370f40617a01e248ad69a01ee97377ed085d76bc2fb78fedf6e21f0864b9d289

Sharing

Copy URL

Twitter E-mail

General

Target

370f40617a01e248ad69a01ee97377ed085d76bc2fb78fedf6e21f0864b9d289
Size

2.7MB
MD5

1ada020b1b10e89046f0142b59c3d88b
SHA1

9c76dc39bba48af38658bf27781e0c09996afbfd
SHA256

370f40617a01e248ad69a01ee97377ed085d76bc2fb78fedf6e21f0864b9d289
SHA512

3b494344e86b0990c0d33b6e16c8749ba4f4e6f0e9634058cc936b6f0e25b9fbff490ec51fa30270368a66ac2d6a744709a5101a11fdff801c5b484d768f810c
SSDEEP

49152:6tJqYLFJBuYCNwkcYFbm6AICZxyPcZU4w5uIvT+J9Z:6tkzYCnRuS4w5uIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
370f40617a01e248ad69a01ee97377ed085d76bc2fb78fedf6e21f0864b9d289

Files

370f40617a01e248ad69a01ee97377ed085d76bc2fb78fedf6e21f0864b9d289
.exe windows:4 windows x86

4938bb73774b55d4aeec27d367d4e3e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

connect
select
__WSAFDIsSet
inet_ntoa
WSAGetLastError
gethostbyname
WSAStartup
WSACleanup
ioctlsocket
htons
send
recv
closesocket
shutdown
socket

ddraw

DirectDrawCreate

dinput

DirectInputCreateA

winmm

mciGetErrorStringA
mmioClose
mmioAscend
mmioRead
mmioDescend
mmioOpenA
mmioSeek
mmioSetInfo
mmioAdvance
mmioGetInfo
timeGetTime
mciSendCommandA

dsound

ord1

ijl11

ord5
ord2
ord3

desdll

?DecryptFunc@@YGHPAD0@Z

user32

GetClientRect
SetTimer
GetClassNameA
GetWindowTextA
GetWindowLongA
EnumWindows
EndDialog
SetDlgItemInt
GetDlgItemTextA
CheckDlgButton
IsDlgButtonChecked
CharLowerA
DialogBoxParamA
CreateDialogParamA
CheckRadioButton
EmptyClipboard
GetFocus
PtInRect
SetWindowTextW
GetActiveWindow
GetDC
ReleaseDC
GetDlgItem
GetWindowTextW
OpenClipboard
SetClipboardData
CloseClipboard
CallWindowProcW
SetWindowsHookExA
CallNextHookEx
DestroyWindow
CreateWindowExW
SetWindowLongW
SetFocus
FindWindowExA
GetWindowThreadProcessId
GetForegroundWindow
KillTimer
SetCursor
BeginPaint
EndPaint
GetAsyncKeyState
DefWindowProcA
ReleaseCapture
SetCapture
CreateWindowExA
SetForegroundWindow
UpdateWindow
LoadIconA
RegisterClassExA
GetQueueStatus
PeekMessageA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetWindowLongA
MoveWindow
ClientToScreen
LoadImageA
SetRect
IsWindow
PostMessageA
FindWindowA
PostQuitMessage
MessageBoxA
SetWindowTextA
SendMessageA
wsprintfA
CharUpperA
ShowWindow
GetSystemMetrics
GetWindowRect

ole32

CoUninitialize
CoInitialize
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString

oleaut32

SysAllocString
VariantInit
VariantClear
CreateErrorInfo
VariantChangeType
SetErrorInfo
GetErrorInfo
SysStringByteLen
SysAllocStringByteLen
SysFreeString

kernel32

LocalFree
FindFirstFileA
GlobalGetAtomNameA
lstrlenW
GetLocaleInfoW
SetEnvironmentVariableA
SetConsoleCtrlHandler
GetExitCodeProcess
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetHandleCount
GetFileType
SetStdHandle
FlushFileBuffers
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetOEMCP
GetCurrentThread
SetLastError
TlsFree
TlsAlloc
HeapSize
CompareStringW
CompareStringA
GetCPInfo
LCMapStringW
LCMapStringA
FatalAppExitA
HeapReAlloc
GetStartupInfoA
GetModuleHandleA
HeapAlloc
RaiseException
CreateDirectoryA
MoveFileA
ResumeThread
ExitThread
TlsGetValue
TlsSetValue
HeapFree
GetSystemTime
GetTimeZoneInformation
ExitProcess
RtlUnwind
InterlockedExchange
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
WinExec
FreeResource
ReleaseMutex
CreateFileMappingA
MapViewOfFile
CreateMutexA
GetTempPathA
GetTempFileNameA
GetCurrentDirectoryA
WriteProfileStringA
CreateProcessA
UnmapViewOfFile
GetFileAttributesExA
FileTimeToSystemTime
SetEndOfFile
GetFileSize
GetFileAttributesA
GetSystemDefaultLangID
RemoveDirectoryA
FindNextFileA
FindClose
GetPrivateProfileIntA
FindResourceA
LoadResource
LockResource
SizeofResource
SetFileAttributesA
DeleteFileA
GetACP
WideCharToMultiByte
ReadFile
SetFilePointer
CreateThread
TerminateProcess
OpenProcess
lstrcatA
lstrcpyA
lstrlenA
QueryDosDeviceA
lstrcmpiA
GetLogicalDriveStringsA
CloseHandle
Sleep
GetTickCount
SetEvent
lstrcmpA
SetThreadPriority
GetThreadPriority
GetVersion
GetLocalTime
GetCommandLineA
InterlockedDecrement
InterlockedIncrement
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
GlobalLock
WaitForSingleObject
OpenEventA
CreateEventA
GetPrivateProfileStringA
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
WriteFile
FreeConsole
GetStdHandle
AllocConsole
InitializeCriticalSection
DeleteCriticalSection
WritePrivateProfileStringA
GlobalFree
GlobalAlloc
GetCurrentThreadId
TerminateThread
GetModuleFileNameA
CreateFileA
ReadProcessMemory
Process32Next
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
VirtualProtectEx
ResetEvent
GlobalUnlock
CopyFileA

advapi32

CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA

dbghelp

MiniDumpWriteDump

gdi32

DeleteDC
GetObjectA
DeleteObject
GetPixel
CreateFontA
TextOutA
SetPixel
SetTextColor
CreateRectRgn
SetBkMode
SetTextAlign
GetDeviceCaps
CreateCompatibleDC
SelectObject
TextOutW
StretchBlt

shell32

ShellExecuteA

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 103.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4938bb73774b55d4aeec27d367d4e3e3

Headers

File Characteristics

Imports

wsock32

ddraw

dinput

winmm

dsound

ijl11

desdll

user32

ole32

oleaut32

kernel32

advapi32

dbghelp

gdi32

shell32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 124KB - Virtual size: 121KB

.data Size: 136KB - Virtual size: 103.8MB

.rsrc Size: 120KB - Virtual size: 119KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 124KB - Virtual size: 121KB

.data
Size: 136KB - Virtual size: 103.8MB

.rsrc
Size: 120KB - Virtual size: 119KB