Moo0 AlwaysOnTop v1[.]24 Installer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Moo0 AlwaysOnTop v1.24 Installer.exe
Size

4.2MB
MD5

dc7fed5382e42201672b6fafb5cdf66e
SHA1

7070383647f20e3cdd772cff7697d166120987df
SHA256

dc76190bafb7ffc801c001896c3483059da7ea29352dbc2d09304ba39ac57742
SHA512

168bda3353aa4804ee605b1b082a8de275885b586daa985f20f3b36526cedff71249f9e326c76944d98c707063b015a65e912f784ad1774612f06339c15c4ec7
SSDEEP

98304:p2QjnXiRgEV6cOteaHvCn9rGPhEhfDUH1sPI5xbklwvXAE7Er2R6:p2EXi6EVtaM5oEhfDUH1FUWvw5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Moo0 AlwaysOnTop v1.24 Installer.exe

Files

Moo0 AlwaysOnTop v1.24 Installer.exe
.exe windows:5 windows x86

ef629a99db243d87d9f236fb13125893

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleFlushClipboard
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
CoGetClassObject
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeSecurity

user32

IsDialogMessageW
SetWindowTextW
MoveWindow
WinHelpW
LoadIconW
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollRange
GetScrollPos
SetScrollPos
EndPaint
BeginPaint
SetActiveWindow
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
DestroyWindow
IsChild
IsMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetLastActivePopup
IsWindowEnabled
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
GetFocus
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
PostQuitMessage
SetRectEmpty
SendDlgItemMessageA
CharUpperW
DestroyMenu
IsRectEmpty
GetWindowThreadProcessId
CopyRect
GetParent
GetMenuInfo
RegisterClassExW
IntersectRect
GetMonitorInfoW
GetSysColorBrush
CreateCursor
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
PostThreadMessageW
UpdateWindow
UnregisterHotKey
MessageBeep
GetNextDlgGroupItem
RegisterHotKey
SetWindowLongW
CreateWindowExW
PostMessageW
InvalidateRgn
IsZoomed
IsIconic
SetWindowRgn
WindowFromPoint
GetForegroundWindow
MonitorFromWindow
MonitorFromRect
GetSystemMetrics
SetRect
EnumDisplayMonitors
PtInRect
GetWindowLongW
LoadCursorW
SetCursor
GetCursorPos
GetAsyncKeyState
OffsetRect
SetTimer
KillTimer
ReleaseDC
GetDC
CopyAcceleratorTableW
CharNextW
ReleaseCapture
GetCapture
SystemParametersInfoW
DefWindowProcW
RedrawWindow
ClientToScreen
RegisterClipboardFormatW
GetWindowRect
RealChildWindowFromPoint
DrawIconEx
GetIconInfo
GetDesktopWindow
wsprintfW
MessageBoxW
DrawMenuBar
GetClientRect
SetCapture
DestroyIcon
SetClipboardViewer
ChangeClipboardChain
InvalidateRect
GetNextDlgTabItem
CreateIconFromResource
CreateIconFromResourceEx
EndDialog
CreateDialogIndirectParamW
InflateRect
GetWindowDC
SendMessageW
SetFocus
SetForegroundWindow
ShowWindow
IsWindow
CheckMenuItem
GetSysColor
EnableWindow
UnregisterClassW
GetMessageW

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysAllocStringLen
VariantChangeType
SysStringLen
OleCreateFontIndirect
SafeArrayDestroy
VariantClear
VariantInit
SysFreeString
SysAllocString

shell32

ord162
SHGetDesktopFolder
ord155
ord716
ord190
SHChangeNotify
DragAcceptFiles
SHFileOperationW
SHGetFileInfoW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
DragQueryFileW
DragFinish
Shell_NotifyIconW
SHBrowseForFolderW
ShellExecuteExW

