4faf45919433fe36432b9097ee923ea38cea08268a8d2ca37de0e407820c3dc7

Sharing

Copy URL

Twitter E-mail

General

Target

4faf45919433fe36432b9097ee923ea38cea08268a8d2ca37de0e407820c3dc7
Size

5.0MB
MD5

e450a05af6bbfe5298814de1eac0e7f7
SHA1

4f3335824a921caf7d08f133785f0276d395feb9
SHA256

4faf45919433fe36432b9097ee923ea38cea08268a8d2ca37de0e407820c3dc7
SHA512

d27efe7078c5eff1fb3e7064f9f9fead0ca6bb8ff578eceb350820b31fa1bdcdccb5454ad97e6aab971e378dc814c4444e6e2219e156989a5de3b880e7fadd48
SSDEEP

49152:dy+LkuwDRq/YQPHeqXv6xLXZjp4VVJjcbxGj1PJqgieypHcOUtw2yRlXDWy5Eu7b:TvI9pMp1PMcOUOXDD3Qna/CLljC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4faf45919433fe36432b9097ee923ea38cea08268a8d2ca37de0e407820c3dc7

Files

4faf45919433fe36432b9097ee923ea38cea08268a8d2ca37de0e407820c3dc7
.dll windows:6 windows x64

928467c52c5e842406ab1e5ec2874673

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

comctl32

ord17

kernel32

LCMapStringEx
QueryPerformanceFrequency
GetACP
GetSystemInfo
SetFilePointerEx
UnmapViewOfFile
lstrcatA
GetTimeZoneInformation
lstrlenA
OutputDebugStringW
GetStringTypeW
GetCPInfo
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
RaiseException
HeapQueryInformation
GetCommandLineA
GetCommandLineW
VirtualAlloc
VirtualQuery
SetStdHandle
GetFileType
ExitProcess
GetModuleFileNameA
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExA
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetThreadTimes
LoadLibraryExA
ExpandEnvironmentStringsA
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
CreateSemaphoreA
TzSpecificLocalTimeToSystemTime
HeapAlloc
HeapDestroy
GetLastError
DecodePointer
DeleteCriticalSection
CreateFileW
DeleteFileW
GetFileAttributesW
GetTempFileNameW
WriteFile
GetTempPathW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLongPathNameW
lstrcmpA
MoveFileW
WideCharToMultiByte
InitializeCriticalSection
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
OutputDebugStringA
SetLastError
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalSize
LocalFree
MulDiv
CopyFileW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetCurrentProcessId
CompareStringW
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentThreadId
SetThreadPriority
ResumeThread
GlobalGetAtomNameW
FileTimeToSystemTime
SystemTimeToFileTime
GlobalAddAtomW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetShortPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
GetCurrentProcess
LoadLibraryExW
lstrcmpiW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
GetTickCount
GetUserDefaultLCID
Sleep
SearchPathW
GetProfileIntW
GetTickCount64
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
lstrcpyW
GetCurrentDirectoryW
VirtualProtect
GetUserDefaultUILanguage
GetLocaleInfoW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetCurrentThread
GlobalFindAtomW
GlobalDeleteAtom
GetSystemDirectoryW
EncodePointer
lstrcmpW
GlobalFlags
FreeLibrary

user32

DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
GetMenuItemID
TranslateAcceleratorW
InsertMenuItemW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
LoadImageW
TrackMouseEvent
InvalidateRect
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
CreateDialogIndirectParamW
SetRectEmpty
DrawEdge
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
SendDlgItemMessageA
CopyImage
SystemParametersInfoW
InflateRect
SetLayeredWindowAttributes
MessageBoxA
LoadStringW
DestroyMenu
FillRect
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
PostQuitMessage
IsDialogMessageW
CheckDlgButton
PostThreadMessageW
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetSubMenu
GetMenuState
GetMenuStringW
OffsetRect
IntersectRect
GetWindowRect
GetSystemMetrics
IsIconic
GetWindowPlacement
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongPtrW
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongPtrW
SetWindowRgn
GetMenuItemInfoW
SetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetClientRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
LoadStringA
LoadCursorW
SetRect
SetCursor
EndDialog
DialogBoxParamW
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
RealChildWindowFromPoint
GetWindow
GetClassNameW
GetDesktopWindow
PtInRect
ClientToScreen
SetWindowTextW
GetFocus
GetDlgCtrlID
CharUpperW
DestroyIcon
GetWindowTextLengthW
GetWindowTextW
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
SendMessageW
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetDlgItemTextW

gdi32

GetTextFaceW
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
CreateFontIndirectW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
DeleteObject
GetDeviceCaps
CreateDCW
CopyMetaFileW
DeleteDC
GetClipBox

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW

shell32

DragQueryFileW
SHAppBarMessage
SHBrowseForFolderW
DragFinish
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
SHGetFileInfoW

ole32

OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysAllocString
VariantInit
VarBstrFromDate
VariantChangeType
VariantCopy
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
LoadTypeLi
SysFreeString

shlwapi

StrFormatKBSizeW
PathRemoveFileSpecW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW

gdiplus

GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat

msimg32

TransparentBlt
AlphaBlend

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

uxtheme

CloseThemeData
DrawThemeBackground
DrawThemeText
DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
OpenThemeData
GetThemePartSize

Exports

Exports

IDP_CloseImage
IDP_Free
IDP_FreeMetadata
IDP_GetAudio
IDP_GetColorProfile
IDP_GetColorProfileW
IDP_GetImageInfo
IDP_GetMetadataList
IDP_GetPageInfo
IDP_GetPlugInInfo
IDP_GetSupportedMetadata
IDP_Help
IDP_Init
IDP_IsAutoRotated
IDP_OpenImage
IDP_OpenImageW
IDP_PageDecode
IDP_PageDecodeStart
IDP_PageDecodeStep
IDP_PageDecodeStop
IDP_ShowPlugInDialog

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

928467c52c5e842406ab1e5ec2874673

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

shlwapi

gdiplus

msimg32

oleacc

imm32

winmm

version

uxtheme

Exports

Exports

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 90KB - Virtual size: 277KB

.pdata Size: 150KB - Virtual size: 149KB

_RDATA Size: 78KB - Virtual size: 78KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 69KB - Virtual size: 69KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 90KB - Virtual size: 277KB

.pdata
Size: 150KB - Virtual size: 149KB

_RDATA
Size: 78KB - Virtual size: 78KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 69KB - Virtual size: 69KB