378e4b8fb908a1c0694e5b756304cb3a88550a81bcb614235aaa4e4a0fcae4e8

Sharing

Copy URL Twitter E-mail

General

Target

378e4b8fb908a1c0694e5b756304cb3a88550a81bcb614235aaa4e4a0fcae4e8
Size

7.9MB
MD5

875658f650a09504a9a8fa588dccef3a
SHA1

15fafc2640d1511db0decd243e521d75e4158028
SHA256

378e4b8fb908a1c0694e5b756304cb3a88550a81bcb614235aaa4e4a0fcae4e8
SHA512

434b2793bc98e6afff72775a96893fd076d447c8768a74c03f0f9fedad1314fddc8c6b6bed744cbf57d853f03c1d88399e1cdcfc3a5229eef691f966e85894b8
SSDEEP

98304:I0tR3ki4H+uMK5X7hkTHlNypkH8ibOeZg8irhVXDtG:IRiu7hkhog8ibOlrhVtG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
378e4b8fb908a1c0694e5b756304cb3a88550a81bcb614235aaa4e4a0fcae4e8

Files

378e4b8fb908a1c0694e5b756304cb3a88550a81bcb614235aaa4e4a0fcae4e8
.exe windows:6 windows x64

91c34ef086e7aec6cb5cc9cf17442e49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

WindowFromPoint
WaitMessage
UnregisterDeviceNotification
UnregisterClassW
TranslateMessage
TrackMouseEvent
ToUnicode
SystemParametersInfoW
ShowWindow
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetRect
SetPropW
SetLayeredWindowAttributes
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SendMessageW
ScreenToClient
RemovePropW
ReleaseDC
ReleaseCapture
RegisterRawInputDevices
RegisterDeviceNotificationW
RegisterClassExW
PtInRect
PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
MonitorFromWindow
MapVirtualKeyW
LoadImageW
LoadCursorW
IsZoomed
IsWindowVisible
IsIconic
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetSystemMetrics
GetRawInputDeviceList
GetRawInputDeviceInfoA
GetRawInputData
GetPropW
GetMonitorInfoW
GetMessageTime
GetLayeredWindowAttributes
GetKeyState
GetDC
GetCursorPos
GetClipboardData
GetClientRect
GetClassLongPtrW
GetActiveWindow
FlashWindow
EnumDisplaySettingsW
EnumDisplaySettingsExW
EnumDisplayMonitors
EnumDisplayDevicesW
EmptyClipboard
DispatchMessageW
DestroyWindow
DestroyIcon
DefWindowProcW
CreateWindowExW
CreateIconIndirect
CloseClipboard
ClipCursor
ClientToScreen
ChangeDisplaySettingsExW
BringWindowToTop
AdjustWindowRectEx

shell32

DragQueryPoint
DragQueryFileW
DragFinish
DragAcceptFiles

msvcrt

_unlock
_lock
_beginthread
wcslen
wcscpy
wcscmp
vfprintf
ungetc
tolower
strtoul
strtol
strtok
strstr
strspn
strncpy
strncmp
strlen
strerror
strcspn
strcpy
strcmp
signal
realloc
qsort
memset
memmove
memcpy
malloc
localeconv
isxdigit
isupper
isspace
islower
getc
fwrite
free
fputc
fprintf
exit
calloc
abort
_wassert
_onexit
_initterm
_fmode
_errno
_commode
_cexit
_amsg_exit
_acmdln
__setusermatherr
__set_app_type
__iob_func
__initenv
__getmainargs
___mb_cur_max_func
___lc_codepage_func

gdi32

SwapBuffers
SetPixelFormat
SetDeviceGammaRamp
GetDeviceGammaRamp
GetDeviceCaps
DescribePixelFormat
DeleteObject
DeleteDC
CreateRectRgn
CreateDIBSection
CreateDCW
CreateBitmap
ChoosePixelFormat

kernel32

WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VerSetConditionMask
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
Sleep
SetUnhandledExceptionFilter
SetThreadExecutionState
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
LoadLibraryA
LeaveCriticalSection
IsDBCSLeadByteEx
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleHandleExW
GetLastError
FreeLibrary
FormatMessageW
EnterCriticalSection
DeleteCriticalSection
CreateEventA
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Exports

Exports

_cgo_panic
_cgo_topofstack
crosscall2
goCharCB
goCharModsCB
goCursorEnterCB
goCursorPosCB
goDropCB
goErrorCB
goFramebufferSizeCB
goJoystickCB
goKeyCB
goMonitorCB
goMouseButtonCB
goScrollCB
goWindowCloseCB
goWindowContentScaleCB
goWindowFocusCB
goWindowIconifyCB
goWindowMaximizeCB
goWindowPosCB
goWindowRefreshCB
goWindowSizeCB

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3.2MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91c34ef086e7aec6cb5cc9cf17442e49

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

msvcrt

gdi32

kernel32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 2.2MB - Virtual size: 2.2MB

.data Size: 3.2MB - Virtual size: 3.6MB

.pdata Size: 37KB - Virtual size: 37KB

.xdata Size: 512B - Virtual size: 168B

.idata Size: 6KB - Virtual size: 5KB

.edata Size: 1024B - Virtual size: 668B

.reloc Size: 77KB - Virtual size: 76KB

.symtab Size: 512B - Virtual size: 4B

.rsrc Size: 160KB - Virtual size: 160KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 2.2MB - Virtual size: 2.2MB

.data
Size: 3.2MB - Virtual size: 3.6MB

.pdata
Size: 37KB - Virtual size: 37KB

.xdata
Size: 512B - Virtual size: 168B

.idata
Size: 6KB - Virtual size: 5KB

.edata
Size: 1024B - Virtual size: 668B

.reloc
Size: 77KB - Virtual size: 76KB

.symtab
Size: 512B - Virtual size: 4B

.rsrc
Size: 160KB - Virtual size: 160KB