89fca880e683981c0a07f77dd14b17c665a92d106d09f4ba8fb7f511200f3241

Sharing

Copy URL Twitter E-mail

General

Target

89fca880e683981c0a07f77dd14b17c665a92d106d09f4ba8fb7f511200f3241
Size

13.6MB
MD5

fa5dc370c355a7d7d6d9353140755674
SHA1

d5c23a588e46ce1b9b0a992b1debd2bdc3f6efb3
SHA256

89fca880e683981c0a07f77dd14b17c665a92d106d09f4ba8fb7f511200f3241
SHA512

a4d5fae2d3ed947dabcdfa04dcaa3abd792dfd2a5e91e47cb4fd46f76b28aa7605920730b423f19c1ebda353227637dada675e0633fa79cb5b1b9121738e7343
SSDEEP

196608:mQJUmxw2jnx1S0Ej7d3quKEWomwybNcCI21yN18yQ7jlJVbUfrMzfJ7tpUnx2KGO:xxDMhmJpi8jlrUfrySnxOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89fca880e683981c0a07f77dd14b17c665a92d106d09f4ba8fb7f511200f3241

Files

89fca880e683981c0a07f77dd14b17c665a92d106d09f4ba8fb7f511200f3241
.exe windows:6 windows x86

c0138f3692c14083bad6b0657fb1e3fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
GetFileInformationByHandle
TerminateThread
VirtualFree
InterlockedExchange
GetEnvironmentVariableA
WriteConsoleW
CreateFileW
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetHandleInformation
GetStringTypeW
GetTimeZoneInformation
LCMapStringW
CompareStringW
GetUserDefaultLangID
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
FindNextFileW
FindFirstFileExW
RtlUnwind
WinExec
lstrlenA
OutputDebugStringW
GetFullPathNameW
CreateProcessA
IsBadReadPtr
GetModuleHandleExA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
GetDriveTypeW
GetFileAttributesExW
MoveFileExW
GetLogicalDrives
GetExitCodeProcess
GetSystemDirectoryA
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
UnmapViewOfFile
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
SearchPathA
GetProfileIntA
GetTickCount
GetTempPathA
GetTempFileNameA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
FindResourceExW
SetErrorMode
lstrcpyA
GetACP
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ExitProcess
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetThreadLocale
GetVolumeInformationA
lstrcmpiA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
CopyFileA
FormatMessageA
LocalFree
GlobalSize
GlobalFree
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
LoadLibraryA
MulDiv
GlobalUnlock
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CompareStringA
MultiByteToWideChar
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetVersionExA
GetCurrentThread
ResumeThread
SetThreadPriority
GetCurrentThreadId
CreateEventA
WaitForSingleObject
SetEvent
LoadLibraryW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
SetLastError
EncodePointer
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
RaiseException
DecodePointer
FindResourceA
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
CloseHandle
GetCurrentDirectoryA
GetConsoleCP

user32

AdjustWindowRectEx
MapWindowPoints
CopyRect
EqualRect
SetWindowLongA
GetClassLongA
GetClassNameA
IsIconic
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollPos
SetScrollRange
GetScrollRange
SetWindowRgn
EnableWindow
GetSystemMetrics
DrawIcon
GetClientRect
LoadIconW
GetDC
GetWindowRect
ShowScrollBar
SetClassLongA
RegisterClassExA
wvsprintfA
DrawStateA
EmptyClipboard
SetClipboardData
GetTopWindow
GetWindow
PostMessageA
SetScrollInfo
InvalidateRect
GetCursorPos
ScreenToClient
GetSysColor
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetWindowLongA
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
MoveWindow
CheckDlgButton
SendDlgItemMessageA
SetWindowTextA
IsDialogMessageA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetDesktopWindow
GetMenuStringA
GetMenuState
InsertMenuA
AppendMenuA
RemoveMenu
SetRectEmpty
OffsetRect
GetKeyNameTextA
MapVirtualKeyA
CharUpperA
InflateRect
IntersectRect
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorA
IsClipboardFormatAvailable
MessageBeep
SetRect
CopyImage
SystemParametersInfoA
DeleteMenu
SetTimer
KillTimer
DestroyIcon
WaitMessage
WindowFromPoint
DestroyMenu
GetMenuItemInfoA
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
TrackMouseEvent
LoadImageW
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
InsertMenuItemA
LoadImageA
UnpackDDElParam
ReuseDDElParam
SetParent
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
SetCursorPos
CopyIcon
FrameRect
UnionRect
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
PostThreadMessageA
GetKeyboardLayout
IsCharLowerA
wsprintfA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetMenuDefaultItem
GetNextDlgGroupItem
DrawFocusRect
SetScrollPos
ScrollWindow
WindowFromDC
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
GetMenuItemCount
IsRectEmpty
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
LoadIconA
EnumDisplayMonitors
OpenClipboard
SendMessageA
GetMessagePos
SetCapture
ReleaseCapture
DialogBoxIndirectParamA
GetCursor
CreateCursor
LoadBitmapA
ShowCursor
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
SetCursor
ClientToScreen
GetWindowRgn
DestroyCursor
CloseClipboard
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
PtInRect
GetParent
LoadCursorW
UnregisterClassA
UnhookWindowsHookEx
GetFocus
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
GetClassInfoExA
GetClassInfoA
CallWindowProcA
DefWindowProcA
GetMessageTime
RegisterWindowMessageA
FillRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxA
IsWindowEnabled
ShowOwnedPopups
PostQuitMessage
CallNextHookEx
SetWindowsHookExA
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem

