6bbf10668beaeb32288d8b8c677dccb4d57eb2ace20547021304e7d3d002f7ec

Sharing

Copy URL Twitter E-mail

General

Target

6bbf10668beaeb32288d8b8c677dccb4d57eb2ace20547021304e7d3d002f7ec
Size

2.2MB
MD5

f06c54f7af9542106cf5203850d40ec7
SHA1

f6f83a137f28b87bdbce8844c1f24f6bb7ef4d98
SHA256

6bbf10668beaeb32288d8b8c677dccb4d57eb2ace20547021304e7d3d002f7ec
SHA512

89b05705864569b151200ba53bdeb88a18f586a0dfb90563dc473765d9b18e4682ac8cac57d909867d4f6defbccf85f010198aa2f999751495cd75a6d538c750
SSDEEP

49152:DRbkZpN2ja+HCueanwYpivYn4Nvd5hW6hk9DQ2HcFh//4FaknHKUCn/bLdI:DRbkUjaMCMnwYpig4Nvd5hW6hk9E2Cg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bbf10668beaeb32288d8b8c677dccb4d57eb2ace20547021304e7d3d002f7ec

Files

6bbf10668beaeb32288d8b8c677dccb4d57eb2ace20547021304e7d3d002f7ec
.exe windows:5 windows x86 arch:x86

273756f54d8fa4efe435f4045e8f41f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

hy_comm_pos

ord5
ord12
ord30
ord31
ord4
ord11
ord9
ord1
ord7
ord29
ord8
ord10
ord2
ord6

hy_usb_pos

ord34
ord1
ord2
ord30
ord40
ord10
ord9
ord7
ord8
ord39
ord26
ord4
ord52
ord3
ord21
ord5
ord20
ord27
ord43
ord16
ord48
ord49
ord47
ord46
ord45
ord51
ord44
ord36
ord37
ord33
ord14
ord41
ord13
ord25
ord35
ord31
ord12
ord32
ord24
ord23
ord11
ord6
ord50
ord15

hypkb

ord1
ord7
ord6
ord8
ord9
ord10
ord2

hypkb_new

ord17
ord27
ord21
ord31
ord25
ord26
ord14
ord12
ord13
ord8
ord16
ord18
ord29
ord5
ord20
ord1
ord24
ord23
ord10
ord9
ord11
ord2
ord7
ord4
ord6
ord3
ord15
ord35
ord34
ord37
ord33
ord38
ord36
ord32
ord30
ord28
ord22

winio32

GetPortVal
InitializeWinIo
SetPortVal

wt6563_dll

ord5
ord3

kernel32

LCMapStringW
SetHandleCount
GetStdHandle
GetCurrentDirectoryW
HeapCreate
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
CompareStringW
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
lstrcmpW
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
FindResourceA
FreeResource
SetLastError
CopyFileA
GlobalSize
FormatMessageA
IsProcessorFeaturePresent
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
GetFullPathNameA
GetTempFileNameA
CreateFileA
GetFileSize
ReadFile
CloseHandle
GlobalReAlloc
WaitForSingleObject
CreateEventA
InterlockedDecrement
InterlockedIncrement
GetSystemWow64DirectoryA
GetLastError
GetSystemDirectoryA
GetTempPathA
GetModuleFileNameA
Sleep
GetLocaleInfoW
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalFree
LoadLibraryA
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetStringTypeW
IsValidLocale
TlsFree
EnumSystemLocalesA
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetDiskFreeSpaceA
ReplaceFileA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GetModuleHandleW
InterlockedExchange
ResumeThread
SetThreadPriority
FindNextFileA
GetFileTime
GetFileSizeEx
GetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExA
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
MoveFileA
IsValidCodePage
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
ExitProcess
CreateThread
ExitThread
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
GetDriveTypeW
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
RtlUnwind
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
GetNumberFormatA
GetWindowsDirectoryA
GetCurrentDirectoryA
SetErrorMode
lstrcpyA
GetSystemDirectoryW
GetOEMCP
GetCPInfo
LeaveCriticalSection
GetUserDefaultLCID
GlobalFlags
DeleteFileA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
GetProcAddress
LocalFree
CompareStringA
GetACP

