8c69f1a9c94846b480e5268ce8b4b92581f0398e078274d99af98c26d786fe81

Sharing

Copy URL Twitter E-mail

General

Target

8c69f1a9c94846b480e5268ce8b4b92581f0398e078274d99af98c26d786fe81
Size

2.9MB
MD5

00ef431a607ffeb0cc3002790ae6c834
SHA1

8c422b6bed4e03300059d21d04e54615751ada43
SHA256

8c69f1a9c94846b480e5268ce8b4b92581f0398e078274d99af98c26d786fe81
SHA512

814bafa138e0ee324f16f090d15433fa2ee6cd8edbfbb57cdb0a8d7bede1341489c8889feb4af3a9aee9b04caed0b13e70a30e954a0f36ed6be04d8ca99985ec
SSDEEP

49152:ZmrnRI1rTaVNFrQMlaMvxg0YL2KkiPBxO+XF45NQOkWAubNfc8UEtVMzbgRVobLD:8nygx7laMvxg0Ylk8PTXF45NQOkWAubV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c69f1a9c94846b480e5268ce8b4b92581f0398e078274d99af98c26d786fe81

Files

8c69f1a9c94846b480e5268ce8b4b92581f0398e078274d99af98c26d786fe81
.exe windows:5 windows x86

b51db3c7165c029ac8d55fd7aa49097e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
GetProcessHeap
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
GetFileType
SetStdHandle
RaiseException
HeapReAlloc
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
ExitThread
GetStartupInfoW
FindResourceExW
VirtualProtect
SearchPathW
GetTempPathW
GetTempFileNameW
SetErrorMode
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GlobalGetAtomNameW
GetFileAttributesW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GlobalFlags
FileTimeToSystemTime
GetProfileIntW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
SetThreadPriority
InterlockedDecrement
GetCurrentProcessId
GetModuleHandleA
FormatMessageW
LocalFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
lstrcmpW
MoveFileExW
CopyFileW
CreateDirectoryW
ReleaseMutex
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
ClearCommError
WriteFile
SetupComm
SetCommState
SetCommTimeouts
GetCommState
CreateFileW
DeleteCriticalSection
InitializeCriticalSection
ReadFile
CreateProcessW
CreatePipe
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetModuleFileNameW
GetCurrentProcess
GlobalSize
GlobalReAlloc
GetVersionExW
ResetEvent
ResumeThread
MulDiv
GlobalFree
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
WinExec
lstrcatW
lstrcpyW
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
GetTickCount
GetCurrentDirectoryW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
lstrlenW
SetEvent
CreateMutexW
Sleep
CreateThread
CreateEventW
GetLocalTime
TerminateThread
WaitForSingleObject
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcAddress
GetModuleHandleW
LoadLibraryW
SetLastError
CloseHandle
GetLastError
UnlockFile

user32

GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
UpdateWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
ShowWindow
MoveWindow
SetWindowLongW
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
CheckDlgButton
DestroyMenu
GetMenuItemInfoW
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
ShowOwnedPopups
SetWindowsHookExW
CallNextHookEx
GetMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
GetLastActivePopup
MessageBoxW
EndPaint
BeginPaint
GrayStringW
DrawTextExW
IsChild
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindow
SetClassLongW
MapDialogRect
SetWindowPos
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
MapVirtualKeyW
GetKeyNameTextW
WinHelpW
MessageBeep
IsZoomed
PostQuitMessage
GetWindowLongW
GetWindowThreadProcessId
WindowFromPoint
ClientToScreen
GetDoubleClickTime
RedrawWindow
ReleaseCapture
IsMenu
BringWindowToTop
LockWindowUpdate
GetCapture
ClipCursor
EnumChildWindows
DrawStateW
FindWindowW
PostMessageW
LoadImageW
SetCapture
InvertRect
GetMessagePos
IsClipboardFormatAvailable
GetWindowDC
ScreenToClient
GetCursorPos
IntersectRect
DefWindowProcW
GetClassInfoW
IsWindow
GetKeyState
OffsetRect
IsRectEmpty
PtInRect
DrawFrameControl
SendDlgItemMessageA
RegisterWindowMessageW
LoadMenuW
CharUpperW
RegisterClipboardFormatW
WaitMessage
DeleteMenu
SetRectEmpty
GetSysColorBrush
PostThreadMessageW
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
DrawTextW
InflateRect
DrawEdge
FrameRect
CopyRect
GetSysColor
FillRect
ReleaseDC
GetDC
SetRect
SetWindowRgn
GetParent
GetAsyncKeyState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableW
NotifyWinEvent
CreatePopupMenu
TabbedTextOutW
SetParent
PeekMessageW
TranslateMessage
DispatchMessageW
LoadIconW
GetSystemMenu
AppendMenuW
SendMessageW
SetTimer
SystemParametersInfoW
GetWindowRect
SetActiveWindow
IsIconic
GetNextDlgGroupItem
GetSystemMetrics
GetClientRect
DrawIcon
KillTimer
SetForegroundWindow
EnableWindow
InvalidateRect
wsprintfW
IsWindowVisible
GetFocus
GetDlgCtrlID
LoadCursorW
SetCursor
OpenClipboard
CopyImage
DestroyIcon
SetClipboardData
CloseClipboard
EmptyClipboard
CharNextW
InvalidateRgn
DestroyCursor
GetWindowRgn
CreateMenu
GetIconInfo
SubtractRect
CopyIcon
CharUpperBuffW
GetUpdateRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MapVirtualKeyExW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
DrawFocusRect
DrawIconEx
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
UnregisterClassW
SetWindowContextHelpId