advapi32

RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid

kernel32

GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetOEMCP
CloseHandle
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
SetProcessWorkingSetSize
GetCurrentProcess
SetPriorityClass
CreateFileW
WriteFile
WaitForSingleObject
EnumResourceTypesW
EnumResourceNamesW
FindResourceExW
SizeofResource
EnumResourceLanguagesW
FreeLibrary
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
LoadLibraryW
LoadResource
LockResource
FreeResource
GetSystemTimeAsFileTime
FindResourceW
GetProcAddress
FormatMessageW
GetEnvironmentStringsW
SetLastError
lstrlenW
ExpandEnvironmentStringsW
SuspendThread
CreateThread
TerminateThread
ResumeThread
GetThreadPriority
SetThreadPriority
GetVolumeInformationW
GetFileAttributesExW
GetFileInformationByHandle
GetFileAttributesW
SetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetDiskFreeSpaceW
SetFileTime
MoveFileExW
VirtualAlloc
VirtualFree
DeleteFileW
RemoveDirectoryW
CopyFileW
GetTempPathW
GetTempFileNameW
EnumSystemCodePagesW
GetCPInfoExW
GetUserDefaultUILanguage
GetSystemDefaultLangID
GetTimeZoneInformation
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LocalFileTimeToFileTime
GetModuleHandleW
GetVersionExW
lstrcpyW
GlobalAddAtomW
ReadFile
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
SetFilePointerEx
FlushFileBuffers
SetEndOfFile
GlobalLock
GlobalUnlock
GetCurrentThreadId
TerminateProcess
GetFileSize
SetFilePointer
GetStdHandle
CreateDirectoryW
GetSystemDirectoryW
HeapSize
GetFullPathNameW
GetCurrentDirectoryW
GetSystemInfo
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
GetACP
OutputDebugStringA
GetModuleHandleA
GetCurrentThread
LoadLibraryExW
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CompareStringA
GetTickCount
GlobalFree
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
EncodePointer
LoadLibraryA
GlobalFindAtomW
MulDiv
GetProfileIntW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GlobalFlags
GetThreadLocale
LockFile
UnlockFile
DuplicateHandle
VirtualProtect
SetErrorMode
GetFileSizeEx
GetFileTime
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
IsValidCodePage
FindFirstFileExW
FreeEnvironmentStringsW
ReadConsoleW
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStringTypeW
LCMapStringW
ExitProcess
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
PeekNamedPipe
GetFileType
GetDriveTypeW
QueryPerformanceFrequency
VirtualQuery
RtlUnwind
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
HeapFree
Sleep
InitializeCriticalSection
SetEnvironmentVariableA
LocalFree
WriteConsoleW

gdi32

EndDoc
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateDCW
SetViewportOrgEx
SetViewportExtEx
GetBkColor
GetWindowExtEx
StartDocW
GetDeviceCaps
SetBkMode
GetStockObject
RestoreDC
SaveDC
SetBkColor
EndPage
SetMapMode
CreateSolidBrush
StretchBlt
GetStretchBltMode
GetTextExtentPoint32W
SetStretchBltMode
SetWindowExtEx
ExtSelectClipRgn
StartPage
SetTextColor
CreateFontIndirectW
BitBlt
GetPaletteEntries
GetCurrentObject
DeleteDC
SetDIBColorTable
GetDIBColorTable
SelectObject
CreateCompatibleDC
CreateDIBSection
GetObjectW
OffsetViewportOrgEx
CreateBitmap
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetRgnBox
ExcludeClipRect
GetClipBox
GetTextColor
GetViewportExtEx
DeleteObject
DPtoLP
GetMapMode

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
StrFormatByteSizeW

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW
URLDownloadToCacheFileW

wininet

InternetGetConnectedState
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef629a99db243d87d9f236fb13125893

Headers

DLL Characteristics

File Characteristics

Imports

ole32

user32

oleaut32

shell32

advapi32

kernel32

gdi32

winspool.drv

comctl32

shlwapi

oledlg

urlmon

wininet

oleacc

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 348KB - Virtual size: 348KB

.data Size: 28KB - Virtual size: 165KB

.gfids Size: 8KB - Virtual size: 8KB

.giats Size: 512B - Virtual size: 4B

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 4KB - Virtual size: 3KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 83KB - Virtual size: 82KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 348KB - Virtual size: 348KB

.data
Size: 28KB - Virtual size: 165KB

.gfids
Size: 8KB - Virtual size: 8KB

.giats
Size: 512B - Virtual size: 4B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 83KB - Virtual size: 82KB