974a7504ecfc052b8ace161fa4d015be89062081f1242f07bdf75f58598daef6

Sharing

Copy URL

Twitter E-mail

General

Target

974a7504ecfc052b8ace161fa4d015be89062081f1242f07bdf75f58598daef6
Size

6.8MB
MD5

557cb80b1ac5b5168513fc0757b186e8
SHA1

a7e3e6dc7580f359c0e45a46bbb1adb74b078551
SHA256

974a7504ecfc052b8ace161fa4d015be89062081f1242f07bdf75f58598daef6
SHA512

ae96445732b18ac81f5d699600e29bb77e7569eb732ad1d4ee4dcd9a97fd5b738caef6245c2a95e9d5590db205eb117f9d6051c2f61e9a7adc46ed07fadae8df
SSDEEP

98304:EbeJjUdL7/jdxJOjcIaKMXXdOlaaHYhM8wVM5JJR5VZCZ7i:n6dL7LJ0Cli8l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
974a7504ecfc052b8ace161fa4d015be89062081f1242f07bdf75f58598daef6

Files

974a7504ecfc052b8ace161fa4d015be89062081f1242f07bdf75f58598daef6
.exe windows:6 windows x86 arch:x86

7adbbb95083fc7ad53c9641062720c8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mss32

_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_close_stream@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_WAV_info@8
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_mem_free_lock@4

kernel32

GetDateFormatW
GetFileSizeEx
HeapSize
Sleep
SetFileAttributesA
FindClose
FindFirstFileA
FindNextFileA
GetCurrentProcess
FreeConsole
CreateDirectoryA
GetTempPathA
GetTempFileNameA
CreateFileA
GetFileSize
CloseHandle
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
LoadLibraryA
OutputDebugStringA
GetLastError
ReadFile
SetFilePointer
WriteFile
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
GetSystemDirectoryA
GetVersionExA
FreeLibrary
GlobalUnlock
GlobalLock
lstrlenW
CompareStringA
GetLocaleInfoA
GetSystemTime
DeleteFileA
QueryPerformanceCounter
GetPhysicallyInstalledSystemMemory
SwitchToThread
LocalFree
FormatMessageA
GetFileInformationByHandle
GetFileAttributesA
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
IsDBCSLeadByte
GetFullPathNameA
SetEndOfFile
TlsSetValue
HeapFree
SetLastError
WaitForSingleObject
SetEvent
TlsAlloc
HeapAlloc
GetProcessHeap
TlsGetValue
TlsFree
CreateEventA
LoadLibraryExA
SetErrorMode
GetModuleFileNameA
CreateDirectoryW
FindFirstFileW
MoveFileA
GetFileAttributesExA
GetFullPathNameW
FindNextFileW
TerminateProcess
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
GetEnvironmentVariableA
CreateFileW
GetFileAttributesW
GetCurrentDirectoryA
DuplicateHandle
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryA
SetEnvironmentVariableA
SystemTimeToFileTime
CreateProcessA
CompareStringW
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
QueryPerformanceFrequency
GetACP
SetConsoleCtrlHandler
ResetEvent
ExpandEnvironmentStringsW
GetStdHandle
FlushViewOfFile
LCMapStringW
ReadConsoleW
GetConsoleMode
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
FlushFileBuffers
FreeLibraryAndExitThread
ExitThread
SetFilePointerEx
VirtualQuery
VirtualProtect
VirtualAlloc
SetStdHandle
WriteConsoleW
GetModuleFileNameW
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetModuleHandleExW
ExitProcess
GetDriveTypeW
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
CreateThread
GetTickCount
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
GetCPInfo
GetStringTypeW
GetSystemTimeAsFileTime
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
GetLocaleInfoW
ReleaseSRWLockExclusive
GetCommandLineW
GetCommandLineA
PeekConsoleInputA
ReadConsoleInputW
IsValidLocale
GetUserDefaultLCID
GetModuleHandleW
AreFileApisANSI
GetTempPathW
FindFirstFileExW
GetLocaleInfoEx
GetTimeFormatW
EnumSystemLocalesW
HeapReAlloc
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleMode
GetFileType
GetNumberOfConsoleInputEvents

