19601_166542317_90cb321d7bcc2a1067479560ad13a4372351b9aa57a6f82180f38ed7a48569fc_gom[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

19601_166542317_90cb321d7bcc2a1067479560ad13a4372351b9aa57a6f82180f38ed7a48569fc_gom.exe
Size

13.8MB
MD5

02e6a661c7edb67a6a762555385771d5
SHA1

e061e80c9fcc125f1e74fb1dbf82ad19b3b95260
SHA256

90cb321d7bcc2a1067479560ad13a4372351b9aa57a6f82180f38ed7a48569fc
SHA512

0dd7c01632afb9005a8ef8bb2f7c48b23b2e3f150445ea0fbb2d736292ebbd6f88f77dfe1f97abff6b90eec49c07c36fafeca1474bfd8e8115cc64ad991ecf46
SSDEEP

98304:KRoSlb0020nGTf1rkWpPO+pIcVYrF2W88mnKTD1hHpZxyUO4c2J/3l8pbfrrW5tH:KOzvrg2M2ojpcQidfrrWPPgeXSO

Score

1^/10

Malware Config

Signatures

Files

19601_166542317_90cb321d7bcc2a1067479560ad13a4372351b9aa57a6f82180f38ed7a48569fc_gom.exe
.exe windows:5 windows x86 arch:x86

214aa0d2228eb08fbc4d0faacb8e8d32

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0c:a9:bf:3d:23:32:b1:70:fa:8c:2a:0d:37:fd:77:ad
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

23/06/2021, 00:00

Not After

19/09/2023, 23:59

Subject

CN=GRETECH CORPORATION,OU=GRETECH CORPORATION,O=GRETECH CORPORATION,L=Shinjuku,ST=Tokyo,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

73:9c:32:16:fd:b1:cb:7d:3e:be:cf:39:e8:c0:f5:bd:41:e7:73:25:20:53:fe:36:f0:ec:69:1e:c3:cc:47:c0
Signer

Actual PE Digest

73:9c:32:16:fd:b1:cb:7d:3e:be:cf:39:e8:c0:f5:bd:41:e7:73:25:20:53:fe:36:f0:ec:69:1e:c3:cc:47:c0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetFileInformationByHandle
PeekNamedPipe
WriteConsoleW
GetFullPathNameA
SetEnvironmentVariableA
IsValidCodePage
GetStringTypeW
CreateSemaphoreW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
GetLogicalProcessorInformation
SignalObjectAndWait
MoveFileA
SetFileAttributesA
CreateDirectoryA
GetDriveTypeA
FindNextFileA
FindFirstFileA
UnhandledExceptionFilter
IsDBCSLeadByte
GetTimeFormatW
GetSystemTime
GetTempPathA
CreateFileMappingA
LockFileEx
HeapValidate
HeapCreate
GetFileAttributesA
FormatMessageA
UnlockFileEx
WaitForSingleObjectEx
FlushViewOfFile
TryEnterCriticalSection
HeapCompact
CreateMutexW
GetThreadPriority
ReleaseSemaphore
SetThreadContext
GetThreadContext
GlobalMemoryStatus
GetDiskFreeSpaceA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetVersionExA
InterlockedCompareExchange
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
SwitchToThread
lstrlenA
GetExitCodeThread
VirtualFree
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDateFormatW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
DeleteFileA
GetOEMCP
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
VirtualAlloc
RtlUnwind
GetCPInfo
AreFileApisANSI
GetModuleHandleExW
ExitProcess
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
MoveFileExW
IsProcessorFeaturePresent
IsDebuggerPresent
ExitThread
