c9b3b9eecaf7b9f6b780b454cc8d3273a8d9fff34a8cdc7bca56c6857ab819f0

Sharing

Copy URL

Twitter E-mail

General

Target

c9b3b9eecaf7b9f6b780b454cc8d3273a8d9fff34a8cdc7bca56c6857ab819f0
Size

369KB
MD5

ef56ee9eb45ed818e6b64e3542257e4a
SHA1

3fbdd38afbf205df921a2761b654b83118dbba1c
SHA256

c9b3b9eecaf7b9f6b780b454cc8d3273a8d9fff34a8cdc7bca56c6857ab819f0
SHA512

04de047d4ae3670ce9abca27cf3651c674adda97a63f32b8bc1ce1cac8540ebd108f7e033b9dac11a953c7ad32d0b62699f88a9753d402e0b58c25875c7444ae
SSDEEP

6144:0iU5NX6fMYrsgcNi7+Wv2qKw9FyEAPxSPqDx2p:+5NKfdcZAbyEoxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9b3b9eecaf7b9f6b780b454cc8d3273a8d9fff34a8cdc7bca56c6857ab819f0

Files

c9b3b9eecaf7b9f6b780b454cc8d3273a8d9fff34a8cdc7bca56c6857ab819f0
.exe windows:6 windows x64

695831b36049df9ad5dc2312ee277639

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeGetTime

msacm32

acmFormatChooseW
acmMetrics

nkm

nkm_close
nkm_test
nkm_led
nkm_open
nkm_query
nkm_mouse_hid
nkm_mouse_hid_abs
nkm_keyboard_hid

kernel32

GetFullPathNameW
CloseHandle
GetCurrentProcessId
GetSystemDirectoryW
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
MulDiv
lstrcpynW
lstrlenW
GetProfileIntW
GetProfileStringW
WriteProfileStringW
GetStdHandle
SetFilePointer
GetFileAttributesW
DebugBreak
OutputDebugStringW
GetLastError
FatalAppExitW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
WaitForMultipleObjects
CreateThread
GetCurrentThreadId
GetModuleFileNameW
lstrcmpiW
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
AllocConsole
SetConsoleTitleW
GetDiskFreeSpaceW
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
GetFileSize
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
WriteFile
GetStartupInfoW
TerminateProcess

user32

KillTimer
EnableWindow
LoadAcceleratorsW
TranslateAcceleratorW
GetSystemMetrics
GetMenu
CreatePopupMenu
DestroyMenu
CheckMenuItem
EnableMenuItem
GetSubMenu
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
TrackPopupMenu
UpdateWindow
SetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
SetWindowTextW
GetClientRect
GetWindowRect
MessageBoxA
MessageBoxW
SetTimer
SetCursor
GetCursorPos
LoadCursorW
LoadIconW
DestroyIcon
LoadImageW
GetWindowTextW
GetSysColor
GetWindowLongPtrW
GetKeyState
SetFocus
IsCharAlphaNumericW
IsCharAlphaW
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamW
IsWindowVisible
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassW
ReleaseCapture
SetCapture
MessageBeep
PostQuitMessage
DefWindowProcW
WaitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
GetAsyncKeyState
wsprintfW
GetDlgItemTextW

gdi32

SetTextColor
GetTextMetricsW
SelectObject
GetStockObject
SetBkColor
DeleteObject
ExtTextOutW
CreateSolidBrush
CreateFontW
PatBlt

comdlg32

GetOpenFileNameW

advapi32

RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey

shell32

ShellExecuteW
Shell_NotifyIconW

ole32

CoTaskMemAlloc
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
MkParseDisplayName
StringFromGUID2

oleaut32

OleCreatePropertyFrame
SysFreeString

vcruntime140d

__std_type_info_destroy_list
__vcrt_LoadLibraryExW
__vcrt_GetModuleHandleW
__vcrt_GetModuleFileNameW
_CxxThrowException
memcmp
memcpy
memset
__std_exception_destroy
wcsrchr
__C_specific_handler_noexcept
__C_specific_handler
__current_exception
__current_exception_context
__std_exception_copy

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

_set_app_type
_initialize_narrow_environment
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_set_fmode
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
_wmakepath_s
_wsplitpath_s
wcscpy_s
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
__setusermatherr
_seh_filter_exe
terminate
__stdio_common_vsprintf_s
strcat_s
strcpy_s
_CrtDbgReportW
_CrtDbgReport
malloc
_callnewh
__stdio_common_vsprintf
__stdio_common_vswprintf_s
__stdio_common_vswprintf
labs
_wtol
_wtof
wcslen
_configure_narrow_argv

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

695831b36049df9ad5dc2312ee277639

Headers

DLL Characteristics

File Characteristics

Imports

winmm

msacm32

nkm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

vcruntime140d

vcruntime140_1d

ucrtbased

Sections

.text Size: 186KB - Virtual size: 186KB

.rdata Size: 125KB - Virtual size: 125KB

.data Size: 14KB - Virtual size: 27KB

.pdata Size: 8KB - Virtual size: 8KB

.idata Size: 12KB - Virtual size: 11KB

.00cfg Size: 512B - Virtual size: 337B

.rsrc Size: 21KB - Virtual size: 20KB

.text
Size: 186KB - Virtual size: 186KB

.rdata
Size: 125KB - Virtual size: 125KB

.data
Size: 14KB - Virtual size: 27KB

.pdata
Size: 8KB - Virtual size: 8KB

.idata
Size: 12KB - Virtual size: 11KB

.00cfg
Size: 512B - Virtual size: 337B

.rsrc
Size: 21KB - Virtual size: 20KB