60fe4125decaac48e4aeb411c8c21118506a2a8ae84d076539c29cf8a5747767

Sharing

Copy URL Twitter E-mail

General

Target

60fe4125decaac48e4aeb411c8c21118506a2a8ae84d076539c29cf8a5747767
Size

7.4MB
MD5

ae42e8b3c981e65b00954ff202e6ee03
SHA1

51e1f7bd7a80f0d2da7536a8747423e0df2b23bc
SHA256

60fe4125decaac48e4aeb411c8c21118506a2a8ae84d076539c29cf8a5747767
SHA512

08ee00e1c012abb89b272793b677eab6786baea83409598149d63cc054c6f6a642026793b70e3c7be05d2a226000606840deab7b7e654e4cb0918ba7ea5eceec
SSDEEP

196608:cHi4MH2aHdA1rbDVHrQfIhPFLOyomFHKnPU:cHi4MH2aHdANbNrcIhPF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60fe4125decaac48e4aeb411c8c21118506a2a8ae84d076539c29cf8a5747767

Files

60fe4125decaac48e4aeb411c8c21118506a2a8ae84d076539c29cf8a5747767
.exe windows:6 windows x64 arch:x64

fffd50e75e8688512213e571c7288d62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineW
CreateThread
ExitThread
IsDebuggerPresent
IsProcessorFeaturePresent
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
ExitProcess
HeapQueryInformation
VirtualAlloc
VirtualQuery
SetStdHandle
GetStdHandle
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
SetEnvironmentVariableA
GetExitCodeThread
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
VirtualFree
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
CreateTimerQueue
GetUserDefaultLCID
VirtualProtect
GetFileTime
GetProfileIntW
SetErrorMode
SearchPathW
GetWindowsDirectoryW
GetTempFileNameW
GetVolumeInformationW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
CompareStringW
GetCurrentDirectoryW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetThreadLocale
GlobalGetAtomNameW
VerifyVersionInfoW
VerSetConditionMask
GlobalFlags
SetThreadPriority
lstrcmpA
GetVersionExW
GetCurrentThread
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
GlobalSize
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
FreeResource
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
FileTimeToSystemTime
SetLastError
FileTimeToLocalFileTime
InitializeCriticalSectionAndSpinCount
CreateSemaphoreW
ReleaseSemaphore
SetUnhandledExceptionFilter
GetLogicalDriveStringsW
GetDriveTypeW
ResumeThread
FindResourceExW
LocalAlloc
MoveFileExW
CreateProcessW
MulDiv
DeleteFileA
AreFileApisANSI
GetSystemTime
LocalFree
GetTempPathA
GetVersionExA
OutputDebugStringA
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
GetTempPathW
FlushFileBuffers
HeapValidate
HeapCreate
GetFileAttributesA
FormatMessageW
FormatMessageA
GetSystemTimeAsFileTime
UnlockFileEx
GetTickCount
LockFile
UnlockFile
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateMutexW
CreateFileA
GetFullPathNameA
GetFullPathNameW
GetCurrentProcessId
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32NextW
Module32FirstW
Process32FirstW
GetLocalTime
GetProcAddress
GetPrivateProfileIntW
WritePrivateProfileStringW
lstrlenW
GetModuleFileNameW
TerminateProcess
GetFileAttributesW
LoadLibraryW
OpenProcess
GetPrivateProfileStringW
GetModuleHandleW
OutputDebugStringW
FreeLibrary
DuplicateHandle
GetFileType
CreateDirectoryW
GetCurrentProcess
SystemTimeToFileTime
SetFilePointer
GetFileSizeEx
CopyFileW
WideCharToMultiByte
lstrcpyW
SetFileAttributesW
DeleteFileW
GetFileAttributesExW
FindNextFileW
lstrcatW
RemoveDirectoryW
FindClose
ReadFile
WriteFile
SetEndOfFile
FindFirstFileW
GetFileSize
GetTickCount64
GetDiskFreeSpaceExW
CreateFileW
Sleep
lstrcpynW
WaitForMultipleObjects
InitializeCriticalSection
GetLocaleInfoW
CloseHandle
DeleteCriticalSection
lstrcmpiW
DecodePointer
CreateEventW
LockResource
ResetEvent
EnterCriticalSection
HeapSize
GetLastError
RaiseException
InitializeCriticalSectionEx
MultiByteToWideChar
LeaveCriticalSection
HeapDestroy
SizeofResource
HeapReAlloc
GetProcessHeap
SetEvent
WaitForSingleObject
HeapFree
HeapAlloc
LoadResource
FindResourceW

