c9c4338a6e610935143475dc18b81773c2009d8729ddccdf1301efeedbd99cc3

Sharing

Copy URL Twitter E-mail

General

Target

c9c4338a6e610935143475dc18b81773c2009d8729ddccdf1301efeedbd99cc3
Size

9.1MB
MD5

ff89170364efe708f732859582ad957a
SHA1

9df8d89ec17fbf39065e7866dab8fb3bd9fe87c3
SHA256

c9c4338a6e610935143475dc18b81773c2009d8729ddccdf1301efeedbd99cc3
SHA512

9054d1b20697f125e1d4a06a5c7834ac529f2bd5f3c28cea1119369db4e8411de649992af1c3b496f1174defc0d6c7247f7b07a401160a37ecd4eac2c47e645c
SSDEEP

196608:mkY6ZrUzSV6vqwLfbd7gyA7dgbKJsv6tWKFdu9CIU3ajo:O9B8yyJsv6tWKFdu9Cr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9c4338a6e610935143475dc18b81773c2009d8729ddccdf1301efeedbd99cc3

Files

c9c4338a6e610935143475dc18b81773c2009d8729ddccdf1301efeedbd99cc3
.exe windows:5 windows x86

2f0bface991a705360b13807c6dcbbdd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
WriteConsoleW
GetStringTypeW
LCMapStringW
IsValidLocale
ReadConsoleW
GetExitCodeProcess
CreateProcessA
GetConsoleMode
GetTimeZoneInformation
IsProcessorFeaturePresent
IsDebuggerPresent
ExitThread
AreFileApisANSI
GetModuleHandleExW
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
OpenProcess
CheckRemoteDebuggerPresent
GetUserDefaultLangID
CreateProcessW
ExpandEnvironmentStringsW
IsValidLanguageGroup
IsValidCodePage
GetStdHandle
HeapQueryInformation
HeapSize
VirtualQuery
SetStdHandle
SetFileAttributesW
GetCommandLineA
GetConsoleCP
VerSetConditionMask
GetWindowsDirectoryA
lstrcpyA
GetACP
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
InterlockedExchange
GlobalFindAtomA
FindResourceA
GlobalDeleteAtom
FreeResource
DecodePointer
EncodePointer
GlobalFlags
GetVolumeInformationA
LoadLibraryA
lstrcmpiA
UnlockFile
SetFilePointer
LockFile
GetFullPathNameA
GetFileSize
CreateFileA
GlobalAddAtomA
GetVersion
GlobalGetAtomNameA
lstrcmpA
InterlockedIncrement
CompareStringA
GetModuleHandleA
InterlockedDecrement
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CopyFileA
FormatMessageA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
GetDriveTypeW
lstrcmpW
GetVolumeInformationW
lstrlenA
ExitProcess
FindNextFileW
FindFirstFileExW
GetSystemDirectoryW
CreateSemaphoreW
ReleaseSemaphore
MoveFileExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WriteFile
SetFilePointerEx
SetEndOfFile
ReadFile
GetFileType
FlushFileBuffers
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
MoveFileW
CopyFileW
DeviceIoControl
RemoveDirectoryW
GetLongPathNameW
GetLogicalDrives
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileW
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
GetFileAttributesW
CreateFileW
GetUserDefaultUILanguage
GetCurrencyFormatW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
ResetEvent
VirtualFree
VirtualAlloc
CreateMutexW
ReleaseMutex
GetLocaleInfoW
GetLocalTime
GetSystemTime
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleW
GetModuleFileNameW
GetStartupInfoW
LoadLibraryExW
GetProcAddress
FreeLibrary
SetErrorMode
WaitForMultipleObjects
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateThread
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
DuplicateHandle
OutputDebugStringW
OutputDebugStringA
CreateEventW
WaitForSingleObject
SetEvent
GetCurrentProcessId
GetCommandLineW
GetUserDefaultLCID
CompareStringW
FormatMessageW
GetVersionExW
ResumeThread
CreateThread
MultiByteToWideChar
GetVersionExA
GetSystemInfo
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
FindNextFileA
FindFirstFileA
DeleteFileA
RemoveDirectoryA
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
FindResourceW
GetModuleFileNameA
CloseHandle
FindClose
SizeofResource
LoadResource
Sleep
InitializeCriticalSectionAndSpinCount
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
LocalFree
EnumSystemLocalesW
LockResource