SearchPathW
SetErrorMode
GetSystemDefaultUILanguage
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetProfileIntW
GlobalGetAtomNameW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
SystemTimeToFileTime
ReplaceFileW
SetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetThreadLocale
MoveFileW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
SuspendThread
lstrcmpA
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
InitializeCriticalSectionAndSpinCount
EncodePointer
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetFileAttributesW
GetProcessId
SetThreadExecutionState
GetSystemDirectoryA
LoadLibraryExW
SetPriorityClass
RemoveDirectoryW
LocalAlloc
GetLocaleInfoW
GetLongPathNameW
TerminateThread
GetUserDefaultLCID
CreateThread
GetCurrentProcessId
CompareStringW
FindResourceExW
QueryPerformanceCounter
GetFullPathNameW
GlobalSize
GetACP
WideCharToMultiByte
GetLogicalDrives
SetCurrentDirectoryW
SetDllDirectoryW
GetDllDirectoryW
lstrcmpiW
DeleteTimerQueueEx
CreateTimerQueue
GetDiskFreeSpaceW
GetCommandLineW
GetCurrentDirectoryW
GetSystemDirectoryW
GetFileTime
SetThreadPriority
GetTempFileNameW
GetVersion
IsDBCSLeadByteEx
FreeResource
FindClose
FindNextFileW
FindFirstFileW
SetLastError
FlushInstructionCache
CreateTimerQueueTimer
DeleteTimerQueueTimer
ResetEvent
SetEvent
CreateEventW
GetExitCodeProcess
WaitForSingleObject
lstrcpynW
GetUserDefaultLangID
GetCurrentThread
IsBadWritePtr
VirtualQuery
FormatMessageW
SetUnhandledExceptionFilter
FlushFileBuffers
WriteFile
CreateFileA
ReadFile
SetFilePointer
GetFileSize
WaitForMultipleObjects
ResumeThread
GetDriveTypeW
OutputDebugStringA
DecodePointer
HeapSize
HeapDestroy
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
TerminateProcess
OpenProcess
GetWindowsDirectoryW
GetVolumeInformationW
GetSystemWindowsDirectoryW
GetQueuedCompletionStatus
ReadDirectoryChangesW
PostQueuedCompletionStatus
CreateIoCompletionPort
GetTempPathW
GetModuleHandleW
CreateNamedPipeW
WritePrivateProfileStringW
GetPrivateProfileStringW
GlobalFree
lstrcpyW
WinExec
MulDiv
CreateProcessW
WritePrivateProfileStringA
GetCurrentThreadId
GetTickCount
GetPrivateProfileIntW
DeviceIoControl
CreateFileW
GlobalMemoryStatusEx
GetProcessTimes
GetSystemTimeAsFileTime
GetSystemInfo
GetNativeSystemInfo
CopyFileW
LocalFree
VerifyVersionInfoW
VerSetConditionMask
OutputDebugStringW
GetVersionExW
GetUserDefaultUILanguage
LoadLibraryW
GetDiskFreeSpaceExW
GetLocalTime
GetFileAttributesW
CreateDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileW
lstrcmpW
MultiByteToWideChar
lstrlenW
CloseHandle
VirtualProtect
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetModuleFileNameW
Sleep
GetCurrentProcess
FreeLibrary
RaiseException
InitializeCriticalSectionEx
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource

user32

RemoveMenu
CheckMenuItem
CheckMenuRadioItem
EnableMenuItem
GetDoubleClickTime
PostThreadMessageW
PostQuitMessage
GetCapture
DrawEdge
DrawFocusRect
IsWindowEnabled
MessageBeep
wsprintfA
CharUpperW
GetMenu
AdjustWindowRectEx
SetLayeredWindowAttributes
GetClassInfoW
SubtractRect
AppendMenuW
GetNextDlgTabItem
SetMenuInfo
SetMenuItemInfoW
GetWindowDC
GetMenuItemRect
GetMenuInfo
DrawFrameControl
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
DestroyIcon
LoadMenuW
ModifyMenuW
GetMenuItemInfoW
GetMenuItemID
GetMenuStringW
EnumChildWindows
GetDlgCtrlID
GrayStringW
GetMenuCheckMarkDimensions
DrawTextExW
TabbedTextOutW
MonitorFromPoint
CheckDlgButton
DeleteMenu
UnionRect
MonitorFromRect
IsChild
CharNextW
RedrawWindow
CreateAcceleratorTableW
InvalidateRgn
GetDesktopWindow
DestroyAcceleratorTable
LoadCursorFromFileW
SetParent
GetClassLongW
SetClassLongW
DestroyCursor
MessageBoxW
UpdateWindow
GetClassInfoExW
RegisterClassExW
DestroyMenu
TrackPopupMenu
GetMenuItemCount
GetSubMenu
GetKeyState
GetWindow
GetTopWindow
GetCursor
GetClassNameW
GetWindowPlacement
EndDialog
EndPaint
BeginPaint
MoveWindow
GetForegroundWindow
DialogBoxIndirectParamW
RemovePropW
SetPropW
GetPropW
SetDlgItemTextW
MapWindowPoints
PeekMessageW
wvsprintfW
MonitorFromWindow
DrawTextW
CreateMenu
GetActiveWindow
SetActiveWindow
ShowCursor
ExitWindowsEx
mouse_event
InsertMenuA
MapVirtualKeyW
GetKeyNameTextW
RegisterHotKey
UnregisterHotKey
ShowScrollBar
IsProcessDPIAware
AnimateWindow
SetLastErrorEx
GetMenuState
GetAsyncKeyState
MapDialogRect
GetLastActivePopup
CreateDialogIndirectParamW
GetMessagePos
GetMessageTime
EnumWindows
ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplayDevicesW
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetMenu
ValidateRect
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
SetRectEmpty
GetScrollRange
IntersectRect
CharToOemBuffA
CharUpperA
OemToCharA
CharLowerA
CharToOemA
OemToCharBuffA
RegisterWindowMessageW
EnableWindow
PtInRect
IsRectEmpty
PostMessageW
DefWindowProcW
UnregisterClassW
GetClientRect
RegisterWindowMessageA
LoadCursorW
LoadIconW
RegisterClassW
GetWindowRect
GetWindowRgn
SetWindowRgn
GetDC
ReleaseDC
CopyRect
GetCursorPos
OffsetRect
SetCursor
IsWindow
IsWindowVisible
ClientToScreen
SetTimer
FindWindowW
SendMessageTimeoutW
ScreenToClient
SystemParametersInfoW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageW
GetSysColor
FillRect
GetSystemMetrics
GetParent
InvalidateRect
KillTimer
SetRect
SetCapture
ReleaseCapture
wsprintfW
FindWindowExW
UpdateLayeredWindow
GetWindowLongW
SetWindowLongW
TrackMouseEvent
BringWindowToTop
CallWindowProcW
SetFocus
LoadImageW
CreateWindowExW
DestroyWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
SetWindowTextW
ShowWindow
GetFocus
DrawIconEx
InflateRect
LoadBitmapW
LoadAcceleratorsW
IsIconic
IsDialogMessageW
GetMessageW
SendDlgItemMessageA
WindowFromPoint
DrawIcon
TranslateAcceleratorW
SetScrollInfo
GetScrollInfo
DispatchMessageW
WinHelpW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
CopyImage
EqualRect
GetCursorInfo
CreatePopupMenu
InsertMenuW
GetDlgItem
FindWindowA
SetMenuItemBitmaps
keybd_event
GetMonitorInfoW
EnumDisplayMonitors
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
IsZoomed
IsClipboardFormatAvailable
SetWindowContextHelpId
ShowOwnedPopups
RegisterClipboardFormatW
NotifyWinEvent
GetSysColorBrush
RealChildWindowFromPoint
CopyAcceleratorTableW
GetSystemMenu
GetNextDlgGroupItem
GetMenuDefaultItem
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
LockWindowUpdate
DrawStateW
IsMenu
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
SetCursorPos
CopyIcon
SetMenuDefaultItem
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
GetUpdateRect
TranslateMessage

gdi32

MoveToEx
LineTo
FillRgn
Ellipse
GetBkColor
Polygon
CreatePolygonRgn
PtInRegion
GetCurrentObject
GetClipBox
RestoreDC
SaveDC
SetMapMode
SelectPalette
RealizePalette
CopyMetaFileW
CreateDCW
CreateHatchBrush
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
ExtSelectClipRgn
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
Rectangle
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
PatBlt
GetMapMode
SetRectRgn
DPtoLP
LPtoDP
GetTextColor
GetCharWidthW
CreatePalette
GetNearestPaletteIndex
CreateHalftonePalette
GetTextCharsetInfo
Polyline
SetPixelV
ExtFloodFill
SetPaletteEntries
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
GetPaletteEntries
GetTextExtentPointW
EnumFontFamiliesExW
CreatePen
StretchDIBits
CreateFontIndirectW
GetObjectA
CreateRectRgnIndirect
CreateRoundRectRgn
CreateEllipticRgn
CreatePatternBrush
GetDIBits
GetDIBColorTable
SetDIBColorTable
ExtTextOutW
SelectClipRgn
CreateDIBSection
SetBkMode
GetRgnBox
CreateDiscardableBitmap
StretchBlt
DeleteDC
GetPixel
GetTextMetricsW
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
RoundRect
BitBlt
GetStockObject
CreateSolidBrush
CreateDIBitmap
GetObjectW
GetDeviceCaps
DeleteObject
CreateFontA
CreateFontW
SelectObject
SetTextCharacterExtra
GetTextExtentPoint32A
GetTextExtentPoint32W
TextOutA
TextOutW
BeginPath
CloseFigure
EndPath
GetPath
ExcludeClipRect
FrameRgn
SetPixel
CreateBitmap
Escape
RectVisible
PtVisible
OffsetRgn
EnumFontFamiliesW
CombineRgn
CreateRectRgn
AbortPath
GetSystemPaletteEntries

