37d3d2c3ffd030535ba8842e908d719e

Sharing

Copy URL Twitter E-mail

General

Target

37d3d2c3ffd030535ba8842e908d719e
Size

3.1MB
MD5

37d3d2c3ffd030535ba8842e908d719e
SHA1

39c16eebd00f5a8b990a8452934567b763cc646c
SHA256

0f420456255e48924738e8dd010e463ca443ce9652283baff60874585ab481f6
SHA512

469fa118d1cb10ea7e406659f8e777925f96329ce68a81b4925359d7085c37ac889035555e2965e5708edee49d99acdf1f47068cdd3c31bdd93f2533540acfec
SSDEEP

49152:hI8boQhfD6UDvxvykXk1rBsgyegFKvc4clwYk:TDmV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37d3d2c3ffd030535ba8842e908d719e

Files

37d3d2c3ffd030535ba8842e908d719e
.exe windows:6 windows x64 arch:x64

00fbb766e808e50e691b3aeea88e7316

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameW

kernel32

LockResource
CreateDirectoryW
LocalFree
OutputDebugStringW
MoveFileW
LoadResource
FindResourceW
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
LoadLibraryA
FreeLibrary
GetLocaleInfoW
HeapFree
GetProcessHeap
HeapAlloc
CompareStringA
GlobalFree
GlobalAlloc
lstrlenW
SetEvent
ResetEvent
WaitForSingleObject
WaitForMultipleObjects
CreateEventW
MultiByteToWideChar
LoadLibraryW
GetSystemDirectoryW
SetCurrentDirectoryW
DeleteCriticalSection
GetProcAddress
GetVersionExA
InitializeCriticalSection
GetFileType
GetCurrentDirectoryW
WriteConsoleW
GetStdHandle
GetTickCount64
CreateThread
FormatMessageW
LocalAlloc
GetThreadLocale
FindResourceExW
ExpandEnvironmentStringsW
LoadLibraryExW
EnumResourceTypesW
EnumResourceNamesW
lstrcmpiA
GetSystemInfo
SetEndOfFile
GlobalMemoryStatus
GetFullPathNameA
FreeResource
SetFilePointer
DeleteFileA
GetTempPathA
GetTempFileNameA
ReadFile
VirtualAlloc
VirtualFree
WriteFile
FindResourceA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileA
GetModuleHandleA
IsProcessorFeaturePresent
WideCharToMultiByte
DebugBreak
OutputDebugStringA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
SetUnhandledExceptionFilter
GetStartupInfoW
CloseHandle
DeleteFileW
HeapSetInformation
LeaveCriticalSection
EnterCriticalSection
Sleep
MulDiv
ExitProcess
GetCurrentThreadId
CreateMutexW
GetLastError
GetCommandLineW
SizeofResource
CreateFileW
GetModuleHandleW
GetModuleFileNameW
RegisterApplicationRestart

gdi32

GetTextColor
CreatePen
Rectangle
CreateRoundRectRgn
ExtTextOutA
GetObjectA
SetTextAlign
GetTextMetricsA
GetCharacterPlacementA
SetMapMode
SetBkMode
GetFontLanguageInfo
CreateFontIndirectA
CreateDIBSection
DeleteDC
GetCharacterPlacementW
GetGlyphOutlineA
GetTextMetricsW
MoveToEx
GetObjectW
GetStockObject
ExcludeClipRect
BitBlt
CreateBitmap
CreateCompatibleDC
ExtTextOutW
SetBkColor
SetTextColor
GetTextExtentPoint32W
SelectObject
CreateFontIndirectW
GetDeviceCaps
DeleteObject
CreateSolidBrush
GetBkColor

user32

GetFocus
DialogBoxParamW
SetWindowTextW
GetCursorInfo
GetKeyboardLayoutList
GetClientRect
ClientToScreen
SendMessageW
GetSystemMetrics
GetKeyboardLayout
GetMenu
EnableMenuItem
GetSubMenu
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetRect
NotifyWinEvent
GetWindowRect
IsZoomed
SetDlgItemTextW
GetMenuItemCount
GetMenuItemInfoW
DefWindowProcW
SetMenuItemInfoW
SetMenuInfo
TrackPopupMenu
FindWindowW
ShowWindow
BringWindowToTop
SetForegroundWindow
LoadMenuW
RemoveMenu
SetWindowsHookExW
GetKeyState
GetMonitorInfoW
MonitorFromWindow
GetWindowPlacement
SetWindowPlacement
UpdateWindow
RegisterRawInputDevices
SetWindowPos
PostQuitMessage
GetMessageExtraInfo
PostMessageW
IsIconic
GetDoubleClickTime
GetProcessDefaultLayout
DrawTextW
GetSysColorBrush
GetIconInfo
LoadIconW
CallWindowProcW
SetWindowLongW
EndPaint
IsWindowEnabled
BeginPaint
EnumChildWindows
SetWindowRgn
EndDialog
IsDialogMessageW
GetClassNameW
GetNextDlgTabItem
GetNextDlgGroupItem
CreateDialogParamW
CreateDialogIndirectParamW
SetFocus
GetDlgCtrlID
GetWindow
SendInput
GetParent
GetForegroundWindow
MessageBoxW
KillTimer
UnregisterClassW
PtInRect
OffsetRect
ReleaseCapture
SetCapture
EqualRect
UnionRect
MonitorFromRect
SetRectEmpty
DestroyWindow
DestroyMenu
LoadAcceleratorsW
UnhookWindowsHookEx
ShowCursor
CheckRadioButton
CheckDlgButton
EnableWindow
GetDlgItem
IsDlgButtonChecked
SetCursor
LoadCursorW
LoadStringW
CheckMenuItem
GetDC
SystemParametersInfoW
ReleaseDC
GetSysColor
DrawFrameControl
GetRawInputData
GetCursorPos
MapWindowPoints
SetCursorPos
CallNextHookEx
EnumDisplayMonitors
RegisterWindowMessageW
RegisterClassW
GetClassLongPtrW
InvalidateRect
AdjustWindowRect
CreateWindowExW
SetWindowLongPtrW
GetWindowTextW
GetWindowLongPtrW
GetWindowLongW
IsWindowVisible
TranslateAcceleratorW
DestroyAcceleratorTable
SetTimer
DrawEdge

