25f266dcd4c0f2d21b45127f6219aff40f2970094743524fd9fd5b0db2f3bea7

Sharing

Copy URL Twitter E-mail

General

Target

25f266dcd4c0f2d21b45127f6219aff40f2970094743524fd9fd5b0db2f3bea7
Size

4.2MB
MD5

4495eb106b7dba5896b9712d40aae20a
SHA1

a01d2af88fd39d33e9c60a56a70723167705a7e7
SHA256

25f266dcd4c0f2d21b45127f6219aff40f2970094743524fd9fd5b0db2f3bea7
SHA512

6c28b1e52fbaff132144c1bbbaa3b27525a1082ba78e08eb497434006474e43a5f719fac03111c509e5e8ace43bd85421f2deb466715f765c5cceb00b17dfd10
SSDEEP

98304:U9IlLS2OSe3dXugyIQ3NDz4Kqck06EvkV+LGa3A94+9tWRB:gIZS2ie9HQMP3A94so

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25f266dcd4c0f2d21b45127f6219aff40f2970094743524fd9fd5b0db2f3bea7

Files

25f266dcd4c0f2d21b45127f6219aff40f2970094743524fd9fd5b0db2f3bea7
.exe windows:6 windows x86

bf92c4fd35b5f659dfcbe432a14dfd63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Reenumerate_DevNode
CM_Locate_DevNodeW

chinesefontparser

?ConvertChar2Lines@CFont2Lines@@QAEXPADHHH@Z
?ZoomOffset@CFont2Lines@@QAEXNNNN@Z
?g_font2lines@@3VCFont2Lines@@A
?RotateAngle@CFont2Lines@@QAEXNH@Z

libusb0

usb_bulk_read
usb_interrupt_write
usb_interrupt_read
usb_control_msg
usb_set_configuration
usb_claim_interface
usb_strerror
usb_init
usb_find_busses
usb_find_devices
usb_get_busses
usb_bulk_setup_async
usb_submit_async
usb_reap_async
usb_free_async
usb_bulk_write
usb_close
usb_open

kernel32

GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WaitForSingleObjectEx
GetStdHandle
GetFileType
SetStdHandle
ResetEvent
VirtualQuery
VirtualAlloc
IsProcessorFeaturePresent
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
GetSystemInfo
LocalUnlock
LocalLock
SearchPathW
GetProfileIntW
GetTempPathW
GetTickCount
VerifyVersionInfoW
WriteConsoleW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
GetCurrentDirectoryW
SetErrorMode
lstrcpyW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
GetStringTypeExW
MoveFileW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFileSize
FlushFileBuffers
GlobalGetAtomNameW
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLCID
ReplaceFileW
GetTempFileNameW
GetFullPathNameW
GetDiskFreeSpaceW
CompareStringA
GetCurrentThread
GetVersionExW
ResumeThread
SuspendThread
SetThreadPriority
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
UnhandledExceptionFilter
lstrcmpA
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
FreeLibrary
GetCurrentThreadId
EncodePointer
OutputDebugStringA
FormatMessageW
MulDiv
LocalFree
GlobalSize
SetLastError
GetVersion
MultiByteToWideChar
LoadLibraryW
CreateMutexW
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
WideCharToMultiByte
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
ReadDirectoryChangesW
GetExitCodeThread
CreateThread
CreateFileW
CopyFileW
UnmapViewOfFile
TerminateThread
CloseHandle
FindNextFileW
FindFirstFileW
FindClose
GetSystemDirectoryW
SetFileAttributesW
DeleteFileW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
Sleep
CreateEventW
WaitForSingleObject
SetEvent
FindResourceW
SizeofResource
LockResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
SetConsoleCtrlHandler
QueryPerformanceFrequency

