ca64b07b4bcf8dde80aa2310486c235254860eeeb8a08a500856cafbcb9578fa

Sharing

Copy URL Twitter E-mail

General

Target

ca64b07b4bcf8dde80aa2310486c235254860eeeb8a08a500856cafbcb9578fa
Size

665KB
MD5

c06fad19fcfbd9caaa13671dbb32e8b9
SHA1

c8eb5a897ee79e2f56fc49640e831078ac8886d5
SHA256

ca64b07b4bcf8dde80aa2310486c235254860eeeb8a08a500856cafbcb9578fa
SHA512

df9e45c79ddb14cf28be423059f6599677abdb3858a6b741acbc9e79dacd91143408730aeb73f63cd40f6dbf26046bd7bcd86fc442216399843fbae81afc3378
SSDEEP

6144:Oy5zMlm/u7KLrtkcBV94ObS5lrYSCm9+9ghfl0a8tR/HHf1VgS2VdBbRt7T:X5zMk/uWLrtkcBV94Om7Zl0l+VH7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca64b07b4bcf8dde80aa2310486c235254860eeeb8a08a500856cafbcb9578fa

Files

ca64b07b4bcf8dde80aa2310486c235254860eeeb8a08a500856cafbcb9578fa
.dll windows:4 windows x86

0b705c8c995d2452ba5a4d3da2f18549

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegGetValueW
RegOpenKeyA
RegQueryValueExW

kernel32

CloseHandle
ConvertDefaultLocale
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DelayLoadFailureHook
DisableThreadLibraryCalls
EnterCriticalSection
FindResourceW
FreeLibrary
GetACP
GetCPInfo
GetFileSize
GetFileSizeEx
GetLocaleInfoW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProfileStringW
GetStringTypeW
GetSystemDirectoryW
GetTickCount
GetVersion
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
IsBadStringPtrA
IsBadStringPtrW
IsDBCSLeadByte
IsDBCSLeadByteEx
IsValidLocale
LeaveCriticalSection
LoadLibraryW
LoadResource
LockResource
MapViewOfFile
MulDiv
MultiByteToWideChar
RaiseException
ReadFile
ReleaseMutex
ResolveDelayLoadedAPI
UnmapViewOfFile
WaitForSingleObject
WideCharToMultiByte
WriteFile

ntdll

RtlCreateUnicodeStringFromAsciiz
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_assert
_strdup
_wcsicmp
_wcsnicmp
bsearch
free
fwrite
getenv
iswdigit
memchr
memcmp
memmove
qsort
strchr
strcmp
strcpy
strcspn
strlen
strrchr
wcschr
wcslen
wcstol