user32

CharUpperBuffA
GetDoubleClickTime
SubtractRect
GetWindowRgn
SetCursorPos
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
DrawStateA
SetClassLongA
DestroyAcceleratorTable
DrawIconEx
GetIconInfo
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
GetTabbedTextExtentW
PostThreadMessageA
CreateMenu
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LoadAcceleratorsW
LockWindowUpdate
GetDCEx
UnionRect
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
UnregisterClassA
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorA
DestroyCursor
LoadCursorW
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetParent
GetSystemMenu
IsRectEmpty
IsZoomed
SystemParametersInfoA
GetMenuItemInfoA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadImageA
DestroyIcon
SetCursor
LoadAcceleratorsA
IsIconic
InsertMenuItemA
CreatePopupMenu
IntersectRect
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
GetMessageA
TranslateMessage
MapVirtualKeyA
GetKeyNameTextA
CharUpperA
GetSystemMetrics
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
RegisterWindowMessageA
LoadIconA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
CopyIcon
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
IsWindowVisible
ValidateRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
GetScrollPos
SetScrollPos
ScreenToClient
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetFocus
MoveWindow
SetWindowLongA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
SetRect
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetWindowRgn
ShowWindow
SetForegroundWindow
RegisterHotKey
GetUpdateRect
SetMenuDefaultItem
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsWindow
RedrawWindow
RegisterDeviceNotificationA
UpdateWindow
DeleteMenu
SetWindowPos
LoadMenuW
CloseClipboard
SetClipboardData
OpenClipboard
WaitMessage
IsClipboardFormatAvailable
SetPropA
RegisterClipboardFormatA
GetSubMenu
FillRect
LoadBitmapW
InflateRect
PtInRect
PostMessageA
KillTimer
PostQuitMessage
SetTimer
CloseWindow
GetSysColor
DrawIcon
FrameRect
CopyRect
GetCursorPos
GetDlgCtrlID
LoadIconW
ReleaseDC
GetDC
EndPaint
BeginPaint
GetWindowRect
ReleaseCapture
GetWindowLongA
WindowFromPoint
GetParent
SetCapture
GetCapture
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
EnableWindow
SendMessageA
GetWindowDC
OffsetRect

gdi32

CreatePatternBrush
CreateBitmap
SelectPalette
GetObjectType
CreateHatchBrush
PatBlt
CreateFontIndirectA
SetRectRgn
GetMapMode
DPtoLP
GetCharWidthA
StretchDIBits
GetTextMetricsA
GetBkColor
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateEllipticRgn
LPtoDP
Ellipse
GetViewportOrgEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetTextColor
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPoint32W
GetWindowOrgEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
Polyline
Polygon
SetDIBColorTable
SetPixel
OffsetRgn
EnumFontFamiliesExA
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
SetTextAlign
GetROP2
ExtSelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
CreatePen
CreateSolidBrush
Rectangle
GetLayout
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
BitBlt
SelectObject
CreateCompatibleDC
GetTextExtentPointA
CreateFontA
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
StretchBlt
GetObjectA
CreateDIBSection
ExtCreateRegion
CombineRgn
DeleteDC
DeleteObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateRectRgn
CreateCompatibleBitmap
GetStockObject
CreateRectRgnIndirect
GetTextExtentPoint32A
RoundRect
SetLayout

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter

advapi32

GetFileSecurityA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegOpenKeyExW
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
SetFileSecurityA
RegQueryValueA

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
SHAddToRecentDocs
ExtractIconA
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

ord17
ImageList_GetIconSize

shlwapi

PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
CoUninitialize
OleLockRunning
CLSIDFromString

oleaut32

SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
OleLoadPicture

oledlg

ord8

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipDrawImageI

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

273756f54d8fa4efe435f4045e8f41f5

Headers

DLL Characteristics

File Characteristics

Imports

version

hy_comm_pos

hy_usb_pos

hypkb

hypkb_new

winio32

wt6563_dll

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 359KB - Virtual size: 358KB

.data Size: 27KB - Virtual size: 58KB

.rsrc Size: 168KB - Virtual size: 167KB

.reloc Size: 183KB - Virtual size: 182KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 359KB - Virtual size: 358KB

.data
Size: 27KB - Virtual size: 58KB

.rsrc
Size: 168KB - Virtual size: 167KB

.reloc
Size: 183KB - Virtual size: 182KB