user32

CopyIcon
DrawFrameControl
DrawEdge
SetClassLongW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
DrawIconEx
GetMenuDefaultItem
LockWindowUpdate
GetDCEx
UnionRect
CreateMenu
PostThreadMessageW
WindowFromDC
InSendMessage
GetTabbedTextExtentW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
TrackMouseEvent
GetDialogBaseUnits
GetAsyncKeyState
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
CharUpperW
SetCursorPos
SetParent
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
IsRectEmpty
SetWindowRgn
DrawIcon
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageW
SystemParametersInfoW
GetMenuItemInfoW
SendDlgItemMessageA
MapVirtualKeyW
GetKeyNameTextW
GetDesktopWindow
EndDialog
CreateDialogIndirectParamW
SetRectEmpty
IsZoomed
SetRect
GetWindowThreadProcessId
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
RegisterClipboardFormatW
GetClassLongW
PtInRect
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
SetMenu
GetMenu
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
ScrollWindowEx
IsWindowEnabled
SetFocus
GetDlgCtrlID
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
SendMessageW
PostMessageW
UnregisterClassW
GetNextDlgTabItem
GetActiveWindow
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
IsWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetFocus
WaitMessage
IsClipboardFormatAvailable
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
GetDoubleClickTime
CharUpperBuffW
GetWindowRgn
IntersectRect
EndPaint
BeginPaint
GetWindowDC
MonitorFromRect
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GetUpdateRect
EnumChildWindows
GetClassNameW
SendNotifyMessageW
EnableWindow
LoadMenuW
DestroyMenu
GetSubMenu
DrawMenuBar
TrackPopupMenuEx
DrawStateW
GetDC
ReleaseDC
InvalidateRect
GetClientRect
GetWindowRect
SetCursor
ClientToScreen
WindowFromPoint
GetSysColor
DrawFocusRect
FillRect
FrameRect
CopyRect
InflateRect
OffsetRect
GetWindowLongW
GetParent
DestroyCursor
DestroyIcon
LoadImageW
CreateIconIndirect
GetIconInfo
UpdateWindow
GetCursorPos
ScreenToClient
GetKeyState
GetCapture
SetCapture
ReleaseCapture
SetTimer
KillTimer
EnableMenuItem
LoadBitmapW
LoadCursorW
RegisterDeviceNotificationW
IsWindowVisible
GetSystemMenu
ModifyMenuW
DeleteMenu
SetForegroundWindow
LoadIconW
GetSystemMetrics
ShowScrollBar
wsprintfW
GetMenuItemID
TrackPopupMenu
SetMenuDefaultItem
GetMenuStringW
GetMenuState
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
UnhookWindowsHookEx
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW

gdi32

ExtTextOutW
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetBkColor
GetTextExtentPoint32W
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetCharWidthW
StretchDIBits
GetTextColor
GetRgnBox
PolyDraw
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetWindowOrgEx
MoveToEx
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
SetPolyFillMode
GetLayout
SetLayout
ArcTo
StartDocW
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextCharacterExtra
TextOutW
ExtCreatePen
SetArcDirection
GetTextFaceW
SelectClipPath
SetStretchBltMode
CreateBitmap
GetROP2
BitBlt
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateDIBPatternBrushPt
GetDeviceCaps
CopyMetaFileW
Rectangle
GetTextMetricsW
GetGlyphOutlineW
CreatePen
CreateFontW
CreateDCW
CreateSolidBrush
GetObjectW
SetTextColor
SetPixel
SetBkColor
SelectObject
GetStockObject
GetPixel
DeleteObject
DeleteDC
CreateCompatibleDC
SetROP2
CreateCompatibleBitmap

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW

advapi32

RegEnumKeyW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegCloseKey
RegDeleteKeyW
RegSetValueW
RegOpenKeyExW
RegSetValueExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAddToRecentDocs
ExtractIconW
ShellExecuteW
SHAppBarMessage
SHGetMalloc
ShellExecuteExW
SHGetDesktopFolder
SHGetSpecialFolderLocation

comctl32

ImageList_AddMasked
ImageList_GetImageCount
_TrackMouseEvent

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsAppThemed
DrawThemeParentBackground

ole32

OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
GetHGlobalFromILockBytes
CoUninitialize
OleTranslateAccelerator
IsAccelerator
OleRun
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleGetClipboard
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
WriteClassStm
CreateDataAdviseHolder
CreateGenericComposite
CreateItemMoniker
OleSaveToStream
CreateOleAdviseHolder
CoLockObjectExternal
GetRunningObjectTable
OleIsRunning
CoInitializeEx
OleQueryCreateFromData
OleQueryLinkFromData
CoCreateInstance
CoRegisterMessageFilter
OleDestroyMenuDescriptor
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
StringFromCLSID
RevokeDragDrop
RegisterDragDrop
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleGetIconOfClass
OleLockRunning
OleSetContainedObject
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
SetConvertStg
CoCreateGuid
CoInitialize
CLSIDFromString
CLSIDFromProgID
PropVariantCopy
StringFromGUID2
CoDisconnectObject
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleRegGetMiscStatus
OleRegEnumVerbs
OleCreateMenuDescriptor
OleSetMenuDescriptor
CoGetMalloc

oleaut32

SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysAllocString
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SysStringLen
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SysAllocStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarDecFromStr
OleCreateFontIndirect
SysStringByteLen
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayRedim
VarBstrFromDec

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 786KB - Virtual size: 785KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf92c4fd35b5f659dfcbe432a14dfd63

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

chinesefontparser

libusb0

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 588KB - Virtual size: 587KB

.data Size: 36KB - Virtual size: 80KB

.rsrc Size: 786KB - Virtual size: 785KB

.reloc Size: 222KB - Virtual size: 221KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 588KB - Virtual size: 587KB

.data
Size: 36KB - Virtual size: 80KB

.rsrc
Size: 786KB - Virtual size: 785KB

.reloc
Size: 222KB - Virtual size: 221KB