user32

GetDpiForSystem

win32u

NtGdiAbortDoc
NtGdiAbortPath
NtGdiAddFontMemResourceEx
NtGdiAddFontResourceW
NtGdiAlphaBlend
NtGdiAngleArc
NtGdiArcInternal
NtGdiBeginPath
NtGdiBitBlt
NtGdiCloseFigure
NtGdiCombineRgn
NtGdiComputeXformCoefficients
NtGdiCreateBitmap
NtGdiCreateClientObj
NtGdiCreateCompatibleBitmap
NtGdiCreateCompatibleDC
NtGdiCreateDIBBrush
NtGdiCreateDIBSection
NtGdiCreateDIBitmapInternal
NtGdiCreateEllipticRgn
NtGdiCreateHalftonePalette
NtGdiCreateHatchBrushInternal
NtGdiCreateMetafileDC
NtGdiCreatePaletteInternal
NtGdiCreatePatternBrushInternal
NtGdiCreatePen
NtGdiCreateRectRgn
NtGdiCreateRoundRectRgn
NtGdiCreateSolidBrush
NtGdiDdDDIOpenAdapterFromLuid
NtGdiDeleteClientObj
NtGdiDeleteObjectApp
NtGdiDescribePixelFormat
NtGdiDoPalette
NtGdiDrawStream
NtGdiEllipse
NtGdiEndDoc
NtGdiEndPage
NtGdiEndPath
NtGdiEnumFonts
NtGdiEqualRgn
NtGdiExcludeClipRect
NtGdiExtCreatePen
NtGdiExtCreateRegion
NtGdiExtEscape
NtGdiExtFloodFill
NtGdiExtGetObjectW
NtGdiExtSelectClipRgn
NtGdiExtTextOutW
NtGdiFillPath
NtGdiFillRgn
NtGdiFlattenPath
NtGdiFlush
NtGdiFontIsLinked
NtGdiFrameRgn
NtGdiGetAndSetDCDword
NtGdiGetAppClipBox
NtGdiGetBitmapBits
NtGdiGetBitmapDimension
NtGdiGetBoundsRect
NtGdiGetCharABCWidthsW
NtGdiGetCharWidthInfo
NtGdiGetCharWidthW
NtGdiGetColorAdjustment
NtGdiGetDCObject
NtGdiGetDIBitsInternal
NtGdiGetDeviceCaps
NtGdiGetDeviceGammaRamp
NtGdiGetFontData
NtGdiGetFontFileData
NtGdiGetFontFileInfo
NtGdiGetFontUnicodeRanges
NtGdiGetGlyphIndicesW
NtGdiGetGlyphOutline
NtGdiGetKerningPairs
NtGdiGetNearestColor
NtGdiGetNearestPaletteIndex
NtGdiGetOutlineTextMetricsInternalW
NtGdiGetPath
NtGdiGetPixel
NtGdiGetRandomRgn
NtGdiGetRasterizerCaps
NtGdiGetRealizationInfo
NtGdiGetRegionData
NtGdiGetRgnBox
NtGdiGetSpoolMessage
NtGdiGetSystemPaletteUse
NtGdiGetTextCharsetInfo
NtGdiGetTextExtentExW
NtGdiGetTextFaceW
NtGdiGetTextMetricsW
NtGdiGetTransform
NtGdiGradientFill
NtGdiHfontCreate
NtGdiInitSpool
NtGdiIntersectClipRect
NtGdiInvertRgn
NtGdiLineTo
NtGdiMaskBlt
NtGdiModifyWorldTransform
NtGdiMoveTo
NtGdiOffsetClipRgn
NtGdiOffsetRgn
NtGdiOpenDCW
NtGdiPatBlt
NtGdiPathToRegion
NtGdiPlgBlt
NtGdiPolyDraw
NtGdiPolyPolyDraw
NtGdiPtInRegion
NtGdiPtVisible
NtGdiRectInRegion
NtGdiRectVisible
NtGdiRectangle
NtGdiRemoveFontMemResourceEx
NtGdiRemoveFontResourceW
NtGdiResetDC
NtGdiResizePalette
NtGdiRestoreDC
NtGdiRoundRect
NtGdiSaveDC
NtGdiScaleViewportExtEx
NtGdiScaleWindowExtEx
NtGdiSelectBitmap
NtGdiSelectBrush
NtGdiSelectClipPath
NtGdiSelectFont
NtGdiSelectPen
NtGdiSetBitmapBits
NtGdiSetBitmapDimension
NtGdiSetBoundsRect
NtGdiSetColorAdjustment
NtGdiSetDIBitsToDeviceInternal
NtGdiSetDeviceGammaRamp
NtGdiSetLayout
NtGdiSetMagicColors
NtGdiSetMetaRgn
NtGdiSetPixel
NtGdiSetPixelFormat
NtGdiSetRectRgn
NtGdiSetSystemPaletteUse
NtGdiSetTextJustification
NtGdiSetVirtualResolution
NtGdiStartDoc
NtGdiStartPage
NtGdiStretchBlt
NtGdiStretchDIBitsInternal
NtGdiStrokeAndFillPath
NtGdiStrokePath
NtGdiSwapBuffers
NtGdiTransformPoints
NtGdiTransparentBlt
NtGdiUnrealizeObject
NtGdiUpdateColors
NtGdiWidenPath
NtUserCallHwndParam
NtUserCallOneParam
NtUserSelectPalette
SetDIBits
__wine_get_brush_bitmap_info
__wine_get_file_outline_text_metric
__wine_get_icm_profile