msvcrt

tan
tanh
sinh
fmod
exp
cosh
ceil
floorf
atan2f
powf
__CxxFrameHandler3
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
_callnewh
_CxxThrowException
_vsnprintf
_finite
_clearfp
_strdup
setlocale
sscanf
iswalpha
iswspace
iswpunct
iswdigit
wcstombs
isalnum
atoi
tolower
isalpha
isdigit
atof
isxdigit
_fpclass
_isnan
isspace
atol
_ultoa
toupper
wcsncpy_s
_vscwprintf
_vsnwprintf_s
_errno
_wcsdup
_beginthreadex
wcscspn
wcsspn
memmove_s
wcstol
wcsncmp
tanf
_snwprintf_s
cosf
sinf
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
frexp
wcstombs_s
fgetwc
fwrite
ftell
fseek
fclose
fread
_wfopen_s
fputwc
mbtowc
strchr
strncmp
strcat_s
fgetc
wcsstr
memmove
wcstoul
towlower
_stricmp
qsort
time
rand
srand
swprintf_s
wcstod
_wcsnicmp
wcscat_s
wcschr
wcsrchr
?_set_new_mode@@YAHH@Z
?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z
_wtoi
realloc
mbstowcs_s
_purecall
_wcsicmp
wcscpy_s
free
malloc
sscanf_s
memcpy
memset
sqrtf
atan2
atan
acos
asin
cos
sin
sqrt
log
pow
floor
memcmp
acosf

oleaut32

SysAllocString
VariantClear
SysFreeString
SysStringLen
VariantInit

ntdll

WinSqmIncrementDWORD
WinSqmAddToStream
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

ole32

CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

shell32

ExtractIconW
ShellExecuteW
SHGetKnownFolderPath
SHSetLocalizedName
CommandLineToArgvW
SHGetFolderPathW
SHGetFolderPathEx
ShellAboutW

comctl32

ImageList_Add
ImageList_Create
ImageList_Destroy
InitCommonControlsEx

gdiplus

GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDrawImageRectI
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromResource
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetTextRenderingHint
GdiplusShutdown
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesWrapMode
GdipCreateLineBrushFromRectI
GdipCreatePen1
GdipDeletePen
GdipSetPenDashStyle
GdipSetStringFormatHotkeyPrefix
GdipGetImageGraphicsContext
GdipGetDC
GdipReleaseDC
GdipDrawLineI
GdipDrawRectangle
GdipDrawRectangleI
GdipFillRectangleI
GdipFillRegion
GdipMeasureString
GdipDrawImagePointRectI
GdipSetClipRectI
GdipSetClipRegion
GdipCreateRegionHrgn
GdipDeleteRegion
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipImageRotateFlip
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipSetStringFormatFlags
GdipDrawString
GdiplusStartup
GdipDrawImageRectRectI

dsound

ord11

winmm

mmioSetInfo
mmioCreateChunk
mmioSeek
mmioWrite
mmioGetInfo
mmioAdvance
mmioAscend
mmioRead
mmioDescend
mmioClose
mmioOpenW
timeGetTime

oleacc

LresultFromObject
CreateStdAccessibleObject

slc

SLGetWindowsInformationDWORD

dinput8

DirectInput8Create

usp10

ScriptItemize
ScriptBreak

shlwapi

PathFileExistsW

secur32

GetUserNameExW

xinput9_1_0

XInputGetState

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00fbb766e808e50e691b3aeea88e7316

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

oleaut32

ntdll

ole32

shell32

comctl32

gdiplus

dsound

winmm

oleacc

slc

dinput8

usp10

shlwapi

secur32

xinput9_1_0

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.data Size: 40KB - Virtual size: 100KB

.pdata Size: 36KB - Virtual size: 35KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 22KB - Virtual size: 21KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 40KB - Virtual size: 100KB

.pdata
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 22KB - Virtual size: 21KB