be66f581dfc57181cc71ba2a80cb1da2c225124dd072f1c6c5a52002823d1a87

Resubmissions

26/12/2023, 15:06

231226-sgsz3saggl 7

26/12/2023, 14:50

231226-r7sxbsage3 7

Sharing

Copy URL Twitter E-mail

General

Target

be66f581dfc57181cc71ba2a80cb1da2c225124dd072f1c6c5a52002823d1a87
Size

4.4MB
MD5

2ed887cd8fa289b37f1f0ac7fa298878
SHA1

a94965e28e6d02fbcf294881da639ad7e77aaaac
SHA256

be66f581dfc57181cc71ba2a80cb1da2c225124dd072f1c6c5a52002823d1a87
SHA512

7339bef7e61a1ccbee45eb95e935e78617290b17a7edeb850b77c12d3698f4a54599b9438ca6529dd2f1bcbce10216a1decd242f7b88557797add8c1a009e192
SSDEEP

98304:l9R5Xe0tSZQCufbdFNiuMg2Z6nQ0Au8HPSvh8MP1X:Lli6RLiuT7WHy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/最新稳定版.exe

Files

be66f581dfc57181cc71ba2a80cb1da2c225124dd072f1c6c5a52002823d1a87
.zip
最新稳定版.exe
.exe windows:5 windows x86 arch:x86

be2f6791b022fe22759c6de331d67269

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
GetLogicalDriveStringsW
FlushInstructionCache
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetVersionExW
GetExitCodeThread
WriteFile
SetFilePointer
WaitForSingleObject
SetEvent
CreateEventW
FlushFileBuffers
MoveFileExW
ReadFile
FreeResource
EndUpdateResourceW
UpdateResourceW
BeginUpdateResourceW
SetEnvironmentVariableW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetTempPathW
InterlockedIncrement
InterlockedDecrement
GetTempFileNameW
CreateMutexW
GetCurrentProcessId
ResetEvent
WaitForMultipleObjects
CreateThread
CopyFileW
GetCurrentThread
lstrcmpiW
LocalFileTimeToFileTime
SetFileTime
CloseHandle
SetFileAttributesW
ReleaseMutex
HeapWalk
HeapLock
OpenThread
HeapUnlock
OutputDebugStringW
SetFilePointerEx
SystemTimeToFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTickCount
SetEndOfFile
Sleep
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
CreateFileW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
TlsFree
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoW
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
ExitThread
ExitProcess
VirtualQuery
GetSystemInfo
VirtualProtect
GetConsoleMode
GetConsoleCP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetSystemWindowsDirectoryW
lstrcmpiA
lstrcmpA
CreateFileA
GetSystemDirectoryW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
RemoveDirectoryW
lstrlenA
GetModuleFileNameW
SetLastError
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryW
GetCurrentProcess
OpenProcess
GetFileSizeEx
GetDriveTypeW
GetDiskFreeSpaceExW
TlsAlloc
GetWindowsDirectoryW
DeleteFileW
FormatMessageW
CreateDirectoryW
GetLastError
GetStdHandle
SetConsoleTextAttribute
TlsSetValue
TlsGetValue
GetCurrentThreadId
GetFileAttributesW
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
InterlockedCompareExchange
FindResourceExW
FindResourceW
LoadResource
LockResource
FreeEnvironmentStringsW
DosDateTimeToFileTime
SizeofResource
lstrlenW

