077d1e5d279830ec55341a50800e63ee

Sharing

Copy URL

Twitter E-mail

General

Target

077d1e5d279830ec55341a50800e63ee
Size

172KB
MD5

077d1e5d279830ec55341a50800e63ee
SHA1

7d23a2cb651be05adaad2ef4ce70df83c4555e7b
SHA256

e880ba2d02cb177a476d5299650b753b12230f7cc2e79208eb225848d02ac1f9
SHA512

a782735a1d467749950c6023d8c3fb9957c3ddcd5f2105e7be1688698a0dba41f5c6ce0244076d0c84b9716af112f4dc343d7d23b5a166f8b928cff554ff202d
SSDEEP

3072:7M/awIYazVzR1QMk8/N5sjEL2APBO0GwsEqxnEoKTEBpjZv0SQBoNa:7ChIDzVzRC0/En6GwsEqxDwEpNQB+a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077d1e5d279830ec55341a50800e63ee

Files

077d1e5d279830ec55341a50800e63ee
.dll windows:4 windows x86 arch:x86

e6a29840bc544b891d22fbad20753369

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
WideCharToMultiByte
GetLastError
GetDateFormatA
GetTimeFormatA
OutputDebugStringA
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
lstrcpyA
MultiByteToWideChar
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenA
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
OpenFile
GetFileSize
_llseek
_lread
CloseHandle
GetWindowsDirectoryA
RemoveDirectoryA
lstrcmpiA
FindFirstFileA
FindClose
CreateDirectoryA
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetFileAttributesA
GetSystemDefaultLangID
GetSystemTime
FreeLibrary
GetModuleFileNameA
lstrcpynA
lstrcatA
LoadLibraryA

user32

SetWindowLongA
FindWindowA
GetDC
ReleaseDC
OpenClipboard
GetClipboardData
CloseClipboard
GetFocus
EndDialog
SetFocus
ShowWindow
InvalidateRect
GetSystemMetrics
GetCapture
CreateWindowExA
UpdateWindow
GetClassInfoExA
GetScrollInfo
RegisterClassExA
GetDlgItem
MessageBoxA
SendMessageA
IsWindowEnabled
DrawFocusRect
GetSysColor
DrawTextA
FillRect
CopyRect
LoadStringA
wsprintfA
PostMessageA
MoveWindow
IsWindow
DestroyWindow
GetWindowLongA
GetParent
InflateRect
CallWindowProcA
FrameRect
DefWindowProcA
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
SendDlgItemMessageA
EmptyClipboard
SetClipboardData
ScrollWindowEx
ClientToScreen
EnableScrollBar
SetScrollInfo
GetWindowTextLengthA
GetKeyState
ShowScrollBar
DrawEdge
GetWindowDC
PtInRect
LoadIconA
SetCapture
SetCursor
GetMessagePos
ReleaseCapture
FindWindowExA
SetRectEmpty
GetCursorPos
ScreenToClient
CreateDialogParamA
SetTimer
EnableWindow
BeginPaint
EndPaint
CreatePopupMenu
InsertMenuA
DestroyMenu
GetWindowTextA
LoadBitmapA
GetDesktopWindow
KillTimer
SetWindowTextA
SetDlgItemTextA
GetDlgItemTextA
LoadCursorA

gdi32

DeleteDC
PatBlt
CreatePatternBrush
CreateBitmap
GetStockObject
CreateCompatibleDC
GetTextExtentExPointA
GetTextExtentPoint32A
GetROP2
MoveToEx
LineTo
SetTextColor
SetBkMode
DeleteObject
CreateSolidBrush
SetPolyFillMode
CreatePen
Polygon
CreateFontIndirectA
SetROP2
SelectObject
SetBkColor
GetTextFaceA
GetTextMetricsA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegQueryValueExA
RegOpenKeyExA

oleaut32

VariantClear
SysAllocStringLen
SysFreeString
SysAllocString

atcarmcl

ATGetArmNodeController

comctl32

ImageList_AddMasked
ImageList_Destroy
_TrackMouseEvent
ord17
ImageList_Create

atkbctl

KbSetDialogFocus

atwbxui5

ord1401
ord1418
ord1417
ord1414
ord1413
ord1397
ord1404
ord1400
ord1482
ord1407
ord1394
ord1547
ord1220
ord239
ord238
ord263
ord193
ord143
ord145
ord3
ord117
ord1392
ord1312
ord1528
ord1374
ord1363
ord1360
ord1416
ord225
ord1406
ord1233
ord1197
ord1973
ord1403
ord1402
ord1497
ord1158
ord1485
ord1470
ord1304
ord1476
ord1512
ord1266
ord966
ord1922
ord674
ord473
ord1981
ord541
ord1762
ord1944
ord1753
ord1886
ord1771
ord256
ord1248
ord1356
ord1968
ord1920
ord7
ord9
ord96
ord178
ord626
ord1984
ord1048
ord1970
ord1378
ord1365
ord1189
ord1425
ord1225
ord1264
ord1389
ord104
ord2066
ord1627
ord459
ord1998
ord938
ord1061
ord41
ord215

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
??2@YAPAXI@Z
strchr
memcpy
sprintf
strcmp
memset
strrchr
time
fclose
fwrite
strcat
strftime
setlocale
asctime
localtime
fopen
strlen
strstr
strcpy
_stricmp
free
malloc
_tzset
_spawnl
fgets
fseek
isspace
fflush
fprintf
_vsnprintf
fgetpos
memmove
__dllonexit
_onexit
_initterm
_adjust_fdiv
_purecall
wcslen
_CxxThrowException

Exports

Exports

ATDeleteInstance
ATNewInstance
QaAutoSave
QaCanCopy
QaCanCut
QaCanPaste
QaCanSave
QaChangeControlMode
QaCheckEditStatus
QaCloseAllDialog
QaCloseWindow
QaCopy
QaCut
QaGetLbItemCount
QaOpenFile
QaOpenForSth
QaPaste
QaPrintQandA
QaRestoreContent
QaSave
QaSaveAs
QaSaveForSth
QaSaveQaNameAndPath
QaSelectFeature
QaSetAttendeeOptions
QaSetAutoSavePath
QaSetBrowserType
QaSetConfMgr
QaSetConfName
QaSetConfNumber
QaSetControlMode
QaSetDefaultSaveDir
QaSetEventConfig
QaSetMeetingType
QaSetRosterStatus
QaSetSaveQandAFileName
QaView
WbxSetNBRStatus
_QaSetExpandStatus@8

Sections

.text
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6a29840bc544b891d22fbad20753369

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

oleaut32

atcarmcl

comctl32

atkbctl

atwbxui5

msvcrt

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 134KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 136KB - Virtual size: 134KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 6KB