gdi32

CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
GetStockObject
SelectPalette
GetObjectType
CreateHatchBrush
GetDCOrgEx
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
OffsetRgn
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetDIBits
RealizePalette
SetPixel
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
SetMapMode
SelectClipRgn
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CopyMetaFileW
CreateRectRgnIndirect
PatBlt
GetTextMetricsW
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetBkColor
GetClipBox
GetCurrentObject
Polygon
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
GetDeviceCaps
CreateDIBSection
SetDIBColorTable
SelectObject
DeleteDC
DeleteObject
CreateRoundRectRgn
CreatePen
StretchBlt
SetStretchBltMode
GetObjectW
CreateCompatibleDC
GetTextExtentPoint32W
GetRgnBox
CreateFontIndirectW
CreateFontW

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegOpenKeyExW
RegQueryValueW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegEnumKeyExW

shell32

ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHAppBarMessage
DragQueryFileW
DragFinish
Shell_NotifyIconW
SHBrowseForFolderW
SHGetPathFromIDListW

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

IsAccelerator
OleIsCurrentClipboard
OleFlushClipboard
OleDestroyMenuDescriptor
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleRun
OleTranslateAccelerator
OleSetClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleGetClipboard

oleaut32

VarUdateFromDate
VariantClear
SysAllocString
VariantInit
VariantChangeType
SysStringLen
SysFreeString
SysAllocStringLen
VariantCopy
SystemTimeToVariantTime
SafeArrayDestroy
OleCreateFontIndirect
VariantTimeToSystemTime
OleLoadPicture

gdiplus

GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipReleaseDC
GdipLoadImageFromFile
GdipDrawImageI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipFree
GdiplusShutdown
GdiplusStartup

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

sqlite3

sqlite3_exec
sqlite3_close
sqlite3_open
sqlite3_get_table
sqlite3_free_table

ws2_32

WSAGetLastError
recvfrom
closesocket
inet_addr
bind
htonl
WSAIoctl
setsockopt
socket
WSACleanup
WSAStartup
gethostbyname
recv
send
ioctlsocket
select
sendto
connect
htons

wlanapi

WlanDisconnect
WlanDeleteProfile
WlanGetProfileList
WlanConnect
WlanSetProfile
WlanFreeMemory
WlanGetAvailableNetworkList
WlanScan
WlanRegisterNotification
WlanEnumInterfaces
WlanOpenHandle
WlanCloseHandle

libxl

xlCreateBookW

wlan.tester.api

WT_SetExternalGain
WT_DisConnect
WT_Connect
WT_GetDefaultParameter
WT_DLLInitialize
WT_StartVSG
WT_AsynStartVSG
WT_SetVSG
WT_GetResult
WT_DataCapture
WT_SetVSA_AutoRange
WT_SetVSA

apts_api

AT5608D_DisConnect
AT5608D_Extern_VSG_MOD
AT5608D_Extern_Measure
AT5608D_SetWaveAndRefFilePath
AT5608D_Connect

apidriver_cmw500

ApiOpen
ApiErrorCodeInfoGet
ApiBaseInfoGet
ApiWrite
ApiClose
ApiInstrLock
ApiRfPortSet
ApiGeneralPreconfig
ApiMCMeasurementSingleModeConfig
ApiMeasurementOpen
ApiMCMeasurementSingleModeResultsGet
ApiGprfSourceClose
ApiSetRXPort
ApiGprfSourceSingleModeConfig
ApiGprfSourceWaveformFileLoad
ApiGprfSourceOpen
ApiRead

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

imagehlp

MakeSureDirectoryPathExists

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b51db3c7165c029ac8d55fd7aa49097e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

version

sqlite3

ws2_32

wlanapi

libxl

wlan.tester.api

apts_api

apidriver_cmw500

imm32

winmm

imagehlp

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 438KB - Virtual size: 437KB

.data Size: 73KB - Virtual size: 133KB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 197KB - Virtual size: 196KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 438KB - Virtual size: 437KB

.data
Size: 73KB - Virtual size: 133KB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 197KB - Virtual size: 196KB