0e180dcfa63b4b17f39b0aaf56434cb6bb047ae3d9da04ddc5e1feb99549a12a

Sharing

Copy URL

Twitter E-mail

General

Target

0e180dcfa63b4b17f39b0aaf56434cb6bb047ae3d9da04ddc5e1feb99549a12a
Size

3.7MB
MD5

e11ea4e57193d0062859b11d2a7295c1
SHA1

a8dd61f9c295316dc85d238a318729b46a4457a2
SHA256

0e180dcfa63b4b17f39b0aaf56434cb6bb047ae3d9da04ddc5e1feb99549a12a
SHA512

e0bfcba39e8a6195321a55b3ac6271d1b9b7ffc9119f8932ba1a88c484d18536e7606b67e9e2e3c2dffb7938df6e07912cc07f475cbffcf98b39241bcc291744
SSDEEP

49152:zUaHxKJqLB0vB+MbQm6QP8nYFlaQdyt1+sWuYyyeZVZBaUEnephV5D+yxtuqFt55:QD2BG6QPFRK+d4yepUhep5DRrht5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e180dcfa63b4b17f39b0aaf56434cb6bb047ae3d9da04ddc5e1feb99549a12a

Files

0e180dcfa63b4b17f39b0aaf56434cb6bb047ae3d9da04ddc5e1feb99549a12a
.exe windows:5 windows x86

ff5e8757202fa1104f398ab9e5001b96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesW
DecodePointer
RaiseException
SetFilePointer
GetPrivateProfileIntW
GetExitCodeThread
CopyFileW
GetTickCount
GetFileAttributesW
DeleteFileW
CreateThread
lstrcpyW
Sleep
TerminateThread
CreateEventW
SetEvent
GetPrivateProfileSectionW
InterlockedExchange
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateMutexW
WaitForSingleObject
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
ReadFile
CreateProcessW
GetStartupInfoW
CreatePipe
GetLastError
lstrcatW
lstrlenW
lstrcpynW
FindNextFileW
GetLocalTime
CloseHandle
GetFileSize
CreateFileW
GetModuleFileNameW
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
FindClose
FindFirstFileW
MultiByteToWideChar
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
WideCharToMultiByte
GetTempPathW
SetEndOfFile
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
GetConsoleMode
GetFileType
GetModuleHandleExW
ExitThread
GetSystemInfo
GetFileAttributesExW
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
OutputDebugStringW
TryEnterCriticalSection
GetCurrentThreadId
FormatMessageW
QueryPerformanceCounter
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
ExitProcess
GetACP
MulDiv
FreeResource
GlobalAlloc
WriteFile
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
LocalFree
GetCurrentProcessId
lstrcmpiW
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
GetCurrentProcess
ResetEvent
SetThreadPriority
GetStdHandle
VirtualQuery
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetCurrentThread
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
VirtualAlloc
VirtualFree
VirtualProtect
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList

user32

MoveWindow
UnregisterClassW
GetWindowRect
IsZoomed
PostQuitMessage
DestroyWindow
GetForegroundWindow
SetWindowTextW
IsWindowVisible
PostMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
IsWindow
SetWindowPos
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
GetCursorPos
ScreenToClient
MapWindowPoints
GetSysColor
IntersectRect
UnionRect
OffsetRect
IsRectEmpty
PtInRect
SetForegroundWindow
SetWindowLongW
GetParent
GetWindow
LoadImageW
MonitorFromWindow
GetMonitorInfoW
SetWindowRgn
MessageBoxW
SetCursor
InflateRect
LoadCursorW
wsprintfW
DefWindowProcW
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
EnableWindow
GetSystemMetrics
SetPropW
GetPropW
UpdateWindow
IsWindowEnabled
CharPrevW
DrawTextW
FillRect
SetRect
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
ClientToScreen
UpdateLayeredWindow
GetWindowRgn
EqualRect
GetWindowTextW
GetWindowTextLengthW
wsprintfA
DrawTextA
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
DrawIconEx
GetQueueStatus
CallMsgFilterW
MsgWaitForMultipleObjectsEx
PeekMessageW
WaitMessage
ShowWindow
GetWindowPlacement
IsIconic
FindWindowW
SendMessageW
KillTimer
SetTimer
GetWindowLongW

