86418418fceea3575be3f653c893ebb18b647b84a25f456a8efacc301bb216b1

Sharing

Copy URL

Twitter E-mail

General

Target

86418418fceea3575be3f653c893ebb18b647b84a25f456a8efacc301bb216b1
Size

6.7MB
MD5

2f4a65e4b5fe02a29e34ff2c345f8d3b
SHA1

6811880c2c4f8be2c6d2192291f68a570bd9ec04
SHA256

86418418fceea3575be3f653c893ebb18b647b84a25f456a8efacc301bb216b1
SHA512

dc4e374dce6937c6eeeceb272905baf1aa5aa0b0a6f262eecd9e4173ad726bfa4220f016699a737088a02c35efb20d4b7f03961578b92442574e433c6c490bc3
SSDEEP

98304:60U8DDpzNyUsUyRPCgltYDLlpdPmyJLsZ6NSEFHaM/YWqVc5s6:FdpzAP9ltYD9PmWYZI/4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86418418fceea3575be3f653c893ebb18b647b84a25f456a8efacc301bb216b1

Files

86418418fceea3575be3f653c893ebb18b647b84a25f456a8efacc301bb216b1
.exe windows:6 windows x86 arch:x86

ae653c68c2b693d8bade03b8a9a23b46

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
QueryPerformanceCounter
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
Sleep
GetSystemInfo
GetLastError
ReadProcessMemory
GetCurrentProcess
Module32Next
Module32First
GetCurrentProcessId
GetTickCount
GetCurrentDirectoryW
MultiByteToWideChar
TerminateProcess
WriteConsoleW
HeapSize
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetFileSizeEx
WriteFile
FreeLibrary
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
VirtualQuery
VirtualProtect
VirtualAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetStdHandle
GetDriveTypeW
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
RemoveDirectoryA
OpenProcess
GlobalFree
GetModuleFileNameA
DeleteFileA
GetPrivateProfileStringA
lstrlenA
GetCurrentDirectoryA
MoveFileA
CreateDirectoryA
GetFileAttributesA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
SetFilePointer
CreateToolhelp32Snapshot
HeapFree
GetProcessHeap
HeapAlloc
CloseHandle
ExitProcess
LoadLibraryExW
InterlockedPushEntrySList
RaiseException
RtlUnwind
SetFilePointerEx
FlushFileBuffers
GetExitCodeThread
CreateThread
SwitchToThread
FlushViewOfFile
GetStdHandle
ExpandEnvironmentStringsW
SetConsoleCtrlHandler
GetACP
GetSystemDirectoryA
GetTimeZoneInformation
GetVersionExA
ReadFile
OutputDebugStringA
WinExec
GetModuleHandleA
GetCurrentThread
SetUnhandledExceptionFilter
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSize
GlobalAlloc
GetConsoleMode
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessTimes
MoveFileW
GetSystemTime
GetFileType
CreateProcessA
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryW
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
SetCurrentDirectoryA
GetVersion
DuplicateHandle
GetFileAttributesW
GetEnvironmentVariableA
CreatePipe
SetEnvironmentVariableW
SetFileTime
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
GetFileAttributesExA
FindFirstFileW
CreateDirectoryW
SetErrorMode
LoadLibraryExA
TlsFree
TlsGetValue
TlsAlloc
SetLastError
TlsSetValue
SetEndOfFile
GetFullPathNameA
IsDBCSLeadByte
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetFileInformationByHandle
WaitNamedPipeW
PeekNamedPipe
GetModuleFileNameW
InitializeSListHead
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
CreateFileW
IsProcessorFeaturePresent
HeapValidate
GetCPInfo
SetFileAttributesA
GetStringTypeW
GetModuleHandleW
GetSystemTimeAsFileTime
DeviceIoControl
CreateEventA
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
GetTempPathW
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
QueryPerformanceFrequency
EncodePointer
DecodePointer
LocalFree
InitializeCriticalSectionEx
LCMapStringEx
CreateFileA

