file_9ca3eb2da3684a0387c0753b9f51e987_2023-10-31_07_42_55_877000[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

file_9ca3eb2da3684a0387c0753b9f51e987_2023-10-31_07_42_55_877000.zip
Size

2.7MB
MD5

ba5bc7f71885fcfdf2955f0b3bbc0e81
SHA1

6fd3d11546cc901bf2505f3000a7d82f8f84e45b
SHA256

22a2c0506afbc85d90c47b6a1b61a2985c928608bf3beb798a5fecc2546ef41c
SHA512

b1782a3f8a46495c5d5aa3d3e5752b0e4887ea47994aee3a22d2d3a38b19416d7cf569d027c6dadf4046e00f904ccb96e8472ed094bc560ec43c9381b2953ccb
SSDEEP

49152:ZceJQFwHa7LPiI8ENM2XxIS/eNOn/pgJ0uZy4D5nJcP+sif/RTJNOi0N+ud:ZvCFwHgDiIfNMM/IOnxgF44D5SP+sifS

Score

1^/10

Malware Config

Signatures

Files

file_9ca3eb2da3684a0387c0753b9f51e987_2023-10-31_07_42_55_877000.zip
.zip
entry_1_0/MicTray64.exe
.exe windows:6 windows x64

160331ee2b71b58d5ea849b2d68eaf3a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

71:95:4b:e4:1c:9e:ac:fc:c5:c8:3e:6b:14:76:1d:b9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

08/06/2015, 00:00

Not After

02/07/2017, 23:59

Subject

CN=Conexant Systems\, Inc.,O=Conexant Systems\, Inc.,L=Irvine,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:e5:f7:70:4d:f5:98:97:17:a0:29:bc:3d:a9:95:27:37:37:97:d2
Signer

Actual PE Digest

3f:e5:f7:70:4d:f5:98:97:17:a0:29:bc:3d:a9:95:27:37:37:97:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

hid

HidD_SetOutputReport
HidD_GetInputReport
HidD_FreePreparsedData
HidP_GetCaps
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetPreparsedData

kernel32

SetFilePointerEx
ReadConsoleW
GetStringTypeW
GetTimeZoneInformation
HeapQueryInformation
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleMode
GetConsoleCP
VirtualFree
WaitForSingleObjectEx
SetConsoleCtrlHandler
FatalAppExitA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
SetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetModuleFileNameA
AreFileApisANSI
ExitProcess
ExitThread
WriteConsoleW
GetFileType
GetStdHandle
GetSystemInfo
HeapValidate
RtlPcToFileHeader
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwindEx
RtlLookupFunctionEntry
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetCommandLineW
LocalUnlock
LocalLock
SearchPathW
GetTickCount
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GetUserDefaultLCID
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetWindowsDirectoryW
CreateSemaphoreW
ReleaseSemaphore
FindResourceExW
GetStringTypeExW
MoveFileW
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
GetCurrentDirectoryW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
PulseEvent
VirtualProtect
GetProfileIntW
GetDateFormatW
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
SetErrorMode
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetAtomNameW
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetVersionExW
GetCurrentThread
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
GlobalFindAtomW
lstrcmpW
GlobalDeleteAtom
FreeResource
GetSystemDirectoryW
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
GlobalGetAtomNameW
GlobalAddAtomW
GetCurrentProcessId
WideCharToMultiByte
CopyFileW
FormatMessageW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
MultiByteToWideChar
lstrcmpiW
LoadLibraryExW
CreateMutexW
ReleaseMutex
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
OutputDebugStringA
FlushInstructionCache
GetCurrentThreadId
GetCurrentProcess
SetLastError
LoadLibraryW
WaitForMultipleObjects
GetProcAddress
GetModuleHandleW
FreeLibrary
GetLocalTime
GetVersion
CreateThread
Sleep
CreateEventW
SetEvent
InitializeCriticalSectionEx
RaiseException
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LocalSize
LocalAlloc
ResetEvent
CancelIo
GetOverlappedResult
GetLastError
ReadFile
CreateFileW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeviceIoControl
CloseHandle
OutputDebugStringW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GlobalFlags

