7ea58f87915248f4ac798684dd1ae2f28d5584b8f930ff352c849451539d694f

Sharing

Copy URL Twitter E-mail

General

Target

7ea58f87915248f4ac798684dd1ae2f28d5584b8f930ff352c849451539d694f
Size

4.3MB
MD5

1b5957e8fd9451fb394b311be70885fc
SHA1

d0c41d8f9095c2832ae91c15e53ec44f4c086a2a
SHA256

7ea58f87915248f4ac798684dd1ae2f28d5584b8f930ff352c849451539d694f
SHA512

f8e9597693752cc02eec4faa2a1cc7b312a9678f47220edb4e651cbdb3268dccd84a0566844ecc42c728ae77317605e54d2a48e08276fc5f809f42fa5ef1928b
SSDEEP

49152:K/cD7wAdmDyfNtwFpq2VXm0nVpZy6MtJiDnsqUCg8JvTr+wfa668DjTHoHwqmpS2:xQux8JDH7o3VBAUZLFM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ea58f87915248f4ac798684dd1ae2f28d5584b8f930ff352c849451539d694f

Files

7ea58f87915248f4ac798684dd1ae2f28d5584b8f930ff352c849451539d694f
.dll windows:5 windows x64

14dfa2fd9eeded4aef507d829c2ac15f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
InitializeCriticalSection
lstrcmpA
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
CloseHandle
SetThreadPriority
ResumeThread
WaitForSingleObject
lstrcpyA
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcmpiA
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetTempFileNameA
GetTempPathA
GetNumberFormatA
InitializeCriticalSectionAndSpinCount
GetFileAttributesA
GetProfileIntA
Sleep
SearchPathA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
VirtualProtect
FindResourceExW
RtlLookupFunctionEntry
RtlUnwindEx
EncodePointer
DecodePointer
HeapAlloc
HeapFree
HeapReAlloc
GetSystemTimeAsFileTime
RaiseException
RtlPcToFileHeader
GetUserDefaultUILanguage
WriteConsoleW
GetFileType
GetStdHandle
FlsSetValue
IsDebuggerPresent
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
HeapQueryInformation
HeapSize
SetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
FlsGetValue
FlsFree
FlsAlloc
IsValidCodePage
LCMapStringW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetTimeZoneInformation
SetHandleCount
GetStartupInfoW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetProcessHeap
GetStringTypeW
CompareStringW
CreateFileW
SetEnvironmentVariableA
GetModuleHandleW
SetErrorMode
GetCurrentProcessId
GetModuleFileNameA
FindResourceA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
SetLastError
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MulDiv
GetACP
ConvertDefaultLocale
GetSystemDefaultUILanguage
ExitProcess
GetLocaleInfoA
DeleteFileA
GetCurrentThreadId
GetCurrentProcess
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
GetLastError
GetModuleHandleA
GetCommandLineA
GetTickCount
MultiByteToWideChar
FreeLibrary
LoadLibraryA
GetProcAddress
GetLocalTime
OutputDebugStringA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
TlsAlloc
SizeofResource