user32

GetClassInfoExW
SendMessageTimeoutW
IsWindow
GetDC
UnregisterClassA
GetWindowThreadProcessId
GetShellWindow
SetWindowPos
SetForegroundWindow
BringWindowToTop
IsIconic
ShowWindow
IsWindowVisible
MessageBoxW
GetActiveWindow
FillRect
GetClientRect
RedrawWindow
GetParent
DefWindowProcW
SetWindowLongW
GetWindowLongW
CallWindowProcW
BeginPaint
EndPaint
EndDialog
MoveWindow
GetWindowRect
ScreenToClient
GetDlgItem
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
GetWindow
ReleaseDC
GetWindowTextW
EnableWindow
SetWindowTextW
RegisterClassW
CharNextW
PrintWindow
PostQuitMessage
IsDlgButtonChecked
GetSystemMetrics
LoadImageW
SetDlgItemTextW
CreateDialogParamW
PeekMessageW
GetMessageW
GetClassInfoW
DispatchMessageW
FindWindowExW
SystemParametersInfoW
UpdateLayeredWindow
SetWindowRgn
KillTimer
SetTimer
CopyRect
DialogBoxParamW
RegisterClassExW
GetCursorPos
IsWindowEnabled
DestroyWindow
LoadCursorW
TranslateMessage
IsDialogMessageW
ClientToScreen
CreateWindowExW
PtInRect
GetWindowTextLengthW
InvalidateRect
UpdateWindow
ScrollWindow
SetFocus
SendMessageW
PostMessageW

gdi32

CombineRgn
CreateRectRgn
SetBkColor
ExtTextOutW
BeginPath
MoveToEx
AngleArc
LineTo
EndPath
PathToRegion
SelectClipRgn
BitBlt
CreateCompatibleBitmap
SetViewportOrgEx
CreateDIBSection
SelectObject
DeleteDC
CreateCompatibleDC
DeleteObject
CreateSolidBrush
GetDeviceCaps
GetObjectW
CreateFontW

advapi32

LookupPrivilegeValueW
RegOpenKeyExA
RegEnumKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
InitiateSystemShutdownW
OpenThreadToken
ImpersonateSelf
RegSetValueExW
OpenProcessToken
AdjustTokenPrivileges
DuplicateTokenEx
CreateProcessAsUserW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryValueExA
GetTokenInformation

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
CommandLineToArgvW
SHCreateDirectoryExW
ord165

ole32

CoInitialize
CoUninitialize
CoCreateGuid
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
SysFreeString
SysStringLen
SysAllocString

shlwapi

SHGetValueW
SHSetValueW
StrCpyW
PathCombineW
PathRemoveFileSpecW
AssocQueryStringW
PathFindExtensionW
PathIsRelativeW
PathCompactPathExW
PathIsPrefixW
PathIsDirectoryEmptyW
PathUnquoteSpacesW
PathQuoteSpacesW
StrStrIW
PathAddBackslashW
StrCmpNIW
PathFindFileNameW
PathRemoveExtensionW
PathIsSameRootW
PathStripToRootW
PathCanonicalizeW
PathAppendW
PathFileExistsW
StrCmpIW
StrTrimA
SHSetValueA
SHGetValueA
StrStrIA

comctl32

InitCommonControlsEx
_TrackMouseEvent

gdiplus

GdipAlloc
GdipFree
GdiplusShutdown
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipCreateFromHDC
GdipDeleteGraphics
GdipCloneImage
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage

wininet

HttpOpenRequestW
HttpSendRequestW
InternetConnectW
InternetCloseHandle
HttpQueryInfoW
InternetOpenW

version

GetFileVersionInfoW
VerQueryValueW

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

be2f6791b022fe22759c6de331d67269

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

gdiplus

wininet

version

iphlpapi

Sections

.text Size: 407KB - Virtual size: 406KB

.rdata Size: 82KB - Virtual size: 82KB

.data Size: 17KB - Virtual size: 31KB

.rsrc Size: 6.9MB - Virtual size: 6.9MB

.reloc Size: 37KB - Virtual size: 36KB

.text
Size: 407KB - Virtual size: 406KB

.rdata
Size: 82KB - Virtual size: 82KB

.data
Size: 17KB - Virtual size: 31KB

.rsrc
Size: 6.9MB - Virtual size: 6.9MB

.reloc
Size: 37KB - Virtual size: 36KB