ca0a0743f92d2ee45dc8a689a65efbf3249b3084e72e2216d3e59b0a215d9f05

Sharing

Copy URL

Twitter E-mail

General

Target

ca0a0743f92d2ee45dc8a689a65efbf3249b3084e72e2216d3e59b0a215d9f05
Size

218KB
MD5

87c3b819cb9e64fdd2c26335a299749a
SHA1

0ad634c90f52a0cbf422d76a667eb15ea42e8488
SHA256

ca0a0743f92d2ee45dc8a689a65efbf3249b3084e72e2216d3e59b0a215d9f05
SHA512

66f1e89895e8181717a74cbc93166e523ab1072d31db2d4e9ec90ee6b0c631efb38beea9880033e8689153c6ea5b3f368502f984c3d8897124defd070e388005
SSDEEP

6144:AWdZ7T55CkhFCzeAsgTh05rj6/initrJbiktbkiT0IS+AveK:AO55CkzYsgTh05r+/iil+q0INAL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca0a0743f92d2ee45dc8a689a65efbf3249b3084e72e2216d3e59b0a215d9f05

Files

ca0a0743f92d2ee45dc8a689a65efbf3249b3084e72e2216d3e59b0a215d9f05
.exe windows:6 windows x64

2be9dfc3738c586962c5064289fe6893

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

dwmapi

DwmExtendFrameIntoClientArea
DwmSetWindowAttribute

connectivity_plus_plugin

ConnectivityPlusWindowsPluginRegisterWithRegistrar

dart_vlc_plugin

DartVlcPluginRegisterWithRegistrar

file_selector_windows_plugin

FileSelectorWindowsRegisterWithRegistrar

platform_device_id_windows_plugin

PlatformDeviceIdWindowsPluginRegisterWithRegistrar

smart_auth_plugin

SmartAuthPluginRegisterWithRegistrar

url_launcher_windows_plugin

UrlLauncherWindowsRegisterWithRegistrar

appvest

init
getClientIP
getServerIPAndPort

flutter_windows

FlutterDesktopMessengerUnlock
FlutterDesktopTextureRegistrarRegisterExternalTexture
FlutterDesktopEngineReloadSystemFonts
FlutterDesktopEngineGetPluginRegistrar
FlutterDesktopEngineGetMessenger
FlutterDesktopEngineSetNextFrameCallback
FlutterDesktopViewControllerCreate
FlutterDesktopViewControllerDestroy
FlutterDesktopViewControllerGetView
FlutterDesktopViewControllerHandleTopLevelWindowProc
FlutterDesktopMessengerSend
FlutterDesktopMessengerSendWithReply
FlutterDesktopMessengerSetCallback
FlutterDesktopMessengerAddRef
FlutterDesktopMessengerRelease
FlutterDesktopMessengerIsAvailable
FlutterDesktopTextureRegistrarUnregisterExternalTexture
FlutterDesktopEngineCreate
FlutterDesktopGetDpiForMonitor
FlutterDesktopResyncOutputStreams
FlutterDesktopViewGetHWND
FlutterDesktopRegistrarGetTextureRegistrar
FlutterDesktopPluginRegistrarGetMessenger
FlutterDesktopPluginRegistrarGetView
FlutterDesktopPluginRegistrarSetDestructionHandler
FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable
FlutterDesktopMessengerSendResponse
FlutterDesktopEngineDestroy
FlutterDesktopMessengerLock

comctl32

ord413
ord410

kernel32

IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetCurrentProcessId
CloseHandle
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetProcessHeap
HeapFree
LoadLibraryA
GetProcAddress
GetModuleHandleW
FreeLibrary
AllocConsole
WideCharToMultiByte
LocalFree
GetCommandLineW
AttachConsole
IsDebuggerPresent
QueryPerformanceCounter
InitializeSListHead
EnterCriticalSection

user32

MonitorFromWindow
GetMonitorInfoW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
PostQuitMessage
RegisterClassW
UnregisterClassW
CreateWindowExW
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
SetFocus
GetClientRect
GetWindowLongPtrW
SetWindowLongPtrW
SetParent
LoadCursorW
LoadIconW
MonitorFromPoint
SendMessageW
IsZoomed
ReleaseCapture
GetSystemMetrics
SetPropW
SetWindowTextW
GetCursorPos
ScreenToClient
SetWindowsHookExW
UnhookWindowsHookEx

shell32

CommandLineToArgvW

ole32

CoInitializeEx
CoUninitialize

advapi32

RegGetValueW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xbad_function_call@std@@YAXXZ
?sync_with_stdio@ios_base@std@@SA_N_N@Z

vcruntime140

__std_terminate
__C_specific_handler
__current_exception_context
__current_exception
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_type_info_compare
memmove
memset
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
exit
_exit
_get_wide_winmain_command_line
_initialize_wide_environment
_seh_filter_exe
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_invoke_watson

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf
freopen_s
_fileno
_dup2
_set_fmode
__p__commode
__acrt_iob_func

api-ms-win-crt-math-l1-1-0

ceil
__setusermatherr

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
free
_callnewh

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

bitsdojo_window_api

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2be9dfc3738c586962c5064289fe6893

Headers

DLL Characteristics

File Characteristics

Imports

dwmapi

connectivity_plus_plugin

dart_vlc_plugin

file_selector_windows_plugin

platform_device_id_windows_plugin

smart_auth_plugin

url_launcher_windows_plugin

appvest

flutter_windows

comctl32

kernel32

user32

shell32

ole32

advapi32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 4KB - Virtual size: 5KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 123KB - Virtual size: 123KB

.reloc Size: 512B - Virtual size: 456B

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 4KB - Virtual size: 5KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 123KB - Virtual size: 123KB

.reloc
Size: 512B - Virtual size: 456B