user32

LoadMenuW
SetWindowRgn
RedrawWindow
SetCapture
WindowFromPoint
ReleaseCapture
MessageBeep
SetCursor
NotifyWinEvent
GetAsyncKeyState
IsZoomed
CharUpperA
IsRectEmpty
UnionRect
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
CreatePopupMenu
SetMenuDefaultItem
GetMenuDefaultItem
ShowOwnedPopups
DestroyIcon
SetParent
DestroyAcceleratorTable
SetClassLongPtrA
DrawIconEx
DrawEdge
DrawFrameControl
DrawFocusRect
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
LoadAcceleratorsW
CreateAcceleratorTableA
SetRect
SetCursorPos
BringWindowToTop
LockWindowUpdate
InvertRect
HideCaret
GetIconInfo
CopyImage
LoadImageA
GetNextDlgGroupItem
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
RegisterClipboardFormatA
FrameRect
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
CopyIcon
CharUpperBuffA
PostThreadMessageA
WaitMessage
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetUpdateRect
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
SubtractRect
DestroyCursor
MapDialogRect
GetWindowRgn
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetCursorPos
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
SetRectEmpty
DeleteMenu
EndDialog
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindow
UnhookWindowsHookEx
GetClassNameA
UpdateWindow
FillRect
DrawStateA
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
DrawIcon
SendMessageA
IsIconic
GetClientRect
SetTimer
FindWindowA
LoadIconW
GetSystemMetrics
EnableWindow
LoadBitmapW
AppendMenuA
PostMessageA
GetSystemMenu
MapWindowPoints
GetDC
ReleaseDC
InvalidateRect
KillTimer
MessageBoxA
SetForegroundWindow
AllowSetForegroundWindow
SystemParametersInfoA
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
IsWindow
GetKeyboardState
GetMessageA
TranslateMessage
OffsetRect
RealChildWindowFromPoint
UnregisterClassA
LoadCursorW
SetLayeredWindowAttributes
GetNextDlgTabItem
EnumDisplayMonitors
ValidateRect
LoadCursorA
GetSysColorBrush
PostQuitMessage
MapVirtualKeyA
GetKeyNameTextA
IntersectRect
LoadBitmapA
DestroyMenu
GetMenuItemInfoA
InflateRect
IsWindowEnabled

gdi32

DeleteObject
CreateSolidBrush
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
CreateDCA
SetLayout
CreateBitmap
GetObjectA
CreateCompatibleDC
PatBlt
StretchBlt
SetPixel
GetStockObject
SelectClipRgn
CreateRectRgn
CopyMetaFileA
SetRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
CreateFontIndirectA
CreateHatchBrush
CreatePen
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectType
SelectPalette
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
GetLayout
GetDeviceCaps
SetPixelV
GetTextFaceA
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
CombineRgn
DPtoLP
CreateDIBitmap
GetWindowOrgEx
LPtoDP
CreateCompatibleBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
ScaleViewportExtEx

shell32

SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
SHAppBarMessage
DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetFileInfoA

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
PathIsUNCA

gdiplus

GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipSetInterpolationMode
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipFree

ws2_32

recv
inet_ntoa
gethostbyname
WSAStartup
WSACleanup
socket
htons
inet_addr
connect
select
__WSAFDIsSet
getsockopt
send
closesocket

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegEnumValueA
RegDeleteValueA
RegEnumKeyExA

ole32

CoLockObjectExternal
RevokeDragDrop
RegisterDragDrop
CoTaskMemFree
OleGetClipboard
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CreateStreamOnHGlobal
CoInitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium

oleaut32

VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
VariantClear
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString

Exports

Exports

cJSON_AddArrayToObject
cJSON_AddBoolToObject
cJSON_AddFalseToObject
cJSON_AddItemReferenceToArray
cJSON_AddItemReferenceToObject
cJSON_AddItemToArray
cJSON_AddItemToObject
cJSON_AddItemToObjectCS
cJSON_AddNullToObject
cJSON_AddNumberToObject
cJSON_AddObjectToObject
cJSON_AddRawToObject
cJSON_AddStringToObject
cJSON_AddTrueToObject
cJSON_Compare
cJSON_CreateArray
cJSON_CreateArrayReference
cJSON_CreateBool
cJSON_CreateDoubleArray
cJSON_CreateFalse
cJSON_CreateFloatArray
cJSON_CreateIntArray
cJSON_CreateNull
cJSON_CreateNumber
cJSON_CreateObject
cJSON_CreateObjectReference
cJSON_CreateRaw
cJSON_CreateString
cJSON_CreateStringArray
cJSON_CreateStringReference
cJSON_CreateTrue
cJSON_Delete
cJSON_DeleteItemFromArray
cJSON_DeleteItemFromObject
cJSON_DeleteItemFromObjectCaseSensitive
cJSON_DetachItemFromArray
cJSON_DetachItemFromObject
cJSON_DetachItemFromObjectCaseSensitive
cJSON_DetachItemViaPointer
cJSON_Duplicate
cJSON_GetArrayItem
cJSON_GetArraySize
cJSON_GetErrorPtr
cJSON_GetNumberValue
cJSON_GetObjectItem
cJSON_GetObjectItemCaseSensitive
cJSON_GetStringValue
cJSON_HasObjectItem
cJSON_InitHooks
cJSON_InsertItemInArray
cJSON_IsArray
cJSON_IsBool
cJSON_IsFalse
cJSON_IsInvalid
cJSON_IsNull
cJSON_IsNumber
cJSON_IsObject
cJSON_IsRaw
cJSON_IsString
cJSON_IsTrue
cJSON_Minify
cJSON_Parse
cJSON_ParseWithLength
cJSON_ParseWithLengthOpts
cJSON_ParseWithOpts
cJSON_Print
cJSON_PrintBuffered
cJSON_PrintPreallocated
cJSON_PrintUnformatted
cJSON_ReplaceItemInArray
cJSON_ReplaceItemInObject
cJSON_ReplaceItemInObjectCaseSensitive
cJSON_ReplaceItemViaPointer
cJSON_SetNumberHelper
cJSON_SetValuestring
cJSON_Version
cJSON_free
cJSON_malloc
pkiAnalysisByOID
pkiBase64Decode
pkiBase64Encode
pkiCheckCert
pkiCloseApplication
pkiCloseDevice
pkiDecryptDataForSOF
pkiDecryptFile
pkiDecryptFileForSOF
pkiDeleteLabel
pkiEncryptDataForSOF
pkiEncryptFile
pkiEncryptFileForSOF
pkiEnd
pkiExportCert
pkiExternalByPubKey
pkiExternalEnvelop
pkiExternalEnvelopByPubKey
pkiFormat
pkiGenCertRequest
pkiGenECCKey
pkiGenRsaKeyInDevice
pkiGenerateRandom
pkiGetCRLInfo
pkiGetCertInfoEx
pkiGetContainerNameList
pkiGetContainerType
pkiGetDevSerialNumber
pkiGetECCPublicKeyEx
pkiGetEncKey
pkiGetPublicKey
pkiGetRsaKeyPairDer
pkiGetSignature
pkiGetUseTime
pkiGetUserExChangePubkey
pkiGetUserPubID
pkiGetXMLCertInfo
pkiHashData
pkiHashDataEx
pkiImportCert
pkiImportEncKey
pkiInit
pkiInitApp
pkiInitEx
pkiInternalDecryptForBig
pkiInternalDecryptSymmKey
pkiInternalOpenEnvelop
pkiLogin
pkiLoginEx
pkiLoginExx
pkiLogout
pkiOpenEnvelope
pkiOpenEnvelopeForPKCS7
pkiPBKCryptData
pkiPrivKeyDecrypt
pkiPubKeyEncrypt
pkiPubKeyEncryptByCert
pkiRWKCryptData
pkiReadLabel
pkiReadLabelList
pkiSM3HashData
pkiSealEnvelope
pkiSealEnvelopeEx
pkiSealEnvelopeForPKCS7
pkiSetPin
pkiSignData
pkiSoftInitApp
pkiSymmCryptData
pkiSymmCryptDataEx
pkiUnlock
pkiUpdatePrivKey
pkiUpdatePrivKeyEx
pkiVerifyData
pkiVerifySignature
pkiVerifySignatureEx
pkiVerifySignatureForPKCS7
pkiVerifySignaturePure
pkiWriteLabel

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 277KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14dfa2fd9eeded4aef507d829c2ac15f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msimg32

comctl32

shlwapi

gdiplus

ws2_32

oleacc

imm32

winmm

winspool.drv

comdlg32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 90KB - Virtual size: 148KB

.pdata Size: 89KB - Virtual size: 88KB

text Size: 3KB - Virtual size: 2KB

data Size: 2KB - Virtual size: 1KB

.rsrc Size: 277KB - Virtual size: 277KB

.reloc Size: 83KB - Virtual size: 83KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 90KB - Virtual size: 148KB

.pdata
Size: 89KB - Virtual size: 88KB

text
Size: 3KB - Virtual size: 2KB

data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 277KB - Virtual size: 277KB

.reloc
Size: 83KB - Virtual size: 83KB