user32

WaitMessage
PostThreadMessageA
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
GetKeyNameTextA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MapVirtualKeyA
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
IntersectRect
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
InvalidateRect
DeleteMenu
SetCursor
ShowOwnedPopups
CopyImage
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
CopyAcceleratorTableA
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetKeyboardLayout
PostQuitMessage
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetTopWindow
GetClassLongA
MessageBoxA
TranslateMessage
SetCursorPos
SetRect
SetParent
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
LockWindowUpdate
SetClassLongA
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
FrameRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
IsIconic
DestroyAcceleratorTable
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
FillRect
DispatchMessageW
PeekMessageW
PostMessageW
DefWindowProcW
RegisterClassW
UnregisterClassW
CreateWindowExW
DestroyWindow
GetQueueStatus
MsgWaitForMultipleObjectsEx
SetTimer
KillTimer
GetWindowLongW
SetWindowLongW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
CharNextExA
SystemParametersInfoW
GetSystemMenu
EnableMenuItem
GetClipboardFormatNameW
GetMessageExtraInfo
CreateIconIndirect
CreateCursor
SetMenuItemInfoW
MapVirtualKeyW
ToUnicode
ToAscii
SetCaretPos
DestroyCaret
CreateCaret
RegisterWindowMessageW
RegisterClipboardFormatW
ChangeClipboardChain
SetClipboardViewer
GetMonitorInfoW
ChildWindowFromPointEx
RegisterClassExW
GetClassInfoW
GetKeyboardLayoutList
GetAncestor
SetWindowTextW
FlashWindowEx
SendMessageW
GetCaretBlinkTime
GetDC
ReleaseDC
GetSystemMetrics
GetSysColor
SetWindowRgn
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
SendMessageA
EnableWindow
IsWindowEnabled
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetSysColorBrush
LoadCursorA
GetWindowTextA
GetWindowTextLengthA
GetMessageA
DispatchMessageA
PeekMessageA
IsWindowVisible
IsDialogMessageA
SetWindowLongA
SendDlgItemMessageA
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
IsWindow
GetScrollPos
SetScrollPos
SetFocus
RealChildWindowFromPoint
GetWindow
GetClassNameA
GetDesktopWindow
PtInRect
ClientToScreen
GetWindowRect
SetWindowTextA
GetFocus
GetDlgCtrlID
CharUpperA
DestroyIcon
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow

gdi32

GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
EnumFontFamiliesA
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextExtentPoint32W
GetTextFaceA
SetROP2
SetPolyFillMode
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetTextMetricsA
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32A
CreateFontIndirectA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
SetWorldTransform
SetTextAlign
SetPaletteEntries
ExcludeClipRect
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
CombineRgn
CreateCompatibleDC
CreateRectRgn
DeleteDC
DeleteObject
GetRegionData
SelectClipRgn
SelectObject
CreateDIBSection
GdiFlush
CopyMetaFileA
CreateDCA
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetObjectA
BitBlt
CreateHatchBrush
CreatePen
CreatePatternBrush
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
CreateDCW
EnumFontFamiliesExW
CreateFontIndirectW
GetFontData
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
GetTextMetricsW
GetObjectW
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetGlyphOutlineW
GetOutlineTextMetricsW
GetCharABCWidthsI
ExtTextOutW
GetTextFaceW
CreateSolidBrush
Escape

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
GetLengthSid
FreeSid
CopySid
OpenProcessToken
RegQueryValueExA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetServiceObjectSecurity
QueryServiceStatus
QueryServiceObjectSecurity
OpenServiceA
OpenSCManagerA
DeleteService
ControlService
CloseServiceHandle
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyExA
RegCloseKey
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

SHBrowseForFolderW
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHGetFileInfoA
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
StrFormatKBSizeA

uxtheme

IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
GetWindowTheme
GetThemeSysColor

ole32

RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateStreamOnHGlobal
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
CoGetMalloc
OleInitialize
OleUninitialize
RegisterDragDrop

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantChangeType
VarBstrFromDate
VariantInit
SysAllocString
SysAllocStringLen
SysFreeString

ws2_32

WSAAsyncSelect

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImagePalette
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipBitmapUnlockBits
GdipAlloc
GdipFree
GdiplusStartup
GdipGetImagePixelFormat
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageWidth

imm32

ImmGetContext
ImmGetOpenStatus
ImmGetDefaultIMEWnd
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmReleaseContext

winmm

PlaySoundW
PlaySoundA

opengl32

wglCreateContext
wglDeleteContext
wglGetCurrentContext
wglGetCurrentDC
wglGetProcAddress
wglMakeCurrent
wglShareLists
glGetError
glGetIntegerv
glGetString

Exports

Exports

z_adler32
z_adler32_combine
z_adler32_combine64
z_compress
z_compress2
z_compressBound
z_crc32
z_crc32_combine
z_crc32_combine64
z_deflate
z_deflateBound
z_deflateCopy
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_deflateParams
z_deflatePrime
z_deflateReset
z_deflateSetDictionary
z_deflateSetHeader
z_deflateTune
z_get_crc_table
z_inflate
z_inflateCopy
z_inflateEnd
z_inflateGetHeader
z_inflateInit2_
z_inflateInit_
z_inflateMark
z_inflatePrime
z_inflateReset
z_inflateReset2
z_inflateSetDictionary
z_inflateSync
z_inflateSyncPoint
z_inflateUndermine
z_uncompress
z_zError
z_zlibCompileFlags
z_zlibVersion

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f0bface991a705360b13807c6dcbbdd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

ws2_32

oleacc

gdiplus

imm32

winmm

opengl32

Exports

Exports

Sections

.text Size: 6.2MB - Virtual size: 6.2MB

.rdata Size: 2.4MB - Virtual size: 2.4MB

.data Size: 59KB - Virtual size: 94KB

.qtmetad Size: 512B - Virtual size: 272B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 400KB - Virtual size: 399KB

.text
Size: 6.2MB - Virtual size: 6.2MB

.rdata
Size: 2.4MB - Virtual size: 2.4MB

.data
Size: 59KB - Virtual size: 94KB

.qtmetad
Size: 512B - Virtual size: 272B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 400KB - Virtual size: 399KB