gdi32

SaveDC
CloseEnhMetaFile
CreateEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
GetTextMetricsW
SetWindowOrgEx
CreateRoundRectRgn
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateSolidBrush
GetCharABCWidthsW
RestoreDC
GetTextExtentPoint32W
LineTo
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
RemoveFontMemResourceEx
SetStretchBltMode
SetTextColor
GetObjectA
AddFontMemResourceEx
GetStockObject
GetDeviceCaps
CreatePen
GetClipBox
Rectangle
CreateDIBSection
GetObjectW
CreateCompatibleDC
SetDIBColorTable
SelectObject
DeleteDC
DeleteObject
MoveToEx
TextOutW
GdiFlush
CreateRectRgn
PtInRegion
CreatePatternBrush
GetTextExtentPointA
GetBitmapBits
SetBitmapBits
CreateFontIndirectW
CreateDIBitmap
StretchBlt
BitBlt
CreateCompatibleBitmap

comdlg32

GetOpenFileNameW

advapi32

FreeSid
CheckTokenMembership
AllocateAndInitializeSid

shell32

SHGetSpecialFolderPathW
SHFileOperationW
DragFinish
SHGetPathFromIDListW
ShellExecuteW
DragAcceptFiles
DragQueryFileW
SHBrowseForFolderW

ole32

CoCreateGuid
CoUninitialize
OleInitialize
CoInitialize
CoCreateInstance
OleLockRunning
CLSIDFromProgID
CLSIDFromString
ReleaseStgMedium
CreateStreamOnHGlobal
OleDuplicateData
DoDragDrop
OleUninitialize

shlwapi

UrlApplySchemeW
ord156
PathFileExistsW
PathIsDirectoryW
PathCreateFromUrlW
PathAppendW

gdiplus

GdipCloneBrush
GdipDrawImageI
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDisposeImage
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdiplusStartup
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillPath
GdipFillRectangleI
GdipCreatePath
GdipDeletePath
GdipAddPathLine
ord1
GdipDeleteGraphics
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCreateFromHDC
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipDrawRectangleI
GdipDrawPath

superocr

??1tagSpeakType@@QAE@XZ
?txLongAudioToText@CPubData@PubData@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00AAM1@Z
?txSpeechToText@CPubData@PubData@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00AAM1@Z
?TextTransLate@CPubData@PubData@@QAEHAAU_TRANSLATE@@AAU_RETURNTRAN@@@Z
??0tagSpeakDemo@@QAE@ABU0@@Z
??1tagSpeakDemo@@QAE@XZ
??0tagBkmusic@@QAE@ABU0@@Z
??1tagBkmusic@@QAE@XZ
?UrllibDownLoadFileW_lib@CPubData@PubData@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0P6AHPAXNNNN@Z@Z
??1CPubData@PubData@@QAE@XZ
??0CPubData@PubData@@QAE@XZ
??0tagSpeakType@@QAE@ABU0@@Z
??1tagSpeakList@@QAE@XZ

libzplay

ord1

urlmon

URLDownloadToFileW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winmm

timeGetTime
mciSendCommandW
mciGetErrorStringW

ws2_32

WSAStartup
gethostname
gethostbyname

oleaut32

SysFreeString
VariantInit
VariantClear
SysAllocString

comctl32

ord17
_TrackMouseEvent
InitCommonControlsEx

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

Sections

.text
Size: 919KB - Virtual size: 918KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff5e8757202fa1104f398ab9e5001b96

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

gdiplus

superocr

libzplay

urlmon

version

winmm

ws2_32

oleaut32

comctl32

imm32

Sections

.text Size: 919KB - Virtual size: 918KB

.rdata Size: 211KB - Virtual size: 211KB

.data Size: 17KB - Virtual size: 23KB

.gfids Size: 3KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 21B

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 58KB - Virtual size: 57KB

.text
Size: 919KB - Virtual size: 918KB

.rdata
Size: 211KB - Virtual size: 211KB

.data
Size: 17KB - Virtual size: 23KB

.gfids
Size: 3KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 21B

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 58KB - Virtual size: 57KB