user32

ScreenToClient
FindWindowA
LoadIconA
SystemParametersInfoA
GetKeyState
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
SetCapture
ReleaseCapture
ChangeDisplaySettingsA
GetSystemMetrics
MessageBoxA
DefWindowProcA
RegisterClassA
CreateWindowExA
IsWindow
DestroyWindow
MoveWindow
GetMenu
InvalidateRect
GetClientRect
AdjustWindowRectEx
SetRect
GetWindowLongA
SetWindowLongA
LoadCursorA
PostQuitMessage
SetWindowPos
CharPrevA
CharPrevExA
CharNextExA
GetCursorPos
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetDC
ReleaseDC
GetKeyboardLayoutNameA
CharNextW
GetClipboardData
CloseClipboard
OpenClipboard
GetKeyboardLayout

gdi32

SetTextColor
TextOutA
CreateDIBSection
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
GetTextExtentPoint32A
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
DeleteObject
CreateFontIndirectA
EnumFontFamiliesExA
GetStockObject

shell32

ShellExecuteW
ShellExecuteA

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

SysFreeString
VariantClear

advapi32

RegLoadKeyA
RegOpenKeyExA
RegQueryValueExA
CryptReleaseContext
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegEnumKeyExA

winmm

timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeGetTime

d3d9

Direct3DCreate9

d3dx9_43

D3DXLoadSurfaceFromSurface
D3DXVec3TransformCoord
D3DXMatrixRotationZ
D3DXMatrixMultiply
D3DXMatrixTranslation
D3DXMatrixRotationQuaternion
D3DXQuaternionRotationAxis
D3DXQuaternionMultiply
D3DXMatrixRotationYawPitchRoll
D3DXMatrixInverse
D3DXMatrixRotationX
D3DXVec3TransformNormal
D3DXMatrixRotationAxis
D3DXVec4Transform
D3DXMatrixScaling
D3DXVec2Normalize
D3DXMatrixDeterminant
D3DXMatrixLookAtRH
D3DXVec3Project
D3DXMatrixPerspectiveFovRH
D3DXMatrixOrthoRH
D3DXMatrixOrthoOffCenterRH
D3DXCreateMatrixStack
D3DXCreateCylinder
D3DXCreateSphere
D3DXVec2Transform
D3DXGetFVFVertexSize
D3DXCreateTexture
D3DXCreateTextureFromFileInMemoryEx
D3DXSaveSurfaceToFileA
D3DXPlaneNormalize
D3DXQuaternionRotationYawPitchRoll
D3DXVec3Transform
D3DXMatrixTranspose
D3DXVec3Normalize

imm32

ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
ImmGetOpenStatus
ImmNotifyIME
ImmReleaseContext
ImmGetContext
ImmGetIMEFileNameA
ImmIsIME
ImmAssociateContext

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

dinput8

DirectInput8Create

ws2_32

WSAStartup
WSACleanup
htons
inet_addr
socket
gethostbyname
send
select
recv
ioctlsocket
connect
closesocket
__WSAFDIsSet
WSAGetLastError

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 389KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7adbbb95083fc7ad53c9641062720c8d

Headers

DLL Characteristics

File Characteristics

Imports

mss32

kernel32

user32

gdi32

shell32

ole32

oleaut32

advapi32

winmm

d3d9

d3dx9_43

imm32

version

dinput8

ws2_32

Sections

.text Size: 4.4MB - Virtual size: 4.4MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 389KB - Virtual size: 1.4MB

.rsrc Size: 49KB - Virtual size: 48KB

.reloc Size: 214KB - Virtual size: 213KB

.text
Size: 4.4MB - Virtual size: 4.4MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 389KB - Virtual size: 1.4MB

.rsrc
Size: 49KB - Virtual size: 48KB

.reloc
Size: 214KB - Virtual size: 213KB