user32

SetFocus
MoveWindow
IsWindow
DestroyWindow
UnregisterClassA
MessageBoxA
InvalidateRect
GetDC
FillRect
ReleaseDC
PeekMessageA
ClientToScreen
OffsetRect
SetRect
CharPrevA
GetAsyncKeyState
PostQuitMessage
GetCursorPos
ScreenToClient
FindWindowA
CreateWindowExA
GetClientRect
UpdateWindow
FlashWindowEx
GetKeyState
LoadImageA
DestroyCursor
ShowCursor
SetCursor
SetCursorPos
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
GetCapture
GetSystemMetrics
LoadStringA
RegisterClassA
GetMenu
AdjustWindowRectEx
GetWindowLongA
SetWindowLongA
LoadCursorA
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
CharNextExA
CharPrevExA
SystemParametersInfoA
ShowWindow
SetWindowPos
RegisterClassExA
DefWindowProcA
LoadIconA

gdi32

GetCharABCWidthsFloatW
TextOutW
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectA
TextOutA
CreateDIBSection
SetTextColor
SetBkMode
SetBkColor
SelectObject
DeleteDC
CreateCompatibleDC
EnumFontFamiliesExA
GetStockObject
StretchBlt
CreateSolidBrush
GetTextExtentPoint32A

advapi32

CryptGenRandom
RegCreateKeyA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyExW
RegSetValueExW
CryptReleaseContext
RegEnumKeyExA
RegSaveKeyA
RegConnectRegistryA
RegDeleteValueA
RegEnumValueA
RegQueryInfoKeyA
RegLoadKeyA
RegSetValueExA
RegQueryValueA
RegFlushKey
RegCreateKeyExA
CryptAcquireContextA

shell32

SHGetSpecialFolderPathA
SetCurrentProcessExplicitAppUserModelID
ShellExecuteW
ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoInitializeEx

oleaut32

SysFreeString
VariantClear

winmm

timeGetTime
timeEndPeriod
timeGetDevCaps
timeBeginPeriod

d3d8

Direct3DCreate8

iphlpapi

GetAdaptersInfo
GetPerAdapterInfo

imm32

ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmNotifyIME

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

imagehlp

StackWalk
GetTimestampForLoadedLibrary
EnumerateLoadedModules

mss32

_AIL_set_stream_volume_levels@12
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_file_type@8
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_mem_free_lock@4

dinput8

DirectInput8Create

ws2_32

inet_addr
gethostbyname
htons
WSACleanup
WSAStartup
socket
send
select
recv
ioctlsocket
connect
closesocket
WSAGetLastError
__WSAFDIsSet

ddraw

DirectDrawCreate

winhttp

WinHttpConnect
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpOpen
WinHttpOpenRequest
WinHttpSendRequest

shlwapi

PathIsRelativeA

libcef

cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_browser_host_create_browser
cef_command_line_get_global
cef_execute_process
cef_string_multimap_alloc
cef_string_multimap_free
cef_string_map_value
cef_string_utf16_clear
cef_string_utf8_clear
cef_string_utf16_to_utf8
cef_string_utf16_cmp
cef_string_utf8_to_utf16
cef_string_utf16_set
cef_string_userfree_utf16_free
cef_string_list_alloc
cef_string_list_free
cef_register_extension
cef_string_map_free
cef_initialize
cef_shutdown
cef_run_message_loop
cef_api_hash
cef_log
cef_v8context_get_current_context
cef_string_map_alloc

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 484KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae653c68c2b693d8bade03b8a9a23b46

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

d3d8

iphlpapi

imm32

version

imagehlp

mss32

dinput8

ws2_32

ddraw

winhttp

shlwapi

libcef

Exports

Exports

Sections

.text Size: 4.5MB - Virtual size: 4.5MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 484KB - Virtual size: 1.7MB

.data1 Size: 2KB - Virtual size: 2KB

.rsrc Size: 155KB - Virtual size: 154KB

.reloc Size: 256KB - Virtual size: 255KB

.text
Size: 4.5MB - Virtual size: 4.5MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 484KB - Virtual size: 1.7MB

.data1
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 155KB - Virtual size: 154KB

.reloc
Size: 256KB - Virtual size: 255KB