gdi32

RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetTextAlign
StartDocA
GetObjectA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
PatBlt
CombineRgn
CreateFontIndirectA
SetRectRgn
DPtoLP
GetTextMetricsA
GetTextExtentPoint32A
EndDoc
PtVisible
EndPage
SetAbortProc
CreateCompatibleBitmap
EnumFontFamiliesExA
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
CreateFontA
GetCharABCWidthsFloatA
SetDIBits
CreateBitmap
BitBlt
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteDC
SwapBuffers
SetPixelFormat
ChoosePixelFormat
Arc
StartPage
CreatePalette
DeleteObject

msimg32

GradientFill
TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyExA
RegEnumValueA

shell32

SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

shlwapi

PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
StrFormatKBSizeA

uxtheme

GetThemeSysColor
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
StgCreateDocfile

oleaut32

VariantCopy
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocStringByteLen
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysAllocStringLen
SysAllocString

comdlg32

GetSaveFileNameA
PrintDlgA
ChooseColorA
GetOpenFileNameA
ChooseFontA

comctl32

PropertySheetA
ord5
InitCommonControlsEx
CreateToolbarEx

gdiplus

GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipGetImagePaletteSize
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCloneImage
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipBitmapLockBits

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

imagehlp

SymInitialize
SymCleanup
StackWalk64

wxl_dll

deal_pkpm_layer
deal_pkpm_layer3d
deal_pkpm_ltype
deal_pkpm_color
textopen
lineopen
deal_pkpm_style
_SETLAYERDIMPARA2@4
_CTBAR@20
getSpecialChar
INSERT_BLK
C_GET_MTEXT
DEFINE_BLOCK
WRITE_WMF_FILE
WRITE_EMF_FILE

winauthorize32

_SETPKPM_REGISTRYPATH@12
_TESTDG9@0
_SET_CFG_PATH@8
_GET_REG_DATA@16
_TESTDG5@0
_TESTDG6@0
_TESTDG3@0
_SET_IF_SET_CFG@4
_TESTDG2@0
_CHECK_AUTHORIZE@20
_TESTDG8@16

opengl32

wglDeleteContext
wglMakeCurrent
glAlphaFunc
glBegin
glBindTexture
glBlendFunc
glCallList
glClear
glClearColor
glClearDepth
glClearStencil
glColor4f
wglCreateContext
glColorMask
glColorMaterial
glColorPointer
glCullFace
glDeleteLists
glDeleteTextures
glDepthFunc
glDepthMask
glDisable
glDisableClientState
glDrawArrays
glDrawBuffer
glDrawElements
glDrawPixels
glEdgeFlagPointer
glEnable
glEnableClientState
glEnd
glEndList
glFlush
glGenTextures
glGetError
glGetIntegerv
glHint
glIndexPointer
glInitNames
glLightModelfv
glLightModeli
glLightf
glLightfv
glLineWidth
glLoadIdentity
glLoadName
glMaterialfv
glMatrixMode
glNewList
glNormal3d
glNormalPointer
glOrtho
glPixelStorei
glPointSize
glPolygonMode
glPolygonOffset
glPopMatrix
glPopName
glPushMatrix
glPushName
glRasterPos3f
glReadBuffer
glReadPixels
glRenderMode
glScalef
glSelectBuffer
glShadeModel
glStencilFunc
glStencilOp
glTexCoord2f
glTexCoordPointer
glTexEnvf
glTexParameterf
glTranslatef
glVertex3f
glVertexPointer
glViewport

glu32

gluLookAt
gluPickMatrix
gluPerspective
gluBuild2DMipmaps

rtf_table

CREATE_RTF
PUT_ZT_TEXT
INSERT_TEXT
END_LINE
INSERT_WMF
RTF_CLOSE
INSERT_TILEB
INSERT_TEXT_COLOUR

Sections

.text
Size: 10.9MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 326KB - Virtual size: 43.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0138f3692c14083bad6b0657fb1e3fc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

comdlg32

comctl32

gdiplus

oleacc

imm32

winmm

imagehlp

wxl_dll

winauthorize32

opengl32

glu32

rtf_table

Sections

.text Size: 10.9MB - Virtual size: 10.9MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 326KB - Virtual size: 43.0MB

.trace Size: 7KB - Virtual size: 6KB

_RDATA Size: 79KB - Virtual size: 79KB

.rsrc Size: 84KB - Virtual size: 83KB

.reloc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 10.9MB - Virtual size: 10.9MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 326KB - Virtual size: 43.0MB

.trace
Size: 7KB - Virtual size: 6KB

_RDATA
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 84KB - Virtual size: 83KB

.reloc
Size: 1.1MB - Virtual size: 1.1MB