Exports

Exports

AbortDoc
AbortPath
AddFontMemResourceEx
AddFontResourceA
AddFontResourceExA
AddFontResourceExW
AddFontResourceTracking
AddFontResourceW
AngleArc
AnimatePalette
Arc
ArcTo
BeginPath
BitBlt
ByeByeGDI
CancelDC
CheckColorsInGamut
ChoosePixelFormat
Chord
CloseEnhMetaFile
CloseFigure
CloseMetaFile
ColorCorrectPalette
ColorMatchToTarget
CombineRgn
CombineTransform
CopyEnhMetaFileA
CopyEnhMetaFileW
CopyMetaFileA
CopyMetaFileW
CreateBitmap
CreateBitmapIndirect
CreateBrushIndirect
CreateColorSpaceA
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDCW
CreateDIBPatternBrush
CreateDIBPatternBrushPt
CreateDIBSection
CreateDIBitmap
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateEnhMetaFileA
CreateEnhMetaFileW
CreateFontA
CreateFontIndirectA
CreateFontIndirectExA
CreateFontIndirectExW
CreateFontIndirectW
CreateFontW
CreateHalftonePalette
CreateHatchBrush
CreateICA
CreateICW
CreateMetaFileA
CreateMetaFileW
CreatePalette
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateScalableFontResourceA
CreateScalableFontResourceW
CreateSolidBrush
D3DKMTCheckVidPnExclusiveOwnership
D3DKMTCloseAdapter
D3DKMTCreateDCFromMemory
D3DKMTCreateDevice
D3DKMTDestroyDCFromMemory
D3DKMTDestroyDevice
D3DKMTEscape
D3DKMTOpenAdapterFromDeviceName
D3DKMTOpenAdapterFromGdiDisplayName
D3DKMTOpenAdapterFromHdc
D3DKMTOpenAdapterFromLuid
D3DKMTQueryStatistics
D3DKMTSetQueuedLimit
D3DKMTSetVidPnSourceOwner
DPtoLP
DeleteColorSpace
DeleteDC
DeleteEnhMetaFile
DeleteMetaFile
DeleteObject
DescribePixelFormat
DeviceCapabilitiesEx
DeviceCapabilitiesExA
DeviceCapabilitiesExW
DrawEscape
Ellipse
EnableEUDC
EndDoc
EndPage
EndPath
EnumEnhMetaFile
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsA
EnumFontsW
EnumICMProfilesA
EnumICMProfilesW
EnumMetaFile
EnumObjects
EqualRgn
Escape
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtEscape
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
FillPath
FillRgn
FixBrushOrgEx
FlattenPath
FloodFill
FontIsLinked
FrameRgn
FreeImageColorMatcher
GdiAlphaBlend
GdiAssociateObject
GdiCleanCacheDC
GdiComment
GdiConvertAndCheckDC
GdiConvertBitmap
GdiConvertBrush
GdiConvertDC
GdiConvertEnhMetaFile
GdiConvertFont
GdiConvertMetaFilePict
GdiConvertPalette
GdiConvertRegion
GdiConvertToDevmodeW
GdiCreateLocalBitmap
GdiCreateLocalBrush
GdiCreateLocalEnhMetaFile
GdiCreateLocalFont
GdiCreateLocalMetaFilePict
GdiCreateLocalPalette
GdiCreateLocalRegion
GdiDciBeginAccess
GdiDciCreateOffscreenSurface
GdiDciCreateOverlaySurface
GdiDciCreatePrimarySurface
GdiDciDestroySurface
GdiDciDrawSurface
GdiDciEndAccess
GdiDciEnumSurface
GdiDciInitialize
GdiDciSetClipList
GdiDciSetDestination
GdiDeleteLocalDC
GdiDeleteLocalObject
GdiDescribePixelFormat
GdiDllInitialize
GdiDrawStream
GdiEntry13
GdiFlush
GdiGetBatchLimit
GdiGetCharDimensions
GdiGetCodePage
