG_TYPE@28
_RELOAD_GHXG@0
_GENERATE_CWHXG_LIB@0

sts_gj_tool

_GJ_SIMPLEBEAMDESN@0
_CONTINUE_BEAM_DESN_TOOL@0
_GJ_COLJDJG@0
_GJ_BEAMJDJG@0
_GJ_COMPBEAMDESN_NEW@4
_GJ_COLDESN@0
_GJ_ANTIWINCOLDESN@0
_SET_IF_CWHXG_RUN@4
PK_DESN_COMB_DEF
_GET_IF_CWHXG_RUN@4
_GET_STS_VER_CHAR@12
_CPURLIN_DESN_DLL@4
_CWALLBEAM_DESN_DLL@4
_GET_NOW_PATH@12
_GJ_FWLBEAMDESN@0
_GJ_BEAMDESN@0

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

stdalgorf

_PINPOL_R4_DSTC@28

imagehlp

SymCleanup
SymInitialize
StackWalk64

cfgpointer

m_pCfg

opengl32

wglDeleteContext
glAlphaFunc
glBegin
glTexCoordPointer
wglCreateContext
glStencilOp
glStencilFunc
glShadeModel
glSelectBuffer
glScalef
glRotatef
wglMakeCurrent
glBindTexture
glRenderMode
glReadPixels
glReadBuffer
glRasterPos3f
glPushName
glPushMatrix
glPopName
glPopMatrix
glPolygonOffset
glPolygonMode
glPointSize
glPixelStorei
glOrtho
glNormalPointer
glNormal3d
glNewList
glMatrixMode
glMaterialfv
glLoadName
glLoadIdentity
glLineWidth
glLightfv
glLightf
glLightModeli
glLightModelfv
glInitNames
glIndexPointer
glHint
glGetIntegerv
glGetError
glGenTextures
glFlush
glEndList
glEnd
glTexEnvf
glEnableClientState
glEnable
glEdgeFlagPointer
glDrawPixels
glTexParameterf
glTranslatef
glDrawElements
glVertex3f
glDrawBuffer
glDrawArrays
glDisableClientState
glDisable
glVertexPointer
glViewport
glDepthMask
glColorPointer
glColorMaterial
glColorMask
glBlendFunc
glDepthFunc
glDeleteTextures
glDeleteLists
glCullFace
glCallList
glColor4f
glClearStencil
glClearDepth
glClear
glClearColor
glTexCoord2f

glu32

gluPickMatrix
gluPerspective
gluLookAt
gluBuild2DMipmaps

Sections

.text
Size: 10.7MB - Virtual size: 10.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 52.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65ab5d8dc72767480a5e79604ced4ad3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

shlwapi

uxtheme

oledlg

gdiplus

wxl_dll

advapi32

ole32

oleaut32

winspool.drv

shell32

comctl32

comdlg32

winauthorize32

sts_dim

steel_sect

sts_gj_tool

oleacc

imm32

winmm

stdalgorf

imagehlp

cfgpointer

opengl32

glu32

Sections

.text Size: 10.7MB - Virtual size: 10.7MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 1.0MB - Virtual size: 52.1MB

.trace Size: 8KB - Virtual size: 8KB

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 1.0MB - Virtual size: 1.0MB

.text
Size: 10.7MB - Virtual size: 10.7MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 1.0MB - Virtual size: 52.1MB

.trace
Size: 8KB - Virtual size: 8KB

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 1.0MB - Virtual size: 1.0MB