2d64bac85cee6ed4c87faff702feb2082a68a9ff303f2773048fe6e08f2c4aea

Resubmissions

26/12/2023, 15:05

231226-sf9anscbh8 3

26/12/2023, 15:00

231226-sdsj5sbhb3 3

Sharing

Copy URL

Twitter E-mail

General

Target

2d64bac85cee6ed4c87faff702feb2082a68a9ff303f2773048fe6e08f2c4aea
Size

2.6MB
MD5

a2208aa2174bacca2bd8b7272833cea1
SHA1

0f2c9f54b39d21a007d0facbf410b790c151e45a
SHA256

2d64bac85cee6ed4c87faff702feb2082a68a9ff303f2773048fe6e08f2c4aea
SHA512

09977e2742eb1af0e2da74e0fb0b50da3d9caf1c28a97309c1e7df846a298e5ece8147626890c32aef45cf0dc9118ad3c7b1b48c58be7e5801ec5d4f13b5414c
SSDEEP

49152:Xmx+K/909uTGLJrkHJmmJ9FKp1Aw/S8OdR0X4GbFn7a:a7VAfyMU8OCn7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d64bac85cee6ed4c87faff702feb2082a68a9ff303f2773048fe6e08f2c4aea

Files

2d64bac85cee6ed4c87faff702feb2082a68a9ff303f2773048fe6e08f2c4aea
.exe windows:6 windows x64 arch:x64

286a6b426529825e7df289c431d3f6be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mmmojocall

?SendIpcMessage@QQIpcChildWrapper@qqipc@qqimpl@@QEAAXPEBD0H@Z
??0QQIpcChildWrapper@qqipc@qqimpl@@QEAA@XZ
??1QQIpcChildWrapper@qqipc@qqimpl@@QEAA@XZ
?InitEnv@QQIpcChildWrapper@qqipc@qqimpl@@QEAA_NPEBD@Z
?InitChildIpc@QQIpcChildWrapper@qqipc@qqimpl@@QEAAXXZ
?InitLog@QQIpcChildWrapper@qqipc@qqimpl@@QEAAXHPEAX@Z
?SetChildReceiveCallback@QQIpcChildWrapper@qqipc@qqimpl@@QEAAXP6AXPEAXPEADH1H@Z@Z

kernel32

WideCharToMultiByte
MultiByteToWideChar
SetLastError
GetLastError
FindNextFileW
HeapSize
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
FindFirstFileW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
SetEndOfFile
SetStdHandle
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
FindClose
GetCurrentDirectoryW
SetConsoleTitleW
AllocConsole
SetConsoleOutputCP
IsValidLocale
SetConsoleCP
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapFree
HeapAlloc
ExitProcess
FreeConsole
GlobalFree
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetFileType
SetEnvironmentVariableW
LoadLibraryExW
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetCPInfo
CompareStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
LCMapStringEx
InitOnceComplete
InitOnceBeginInitialize
GetStringTypeW
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
GetLocaleInfoEx
FormatMessageA
LocalFree
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetFilePointer
GetFileSize
GetEnvironmentVariableW
GetCurrentProcessId
GetModuleHandleA
RtlUnwind
GlobalAlloc
GetTickCount
MulDiv
VerSetConditionMask
GetCommandLineW
lstrcmpW
GetModuleFileNameW
GetFileAttributesW
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
DeleteCriticalSection
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
SetThreadPriority
GetCurrentThreadId
Sleep
TerminateThread
RaiseException
SizeofResource
GetCurrentProcess
GetStdHandle
LoadResource
FindResourceW
VirtualQuery
GetModuleHandleW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
LocalFileTimeToFileTime
QueryPerformanceFrequency
SystemTimeToFileTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
ReadFile
WriteFile
CreateFileW
GlobalLock
GlobalUnlock
GlobalSize
VerifyVersionInfoW

user32

GetDC
GetWindowLongW
PostQuitMessage
IsWindowVisible
ClientToScreen
DrawTextW
GetParent
MapWindowPoints
GetDesktopWindow
FindWindowW
InflateRect
SetForegroundWindow
MessageBoxW
SetWindowRgn
MonitorFromRect
GetWindowPlacement
IsZoomed
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetAsyncKeyState
GetSysColor
SetCursor
UnionRect
PtInRect
UpdateLayeredWindow
IntersectRect
IsRectEmpty
GetClientRect
GetUpdateRect
MoveWindow
EndPaint
BeginPaint
ReleaseCapture
SetCapture
GetFocus
GetKeyState
ScreenToClient
InvalidateRect
SetWindowTextW
GetCursorPos
GetPropW
SetPropW
CallWindowProcW
GetWindowLongPtrW
SendMessageW
GetSystemMetrics
SetWindowPos
IsIconic
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
ShowWindow
SetFocus
EnableWindow
GetWindow
SetWindowLongW
IsWindow
SetWindowLongPtrW
GetClassInfoExW
RegisterClassW
LoadCursorW
MonitorFromPoint
ReleaseDC
KillTimer
CharNextW
OffsetRect
DefWindowProcW
PostMessageW
DestroyWindow
CreateWindowExW
UnregisterClassW
WaitMessage
RegisterClassExW
DispatchMessageW
SetTimer
PeekMessageW
MsgWaitForMultipleObjectsEx
CallMsgFilterW
GetQueueStatus
TranslateMessage