GdiGetLocalBitmap
GdiGetLocalBrush
GdiGetLocalDC
GdiGetLocalFont
GdiGetSpoolMessage
GdiGradientFill
GdiInitSpool
GdiInitializeLanguagePack
GdiIsMetaFileDC
GdiIsMetaPrintDC
GdiIsPlayMetafileDC
GdiPlayDCScript
GdiPlayJournal
GdiPlayScript
GdiRealizationInfo
GdiReleaseLocalDC
GdiSetAttrs
GdiSetBatchLimit
GdiSetPixelFormat
GdiSetServerAttr
GdiSwapBuffers
GdiTransparentBlt
GdiWinWatchClose
GdiWinWatchDidStatusChange
GdiWinWatchGetClipList
GdiWinWatchOpen
GetArcDirection
GetAspectRatioFilterEx
GetBitmapBits
GetBitmapDimensionEx
GetBkColor
GetBkMode
GetBoundsRect
GetBrushOrgEx
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCharABCWidthsFloatW
GetCharABCWidthsI
GetCharABCWidthsW
GetCharWidth32A
GetCharWidth32W
GetCharWidthA
GetCharWidthFloatA
GetCharWidthFloatW
GetCharWidthI
GetCharWidthInfo
GetCharWidthW
GetCharWidthWOW
GetCharacterPlacementA
GetCharacterPlacementW
GetClipBox
GetClipRgn
GetColorAdjustment
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCBrushColor
GetDCOrgEx
GetDCPenColor
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetETM
GetEnhMetaFileA
GetEnhMetaFileBits
GetEnhMetaFileDescriptionA
GetEnhMetaFileDescriptionW
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetEnhMetaFileW
GetFontData
GetFontFileData
GetFontFileInfo
GetFontLanguageInfo
GetFontRealizationInfo
GetFontResourceInfo
GetFontResourceInfoW
GetFontUnicodeRanges
GetGlyphIndicesA
GetGlyphIndicesW
GetGlyphOutline
GetGlyphOutlineA
GetGlyphOutlineW
GetGlyphOutlineWow
GetGraphicsMode
GetICMProfileA
GetICMProfileW
GetKerningPairs
GetKerningPairsA
GetKerningPairsW
GetLayout
GetLogColorSpaceA
GetLogColorSpaceW
GetMapMode
GetMetaFileA
GetMetaFileBitsEx
GetMetaFileW
GetMetaRgn
GetMiterLimit
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetPaletteEntries
GetPath
GetPixel
GetPixelFormat
GetPolyFillMode
GetROP2
GetRandomRgn
GetRasterizerCaps
GetRegionData
GetRelAbs
GetRgnBox
GetStockObject
GetStretchBltMode
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointI
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextExtentPointI
GetTextExtentPointW
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetTextMetricsW
GetTransform
GetViewportExtEx
GetViewportOrgEx
GetWinMetaFileBits
GetWindowExtEx
GetWindowOrgEx
GetWorldTransform
IntersectClipRect
InvertRgn
LPtoDP
LineDDA
LineTo
LoadImageColorMatcherA
LoadImageColorMatcherW
MaskBlt
MirrorRgn
ModifyWorldTransform
MoveToEx
NamedEscape
OffsetClipRgn
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PaintRgn
PatBlt
PathToRegion
Pie
PlayEnhMetaFile
PlayEnhMetaFileRecord
PlayMetaFile
PlayMetaFileRecord
PlgBlt
PolyBezier
PolyBezierTo
PolyDraw
PolyPolygon
PolyPolyline
PolyTextOutA
PolyTextOutW
Polygon
Polyline
PolylineTo
PtInRegion
PtVisible
RealizePalette
RectInRegion
RectVisible
Rectangle
RemoveFontMemResourceEx