user32

GetComboBoxInfo
TrackMouseEvent
UpdateLayeredWindow
EmptyClipboard
SetClipboardData
CloseClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MessageBeep
GetIconInfo
DrawIconEx
MsgWaitForMultipleObjectsEx
CharUpperW
GetDialogBaseUnits
GetClipboardFormatNameW
GetClipboardFormatNameA
SendDlgItemMessageA
CopyImage
GetAsyncKeyState
SetRect
IsRectEmpty
UnionRect
MapVirtualKeyW
GetKeyNameTextW
RealChildWindowFromPoint
PostQuitMessage
TranslateMessage
GetMessageW
EndDialog
CreateDialogIndirectParamW
SystemParametersInfoW
InflateRect
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExW
DlgDirListComboBoxW
DlgDirSelectExW
DlgDirListW
FindWindowExW
SetParent
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
GetDCEx
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
SetCapture
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageW
SendNotifyMessageW
DrawAnimatedRects
DrawCaption
GetMonitorInfoW
MonitorFromWindow
GetScrollInfo
SetScrollInfo
WaitMessage
GetParent
GetClassLongPtrW
GetClassLongW
PtInRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenuEx
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
RegisterClassW
GetMessageTime
GetMessagePos
DispatchMessageW
GetMenuCheckMarkDimensions
GetFocus
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
LoadBitmapW
CheckMenuRadioItem
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
GetMenuContextHelpId
SetMenuContextHelpId
ScrollDC
ExcludeUpdateRgn
WindowFromDC
GetTabbedTextExtentW
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
SetMenuItemBitmaps
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuIndirectW
DrawFrameControl
DrawEdge
MapDialogRect
TabbedTextOutW
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
WinHelpW
GetWindow
EnumDisplaySettingsW
RegisterHotKey
UnregisterHotKey
UnregisterClassW
CopyRect
GetLastActivePopup
GetWindowThreadProcessId
GetClassNameW
GetDesktopWindow
SetWindowLongW
GetWindowLongW
EqualRect
OffsetRect
IntersectRect
SetRectEmpty
GetSysColor
SetCursor
DestroyMenu
SetMenu
GetMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
IsWindowEnabled
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetClassLongPtrW
GetDoubleClickTime
CopyIcon
RegisterClipboardFormatW
CharUpperBuffW
EnumChildWindows
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
SubtractRect
InSendMessage
DestroyCursor
GetTopWindow
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
RegisterWindowMessageW
SendMessageW
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
IsWindow
SetTimer
KillTimer
GetSystemMetrics
TrackPopupMenu
SetForegroundWindow
GetCursorPos
GetWindowLongPtrW
SetWindowLongPtrW
LoadCursorW
LoadIconW
DestroyIcon
LoadImageW
CreateIconIndirect
CharNextW
IsMenu
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
PeekMessageW
GetClassInfoW
ShowWindow
SetWindowPos
BringWindowToTop
GetDlgItem
GetDlgCtrlID
SetFocus
GetActiveWindow
GetKeyState
GetCapture
ReleaseCapture
EnableWindow
MonitorFromPoint

gdi32

GetPolyFillMode
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32W
GetFontLanguageInfo
GetCharacterPlacementW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCW
RealizePalette
RoundRect
ResizePalette
SelectObject
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsW
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocW
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
GetObjectW
TextOutW
CreatePolygonRgn
GetPixel
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceW
GetKerningPairsW
UnrealizeObject
DeleteDC
DeleteObject
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
StretchDIBits
EnumFontFamiliesExW
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
CreateDIBSection
SetDIBColorTable
DeleteMetaFile
GetTextExtentPointW
GetCharWidthW
GetBrushOrgEx
GetBoundsRect
GetBitmapDimensionEx
GetPaletteEntries
GetOutlineTextMetricsW
GetObjectType
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetGraphicsMode
GetGlyphOutlineW
GetFontData
GetCurrentPositionEx
GetCurrentObject
GetCharABCWidthsFloatW
GetCharABCWidthsW
CreateDCW
GetDeviceCaps
CloseMetaFile
CreateMetaFileW
DPtoLP
CloseEnhMetaFile
GetBitmapBits
GetBkMode
GetBkColor
GetAspectRatioFilterEx
GetROP2
FrameRgn
FloodFill
FillRgn
ExtFloodFill
ExtCreateRegion
ExtEscape
Escape
EqualRgn
EnumObjects
Ellipse
DrawEscape
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreatePolyPolygonRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateICW
CreateHatchBrush
CreateFontW
CreateFontIndirectW
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateDiscardableBitmap
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmapIndirect
CreateBitmap
CombineRgn
Chord
BitBlt
CopyMetaFileW
CreateEnhMetaFileW
ExtTextOutW
AnimatePalette
Arc
GetCharWidthFloatW