user32

MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassLongPtrW
SetWindowLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExW
GetClassInfoExW
RegisterClassW
DefWindowProcW
GetMessageTime
GetMessagePos
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
RemoveMenu
InsertMenuW
GetMonitorInfoW
GetMenuState
GetMenuStringW
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
CloseClipboard
SetClipboardData
EmptyClipboard
SetCursorPos
SetRect
BringWindowToTop
EnableWindow
SendMessageW
SetLayeredWindowAttributes
WaitMessage
IsWindowEnabled
SendDlgItemMessageA
ReleaseDC
GetDC
MapVirtualKeyW
GetKeyNameTextW
IsWindow
GetClassNameW
FillRect
UpdateWindow
DrawStateW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetSystemMenu
GetWindowRect
RegisterWindowMessageW
DrawIcon
GetSystemMetrics
IsIconic
GetLastActivePopup
SetForegroundWindow
FindWindowW
ShowWindow
MoveWindow
CheckDlgButton
SetWindowTextW
IsDialogMessageW
DestroyMenu
GetMenuItemInfoW
SystemParametersInfoW
IntersectRect
PostQuitMessage
GetClassInfoW
AppendMenuW
GetMenuItemCount
ClientToScreen
SetCursor
LoadImageW
SetCapture
ShowOwnedPopups
SetWindowRgn
GetSysColorBrush
OffsetRect
IsRectEmpty
DrawIconEx
SetWindowContextHelpId
MapDialogRect
GetMessageW
IsZoomed
SetRectEmpty
GetMenuItemID
RealChildWindowFromPoint
RedrawWindow
PeekMessageW
TranslateMessage
PostMessageW
UnregisterClassW
CopyRect
CallWindowProcW
DrawFrameControl
CallWindowProcA
SetWindowLongPtrW
GetSysColor
GetWindowLongW
InvalidateRect
DrawFocusRect
ToUnicodeEx
PtInRect
GetClientRect
GetWindowLongPtrW
GetParent
DrawTextW
LoadIconW
IsWindowVisible
GetCursorPos
EnableMenuItem
LoadMenuW
GetSubMenu
GetKeyState
KillTimer
SetTimer
MessageBoxW
GetActiveWindow
ReleaseCapture
GetDesktopWindow
InflateRect
DrawEdge
WindowFromPoint
LockWindowUpdate
GetDoubleClickTime
GetIconInfo
CopyIcon
EnumDisplayMonitors
TrackMouseEvent
CharUpperW
GetAsyncKeyState
DeleteMenu
MessageBeep
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
ScreenToClient
CopyImage
LoadCursorW
GetFocus
DestroyIcon
SetParent
GetWindowThreadProcessId
OpenClipboard
ModifyMenuW
DestroyAcceleratorTable
SetClassLongPtrW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
GetUpdateRect
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
IsClipboardFormatAvailable
SubtractRect
PostThreadMessageW
FrameRect
CharUpperBuffW
RegisterClipboardFormatW
InvertRect
HideCaret
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
DispatchMessageW

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
GetBkColor
CreatePolygonRgn
Polygon
Polyline
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
CreateDIBSection
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
GetRgnBox
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW
PatBlt
CreateRectRgnIndirect
GetObjectW
GetStockObject
CreateBitmap
GetTextExtentPoint32W
DeleteObject
GetTextMetricsW
SetTextColor
SetBkColor
ExtTextOutW
GetTextColor
CreateSolidBrush
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
CloseServiceHandle
OpenSCManagerW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
OpenProcessToken
RegSetValueExW
RegCloseKey
ControlService
RegOpenKeyExW
RegGetValueW
RegDeleteValueW
QueryServiceStatus
QueryServiceConfigW
OpenServiceW

shell32

DragQueryFileW
ShellExecuteW
Shell_NotifyIconW
ord165
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
DragFinish
SHFileOperationW
SHAppBarMessage
SHGetFileInfoW

comctl32

ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragMove
ImageList_EndDrag
ImageList_DragShowNolock
InitCommonControlsEx

shlwapi

PathAddBackslashW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathCombineW
PathIsDirectoryW
PathRemoveBackslashW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground
DrawThemeText
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
GetThemePartSize

ole32

OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoInitializeEx
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoDisconnectObject
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoInitialize
CoCreateInstance
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
CoUninitialize

oleaut32

VariantChangeType
VariantInit
SysAllocStringLen
VariantClear
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocString
SafeArrayDestroy
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime

oledlg

OleUIBusyW

gdiplus

GdipDisposeImage
GdipCloneImage
GdipGetImageHeight
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipGetImageWidth
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdiplusStartup
GdipGetImagePixelFormat

winhttp

WinHttpSendRequest
WinHttpConnect
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpCrackUrl
WinHttpOpen
WinHttpSetTimeouts
WinHttpAddRequestHeaders
WinHttpReadData
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpQueryDataAvailable

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

dbghelp

MiniDumpWriteDump

rocketctl

GetTorrentObj
msc_gettaskinfo_by_file
msc_gettasklist
msc_port_open_status
msc_setmaxtransferrate
msc_stop
msc_getmaxtransferrate
msc_init
msc_getprogress
msc_getseed
msc_delete
msc_restart
msc_gettaskinfobyname
msc_rebuild2
msc_commitex
ReleaseTorrentObj

ws2_32

send
__WSAFDIsSet
socket
recv
setsockopt
shutdown
htons
WSAGetLastError
select
inet_addr
connect
ioctlsocket
WSACleanup
WSAStartup
closesocket

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fffd50e75e8688512213e571c7288d62

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

winhttp

userenv

dbghelp

rocketctl

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 61KB - Virtual size: 138KB

.pdata Size: 177KB - Virtual size: 177KB

.tls Size: 512B - Virtual size: 25B

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 71KB - Virtual size: 70KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 61KB - Virtual size: 138KB

.pdata
Size: 177KB - Virtual size: 177KB

.tls
Size: 512B - Virtual size: 25B

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 71KB - Virtual size: 70KB