RemoveFontResourceA
RemoveFontResourceExA
RemoveFontResourceExW
RemoveFontResourceTracking
RemoveFontResourceW
ResetDCA
ResetDCW
ResizePalette
RestoreDC
RoundRect
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontAlternateGlyphs
ScriptGetFontFeatureTags
ScriptGetFontLanguageTags
ScriptGetFontProperties
ScriptGetFontScriptTags
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptItemize
ScriptItemizeOpenType
ScriptJustify
ScriptLayout
ScriptPlace
ScriptPlaceOpenType
ScriptRecordDigitSubstitution
ScriptShape
ScriptShapeOpenType
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptString_pSize
ScriptString_pcOutChars
ScriptTextOut
ScriptXtoCP
SelectBrushLocal
SelectClipPath
SelectClipRgn
SelectFontLocal
SelectObject
SelectPalette
SetAbortProc
SetArcDirection
SetBitmapBits
SetBitmapDimensionEx
SetBkColor
SetBkMode
SetBoundsRect
SetBrushOrgEx
SetColorAdjustment
SetColorSpace
SetDCBrushColor
SetDCPenColor
SetDIBColorTable
SetDIBits
SetDIBitsToDevice
SetDeviceGammaRamp
SetEnhMetaFileBits
SetFontEnumeration
SetGraphicsMode
SetICMMode
SetICMProfileA
SetICMProfileW
SetLayout
SetMagicColors
SetMapMode
SetMapperFlags
SetMetaFileBitsEx
SetMetaRgn
SetMiterLimit
SetObjectOwner
SetPaletteEntries
SetPixel
SetPixelFormat
SetPixelV
SetPolyFillMode
SetROP2
SetRectRgn
SetRelAbs
SetStretchBltMode
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetVirtualResolution
SetWinMetaFileBits
SetWindowExtEx
SetWindowOrgEx
SetWorldTransform
StartDocA
StartDocW
StartPage
StretchBlt
StretchDIBits
StrokeAndFillPath
StrokePath
SwapBuffers
TextOutA
TextOutW
TranslateCharsetInfo
UnloadNetworkFonts
UnrealizeObject
UpdateColors
UpdateICMRegKey
UpdateICMRegKeyA
UpdateICMRegKeyW
WidenPath
gdiPlaySpoolStream
pfnRealizePalette
pfnSelectPalette
pstackConnect

Sections

.text
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 228B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b705c8c995d2452ba5a4d3da2f18549

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ntdll

ucrtbase

user32

win32u

Exports

Exports

Sections

.text Size: 312KB - Virtual size: 310KB

.data Size: 4KB - Virtual size: 1KB

.rodata Size: 4KB - Virtual size: 3KB

.rdata Size: 80KB - Virtual size: 76KB

.eh_fram Size: 44KB - Virtual size: 42KB

.bss Size: - Virtual size: 228B

.edata Size: 36KB - Virtual size: 33KB

.idata Size: 12KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 16KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 312KB - Virtual size: 310KB

.data
Size: 4KB - Virtual size: 1KB

.rodata
Size: 4KB - Virtual size: 3KB

.rdata
Size: 80KB - Virtual size: 76KB

.eh_fram
Size: 44KB - Virtual size: 42KB

.bss
Size: - Virtual size: 228B

.edata
Size: 36KB - Virtual size: 33KB

.idata
Size: 12KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 16KB

.reloc
Size: 16KB - Virtual size: 12KB