msimg32

AlphaBlend
GradientFill
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
GetJobW
ClosePrinter

advapi32

GetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegSetValueW
RegSetValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
GetUserNameW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegOpenKeyW
RegEnumValueW
RegCloseKey
SetFileSecurityW

shell32

ShellExecuteW
Shell_NotifyIconW
DragQueryFileW
DragFinish
DragAcceptFiles
SHAddToRecentDocs
ExtractIconW
ShellExecuteExW
SHBrowseForFolderW
SHGetMalloc
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW

shlwapi

PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeText
IsAppThemed
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemePartSize

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateStreamOnHGlobal
PropVariantCopy
CoRevokeClassObject
CoRegisterClassObject
OleRun
CLSIDFromProgID
StringFromGUID2
CoDisconnectObject
CoInitialize
CoCreateGuid
SetConvertStg
StgOpenStorage
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
StgIsStorageILockBytes
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
PropVariantClear
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoInitializeEx
CoUninitialize
StgCreateDocfile
CoGetMalloc
OleSetMenuDescriptor
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLockRunning
OleIsRunning
OleSetContainedObject
OleSaveToStream
OleSave
GetClassFile
CoRegisterMessageFilter
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLoad
CreateFileMoniker
WriteClassStg
StgIsStorageFile
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
OleRegGetUserType
CreateGenericComposite

oleaut32

SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysAllocString
SafeArrayGetDim
SafeArrayGetElemsize
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SysStringLen
SystemTimeToVariantTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SysAllocStringByteLen
SafeArrayCreate
SysStringByteLen
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
VarUI4FromStr
SysFreeString
SafeArrayDestroyDescriptor
VariantTimeToSystemTime

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

oledlg

OleUIChangeIconW
OleUIConvertW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIInsertObjectW
OleUIBusyW
OleUIEditLinksW

Sections

.text
Size: 7.5MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 381KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
manifest.json

Sharing

General

Malware Config

Signatures

Files

160331ee2b71b58d5ea849b2d68eaf3a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

71:95:4b:e4:1c:9e:ac:fc:c5:c8:3e:6b:14:76:1d:b9Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

3f:e5:f7:70:4d:f5:98:97:17:a0:29:bc:3d:a9:95:27:37:37:97:d2Signer

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

hid

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oleacc

gdiplus

imm32

winmm

oledlg

Sections

.text Size: 7.5MB - Virtual size: 7.5MB

.rdata Size: 2.6MB - Virtual size: 2.6MB

.data Size: 62KB - Virtual size: 130KB

.pdata Size: 381KB - Virtual size: 380KB

.idata Size: 39KB - Virtual size: 38KB

.rsrc Size: 61KB - Virtual size: 60KB

.reloc Size: 150KB - Virtual size: 149KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

71:95:4b:e4:1c:9e:ac:fc:c5:c8:3e:6b:14:76:1d:b9
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

3f:e5:f7:70:4d:f5:98:97:17:a0:29:bc:3d:a9:95:27:37:37:97:d2
Signer

.text
Size: 7.5MB - Virtual size: 7.5MB

.rdata
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 62KB - Virtual size: 130KB

.pdata
Size: 381KB - Virtual size: 380KB

.idata
Size: 39KB - Virtual size: 38KB

.rsrc
Size: 61KB - Virtual size: 60KB

.reloc
Size: 150KB - Virtual size: 149KB