msimg32

TransparentBlt
GradientFill
AlphaBlend

comdlg32

GetSaveFileNameW
GetOpenFileNameW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
SetFileSecurityW
GetFileSecurityW
CryptHashData
CryptDestroyHash
CheckTokenMembership
CryptCreateHash
CryptReleaseContext
RegEnumKeyW
CryptAcquireContextW
CryptGetHashParam
RegSetValueExA
RegSetValueW
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyA
RegFlushKey
RegQueryValueW
RegOpenKeyW
RegEnumValueW
RegEnumKeyExW
RegQueryInfoKeyW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
SetFileSecurityA

shell32

ShellExecuteW
ShellExecuteExW
SHCreateDirectoryExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
Shell_NotifyIconW
DragAcceptFiles
DragQueryFileW
DragFinish
SHChangeNotify
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFolderPathW
SHFileOperationW
SHGetFileInfoW
SHAppBarMessage
DragQueryPoint

comctl32

ImageList_Create
ImageList_Draw
ImageList_Add
_TrackMouseEvent
ImageList_AddMasked

shlwapi

PathFileExistsW
PathFindFileNameW
PathFindExtensionW
StrCmpLogicalW
PathAddBackslashW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
UrlUnescapeW
StrFormatKBSizeW

uxtheme

GetThemeColor
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsAppThemed
DrawThemeText
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
GetWindowTheme
GetCurrentThemeName
GetThemeSysColor

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoDisconnectObject
CoFreeUnusedLibraries
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoGetObject
CoInitialize
OleLoadFromStream
OleSaveToStream
StgCreateDocfile
StgOpenStorage
MkParseDisplayName
CreateBindCtx
CoCreateGuid
StringFromCLSID
OleSetContainedObject
OleCreate
CoFreeLibrary
CoLoadLibrary
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleUninitialize
CoUninitialize
CreateStreamOnHGlobal
CoSetProxyBlanket
CoInitializeSecurity
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
VarUI4FromStr
VariantCopy
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringByteLen
SysAllocStringLen
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayDestroy
VariantInit
VariantClear
OleLoadPicturePath
SysFreeString
SysAllocString
SysStringLen
VarBstrFromDate
SysAllocStringByteLen

oledlg

OleUIBusyW

urlmon

UrlMkSetSessionOption
UrlMkGetSessionOption

gdiplus

GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetLogFontW
GdipCreateFontFromLogfontW
GdipSetEmpty
GdipCombineRegionRectI
GdipGetRegionHRgn
GdipStringFormatGetGenericDefault
GdipAddPathLine
GdipAddPathArc
GdipCreateLineBrushFromRectI
GdipResetPath
GdipNewPrivateFontCollection
GdipGetFontCollectionFamilyCount
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipDeletePrivateFontCollection
GdipDrawImageRect
GdipLoadImageFromFile
GdipSetPenMode
GdipSetImageAttributesColorKeys
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipSetWorldTransform
GdipSetPenDashStyle
GdipSetPathFillMode
GdipTransformRegion
GdipIsVisibleRegionPointI
GdipSetStringFormatMeasurableCharacterRanges
GdipMeasureCharacterRanges
GdipGetRegionBounds
GdipScaleMatrix
GdipTransformPath
GdipAddPathPath
GdipSetMatrixElements
GdipWidenPath
GdipAddPathRectangle
GdipWarpPath
GdipLoadImageFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipAddPathArcI
GdipDrawEllipseI
GdipGetImageVerticalResolution
GdipGetPathGradientPointCount
GdipGetPropertyItem
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipCreatePathGradientFromPath
GdipCreateBitmapFromGdiDib
GdipFree
GdipAlloc
GdipResetWorldTransform
GdipDisposeImageAttributes
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipFillPolygonI
GdipSetImageAttributesColorMatrix
GdipGetCompositingMode
GdipCreateBitmapFromFileICM
GdipGetImageHorizontalResolution
GdipCreateBitmapFromStreamICM
GdipSetPathGradientCenterColor
GdipGetInterpolationMode
GdipClosePathFigure
GdipAddPathLineI
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipCreatePen2
GdipDrawLineI
GdipSetSolidFillColor
GdipSetStringFormatAlign
GdipGetSmoothingMode
GdipSetStringFormatLineAlign
GdipCreateStringFormat
GdipFillPath
GdipDrawPath
GdipSetPenLineJoin
GdipGetPathWorldBounds
GdipAddPathString
GdipDeletePath
GdipCreatePath
GdipGraphicsClear
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipGetGenericFontFamilySansSerif
GdipDrawImage
GdipDrawString
GdipDrawRectangleI
GdipFillRectangleI
GdipDeletePen
GdipCreatePen1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetTextRenderingHint
GdipCreateFont
GdipCreateFontFamilyFromName
GdipMeasureString
GdipDeleteFont
GdipDeleteFontFamily
GdipGetTextRenderingHint
GdipSetClipRegion
GdipGetClip
GdipCreateRegion
GdipDeleteRegion
GdipCreateRegionRectI
GdipFillRectangle
GdipGetFontHeight
GdipGetStringFormatFlags
GdipSetStringFormatTrimming
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatFlags
GdipGetImageRawFormat
GdipSetPathGradientCenterPointI
GdipFillEllipseI
GdipImageRotateFlip
GdipGetPixelOffsetMode
GdipSetCompositingMode
GdipGetPropertyItemSize
GdipGetImageEncoders
GdipBitmapGetPixel
GdipCreateImageAttributes
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFile
GdipCloneImage
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipGetImageEncodersSize
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDrawImageRectRectI
GdipSaveImageToFile
GdiplusStartup
GdipBitmapSetResolution
GdipSetPathGradientSurroundColorsWithCount
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipDrawImageI
GdipDrawImagePointRectI
GdipCreateFromHDC
GdipCreateBitmapFromResource
GdiplusShutdown