comdlg32

GetSaveFileNameW

shell32

DragFinish
ShellExecuteW
DragQueryFileW

winmm

timeGetTime
timeSetEvent
timeKillEvent

gdiplus

GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteFontFamily
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateMatrix
GdipDeleteMatrix
GdipGetWorldTransform
GdipTranslateMatrix
GdipRotateMatrix
GdipSetWorldTransform
GdipDrawImage
GdipCreateFromHDC
GdipDrawImageRectRect
GdiplusStartup
GdiplusShutdown
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipCreateSolidFill
GdipDeleteBrush
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImagePalette
GdipScaleMatrix
GdipSetSmoothingMode
GdipCreatePen1
GdipDeletePen
GdipDrawArc
GdipCreateLineBrushFromRect
GdipSetLineBlend
GdipCreatePen2
GdipDrawImageRect
GdipImageRotateFlip
GdipLoadImageFromFile
GdipSetStringFormatLineAlign
GdipClonePen
GdipSetPenWidth
GdipGetPenWidth
GdipSetPenColor
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashCap197819
GdipGetPenStartCap
GdipGetPenEndCap
GdipGetPenDashCap197819
GdipCloneBrush
GdipGetPenLineJoin
GdipSetPenDashStyle
GdipGetPenDashStyle
GdipCreateBitmapFromHBITMAP
GdipCreateTexture
GdipCreatePath
GdipClonePath
GdipResetPath
GdipSetPathFillMode
GdipGetPathFillMode
GdipStartPathFigure
GdipClosePathFigure
GdipAddPathLineI
GdipAddPathLine2I
GdipAddPathBezierI
GdipAddPathCurveI
GdipAddPathRectangleI
GdipAddPathEllipseI
GdipAddPathArcI
GdipAddPathPieI
GdipAddPathPolygonI
GdipGetPathWorldBoundsI
GdipIsVisiblePathPointI
GdipIsOutlineVisiblePathPointI
GdipTransformPath
GdipDeletePath
GdipSetStringFormatAlign
GdipFillRectangle
GdipDrawLineI
GdipDrawBezierI
GdipDrawRectangleI
GdipDrawPath
GdipNewInstalledFontCollection
GdipGetFontCollectionFamilyCount
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFile
GdipSetPenLineJoin
GdipGetFamily
GdipAddPathString
GdipGetFontSize
GdipGetFontStyle
GdipCreateBitmapFromScan0
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipSetStringFormatTrimming
GdipFillPath
GdipDrawString
GdipDrawEllipseI
GdipFillEllipseI
GdipAddPathArc
GdipAddPathLine
GdipCreatePathGradientFromPath
GdipSetPathGradientWrapMode
GdipSetPathGradientPresetBlend
GdipCreateRegionPath
GdipDeleteRegion
GdipMeasureString
GdipBitmapApplyEffect
GdipSetEffectParameters
GdipDeleteEffect
GdipSetClipRegion
GdipCreateEffect
GdipSetStringFormatFlags

comctl32

_TrackMouseEvent
ord17

imm32

ImmSetOpenStatus
ImmReleaseContext
ImmSetCompositionWindow
ImmGetOpenStatus
ImmGetContext

shlwapi

PathIsRelativeW
PathFileExistsW

msimg32

AlphaBlend

uiautomationcore

UiaRaiseAutomationPropertyChangedEvent
UiaRaiseAutomationEvent
UiaReturnRawElementProvider
UiaHostProviderFromHwnd
UiaClientsAreListening

gdi32

CreateRectRgnIndirect
BitBlt
CreateRoundRectRgn
CreateDCW
GetDIBits
ExtSelectClipRgn
DeleteObject
GetObjectW
GetDeviceCaps
GetStockObject
CreateDIBSection
GetTextExtentPoint32W
GetObjectA
SetTextColor
SetBkMode
SetStretchBltMode
SetWindowOrgEx
DeleteDC
CreateFontIndirectW
GetWindowOrgEx
RestoreDC
SaveDC
CreateCompatibleDC
StretchBlt
AddFontResourceExW
AddFontMemResourceEx
SelectObject

ole32

CreateStreamOnHGlobal
CoCreateInstance

oleaut32

SafeArrayGetElemsize
SysAllocString
SafeArrayGetElement
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayPutElement

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 524KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

286a6b426529825e7df289c431d3f6be

Headers

DLL Characteristics

File Characteristics

Imports

mmmojocall

kernel32

user32

comdlg32

shell32

winmm

gdiplus

comctl32

imm32

shlwapi

msimg32

uiautomationcore

gdi32

ole32

oleaut32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 524KB - Virtual size: 523KB

.data Size: 49KB - Virtual size: 57KB

.pdata Size: 80KB - Virtual size: 79KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 314KB - Virtual size: 314KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 524KB - Virtual size: 523KB

.data
Size: 49KB - Virtual size: 57KB

.pdata
Size: 80KB - Virtual size: 79KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 314KB - Virtual size: 314KB

.reloc
Size: 19KB - Virtual size: 19KB