69509c218cae2f20ba0f18333d1a016c

Sharing

Copy URL Twitter E-mail

General

Target

69509c218cae2f20ba0f18333d1a016c
Size

6.8MB
MD5

69509c218cae2f20ba0f18333d1a016c
SHA1

c11d1c4ea373d0d85821091bb0997e31faa26d09
SHA256

d83b143e6a6ddcfa0a9a1d6d98a522ab2b54c0ab1ed2e81c0d8bde9a9f1c3bbd
SHA512

0ea20c09aa0afbe98bf10fbfa33a21999a8442b1e6459955f60e327d2847d0c4e52ed8900989ae91adcad9de98377821d70fb1c91162edd3bf2d0ca5cc03fc51
SSDEEP

98304:oYBOQJF2ZNUnGZVl7QDo1PMIRTvERwXLConEHRMAixDnqaY:lOrvlR7vMIMwXtAKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69509c218cae2f20ba0f18333d1a016c

Files

69509c218cae2f20ba0f18333d1a016c
.exe windows:6 windows x86 arch:x86

5761160b1bf96a064d69fdc123c676e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetPhysicallyInstalledSystemMemory
SwitchToThread
LocalFree
FormatMessageA
GetFileInformationByHandle
GetFileAttributesA
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
IsDBCSLeadByte
GetFullPathNameA
SetEndOfFile
TlsSetValue
HeapFree
SetLastError
SetEvent
TlsAlloc
HeapAlloc
GetProcessHeap
TlsGetValue
TlsFree
CreateEventA
LoadLibraryExA
SetErrorMode
GetModuleFileNameA
CreateDirectoryW
FindFirstFileW
GetFileAttributesExA
GetFullPathNameW
FindNextFileW
TerminateProcess
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
GetEnvironmentVariableA
CreateFileW
GetFileAttributesW
DuplicateHandle
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
SystemTimeToFileTime
CreateProcessA
GetFileType
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
QueryPerformanceFrequency
QueryPerformanceCounter
GetACP
SetConsoleCtrlHandler
ResetEvent
ExpandEnvironmentStringsW
GetStdHandle
FlushViewOfFile
InitializeCriticalSectionAndSpinCount
CreateThread
GetTickCount
HeapSize
GetCommandLineW
GetCommandLineA
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileSizeEx
ReadConsoleW
GetConsoleMode
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
FlushFileBuffers
SetFilePointerEx
VirtualQuery
VirtualProtect
VirtualAlloc
SetStdHandle
WriteConsoleW
GetModuleFileNameW
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
LeaveCriticalSection
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetDriveTypeW
LoadLibraryExW
RtlUnwind
RaiseException
InitializeSListHead
GetStartupInfoW
GetVersionExA
GetSystemDirectoryA
GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
WriteFile
SetFilePointer
ReadFile
GetLastError
OutputDebugStringA
LoadLibraryA
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
CreateFileMappingA
EnterCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCPInfo
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
CloseHandle
GetFileSize
CreateFileA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
MoveFileA
GetPrivateProfileStringA
lstrlenA
GetCurrentProcess
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
GetSystemTimeAsFileTime
Sleep
SleepConditionVariableSRW
WakeAllConditionVariable
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFileInformationByHandleEx
GetModuleHandleW
AreFileApisANSI
GetTempPathW
FindFirstFileExW
GetLocaleInfoEx
SetFileAttributesA
FindClose
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
ReleaseSemaphore
GetLocaleInfoA
CompareStringA
lstrlenW
GlobalLock
GlobalUnlock
ExitProcess
FreeLibrary

user32

GetCursorPos
ScreenToClient
FindWindowA
LoadIconA
SystemParametersInfoA
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
GetSystemMetrics
LoadStringA
MessageBoxA
DefWindowProcA
RegisterClassA
SetWindowPos
IsWindow
DestroyWindow
MoveWindow
GetMenu
InvalidateRect
GetClientRect
AdjustWindowRectEx
SetRect
GetWindowLongA
SetWindowLongA
LoadCursorA
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
CharNextExA
CharPrevExA
CharPrevA
PostQuitMessage
CreateWindowExA

gdi32

GetTextExtentPoint32A
TextOutA
CreateDIBSection
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
DeleteObject
CreateFontIndirectA
EnumFontFamiliesExA
GetStockObject

shell32

ShellExecuteA
ShellExecuteW
SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString
VariantClear

advapi32

RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
CryptReleaseContext
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegLoadKeyA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegConnectRegistryA
RegSaveKeyA
RegCloseKey

winmm

timeEndPeriod
waveOutPrepareHeader
waveOutUnprepareHeader
timeGetTime
waveOutOpen
waveOutClose
waveOutWrite
waveOutReset
timeBeginPeriod
timeGetDevCaps

d3d9

Direct3DCreate9

d3dx9_43

D3DXVec2Normalize
D3DXMatrixDeterminant
D3DXMatrixLookAtRH
D3DXVec3Project
D3DXMatrixPerspectiveFovRH
D3DXVec3TransformNormal
D3DXMatrixOrthoOffCenterRH
D3DXCreateMatrixStack
D3DXMatrixRotationX
D3DXCreateSphere
D3DXVec2Transform
D3DXGetFVFVertexSize
D3DXMatrixScaling
D3DXCreateTexture
D3DXCreateTextureFromFileInMemoryEx
D3DXPlaneNormalize
D3DXQuaternionRotationYawPitchRoll
D3DXVec4Transform
D3DXMatrixInverse
D3DXMatrixRotationYawPitchRoll
D3DXQuaternionMultiply
D3DXQuaternionRotationAxis
D3DXMatrixRotationQuaternion
D3DXMatrixTranslation
D3DXMatrixMultiply
D3DXMatrixRotationZ
D3DXVec3TransformCoord
D3DXVec3Normalize
D3DXLoadSurfaceFromSurface
D3DXMatrixRotationAxis
D3DXVec3Transform
D3DXMatrixTranspose
D3DXMatrixOrthoRH
D3DXCreateCylinder

imm32

ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmNotifyIME
ImmGetOpenStatus

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

dinput8

DirectInput8Create

ws2_32

select
__WSAFDIsSet
recv
closesocket
send
socket
WSAGetLastError
WSAStartup
WSACleanup
htons
inet_addr
gethostbyname
connect
ioctlsocket

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 392KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5761160b1bf96a064d69fdc123c676e4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

advapi32

winmm

d3d9

d3dx9_43

imm32

version

dinput8

ws2_32

Sections

.text Size: 4.5MB - Virtual size: 4.5MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 392KB - Virtual size: 1.4MB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 215KB - Virtual size: 215KB

.text
Size: 4.5MB - Virtual size: 4.5MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 392KB - Virtual size: 1.4MB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 215KB - Virtual size: 215KB