pdh

PdhGetFormattedCounterValue
PdhCollectQueryData
PdhAddCounterW
PdhOpenQueryW
PdhRemoveCounter
PdhCloseQuery

crypt32

CertGetNameStringW
CryptUnprotectData

psapi

GetProcessMemoryInfo

wininet

InternetCrackUrlW
InternetGetCookieW
InternetOpenW
InternetQueryOptionW
HttpSendRequestExW
InternetReadFile
InternetConnectW
InternetWriteFile
HttpSendRequestW
InternetSetOptionW
HttpAddRequestHeadersW
HttpQueryInfoW
HttpOpenRequestW
InternetCanonicalizeUrlW
InternetCrackUrlA
InternetCreateUrlW
InternetSetCookieW
InternetCloseHandle
HttpEndRequestW
InternetGetConnectedState
InternetSetCookieExW

ws2_32

WSASetLastError
WSAAsyncSelect
send
recv
gethostbyaddr
getservbyport
ntohs
inet_ntoa
htonl
getservbyname
WSAGetLastError
ntohl
WSACleanup
gethostname
WSAStartup
gethostbyname
connect
inet_addr
htons
socket
closesocket

iphlpapi

GetAdaptersInfo

imm32

ImmGetContext
ImmSetConversionStatus
ImmReleaseContext
ImmGetDefaultIMEWnd
ImmGetConversionStatus
ImmGetOpenStatus

wintrust

WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain

winmm

mixerClose
mixerGetNumDevs
mixerGetID
mixerOpen
mixerGetLineControlsW
mixerGetDevCapsW
mixerGetLineInfoW
mixerSetControlDetails
mixerGetControlDetailsW
PlaySoundW
waveOutGetNumDevs

d3d9

Direct3DCreate9

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GOMSH
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 558KB - Virtual size: 558KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

214aa0d2228eb08fbc4d0faacb8e8d32

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

0c:a9:bf:3d:23:32:b1:70:fa:8c:2a:0d:37:fd:77:adCertificate

Extended Key Usages

Key Usages

73:9c:32:16:fd:b1:cb:7d:3e:be:cf:39:e8:c0:f5:bd:41:e7:73:25:20:53:fe:36:f0:ec:69:1e:c3:cc:47:c0Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

gdiplus

pdh

crypt32

psapi

wininet

ws2_32

iphlpapi

imm32

wintrust

winmm

d3d9

version

oleacc

Sections

.text Size: 7.1MB - Virtual size: 7.1MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 130KB - Virtual size: 249KB

.detourc Size: 4KB - Virtual size: 4KB

.detourd Size: 512B - Virtual size: 12B

.GOMSH Size: 512B - Virtual size: 12B

.rsrc Size: 4.4MB - Virtual size: 4.4MB

.reloc Size: 558KB - Virtual size: 558KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

0c:a9:bf:3d:23:32:b1:70:fa:8c:2a:0d:37:fd:77:ad
Certificate

73:9c:32:16:fd:b1:cb:7d:3e:be:cf:39:e8:c0:f5:bd:41:e7:73:25:20:53:fe:36:f0:ec:69:1e:c3:cc:47:c0
Signer

.text
Size: 7.1MB - Virtual size: 7.1MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 130KB - Virtual size: 249KB

.detourc
Size: 4KB - Virtual size: 4KB

.detourd
Size: 512B - Virtual size: 12B

.GOMSH
Size: 512B - Virtual size: 12B

.rsrc
Size: 4.4MB - Virtual size: 4.4MB

.reloc
Size: 558KB - Virtual size: 558KB