a81ab26669c7f3f6c787bdef57175f723cabb9de4815e73a879f694e82315b43

Sharing

Copy URL Twitter E-mail

General

Target

a81ab26669c7f3f6c787bdef57175f723cabb9de4815e73a879f694e82315b43
Size

3.8MB
MD5

008d79b9d30c21069f4b908907bcce6f
SHA1

5081c13582b4fd7a39d2477211054e82a76e2033
SHA256

a81ab26669c7f3f6c787bdef57175f723cabb9de4815e73a879f694e82315b43
SHA512

e541c5ab091b6ebff6fb727c3e4fb81706a67d6ae66dd0eb521e62d4927d5ca8789dd6f1047fe549ac026ba151f3dfc1622c1bae62253ef22daa4f836c0d79d4
SSDEEP

98304:htnvAarCAOeLqlJPWHjDx8zz9Ko5ANCnFnnHcsLG:htvAarPelqZaFnnHc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a81ab26669c7f3f6c787bdef57175f723cabb9de4815e73a879f694e82315b43

Files

a81ab26669c7f3f6c787bdef57175f723cabb9de4815e73a879f694e82315b43
.exe windows:6 windows x86 arch:x86

d516d36b8c10d02d61c4a4cf64c402b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSUnRegisterSessionNotification
WTSRegisterSessionNotification

kernel32

GetLocalTime
GetSystemInfo
GetVersionExA
QueryPerformanceFrequency
WaitForMultipleObjects
VirtualAlloc
RtlUnwind
VirtualQuery
SetStdHandle
GetFileType
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapQueryInformation
ExitProcess
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
IsValidCodePage
GetOEMCP
GetConsoleOutputCP
GetDriveTypeW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
CreateSemaphoreA
GetThreadPriority
CreateEventA
ReleaseSemaphore
TryEnterCriticalSection
GetStdHandle
GetCPInfo
GetStringTypeW
SizeofResource
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapSize
MultiByteToWideChar
GetLastError
LockResource
HeapReAlloc
LoadResource
FindResourceW
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
WideCharToMultiByte
MulDiv
WritePrivateProfileStringW
GetPrivateProfileStringW
WritePrivateProfileSectionW
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
InitializeCriticalSectionEx
CopyFileW
FormatMessageA
RaiseException
OutputDebugStringW
CreateDirectoryW
CreateThread
GetShortPathNameW
GetModuleFileNameW
lstrcpynW
ReadFile
CancelIo
WriteFile
DeviceIoControl
WaitForSingleObject
CreateEventW
CreateFileA
CloseHandle
ResetEvent
GetOverlappedResult
LocalFree
FindFirstFileW
lstrlenA
FindClose
SetConsoleTextAttribute
lstrcmpA
GetLocaleInfoA
lstrcpyW
lstrcmpiW
GetCurrentProcessId
GetLocaleInfoW
GetACP
lstrlenW
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcmpW
GetCurrentProcess
RemoveDirectoryW
GetCurrentThreadId
OpenProcess
DeleteFileW
SetUnhandledExceptionFilter
GetPrivateProfileStructW
GetFileAttributesExW
GetCurrentDirectoryW
OutputDebugStringA
EncodePointer
SetLastError
GetSystemDirectoryW
GetModuleHandleA
LoadLibraryExW
LoadLibraryA
GlobalDeleteAtom
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GlobalFree
GlobalSize
GetVersionExW
CreateFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
GetThreadLocale
LocalAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
SystemTimeToFileTime
SetEvent
SetThreadPriority
ResumeThread
GetCurrentThread
CompareStringA
GetPrivateProfileIntW
FindNextFileW
GetTickCount64
GlobalGetAtomNameW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
SetErrorMode
VerSetConditionMask
VerifyVersionInfoW
FindResourceExW
GetWindowsDirectoryW
GetTempPathW
SearchPathW
GetProfileIntW
GetTempFileNameW
GetUserDefaultLCID
GetTickCount
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
FormatMessageW

user32

UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
EqualRect
MapWindowPoints
GetWindowTextLengthW
BeginDeferWindowPos
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
IsDialogMessageW
CreateDialogIndirectParamW
GetNextDlgTabItem
BeginPaint
SetActiveWindow
GetActiveWindow
GetDesktopWindow
GetMenuState
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
SetFocus
GetDlgItem
SetWindowPlacement
CallNextHookEx
SetWindowPos
DestroyWindow
IsMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
PeekMessageW
DispatchMessageW
EnumDisplayMonitors
GetMonitorInfoW
SetParent
ShowWindow
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
FillRect
IntersectRect
GetKeyNameTextW
MapVirtualKeyW
SendDlgItemMessageA
SetRectEmpty
DestroyMenu
SetScrollInfo
GetClassInfoW
EnumWindows
DeleteMenu
GetMenuItemInfoW
CharUpperW
CharNextW
GetScrollInfo
WinHelpW
MonitorFromWindow
MoveWindow
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
IsWindowEnabled
GetWindowPlacement
WindowFromPoint
AdjustWindowRectEx
RegisterShellHookWindow
GetLastInputInfo
CreatePopupMenu
OpenClipboard
CloseClipboard
SetMenuItemInfoW
EmptyClipboard
GetForegroundWindow
SetClipboardData
SetWindowLongW
IsZoomed
SystemParametersInfoW
WaitMessage
GetMessageW
TranslateMessage
MsgWaitForMultipleObjects
DispatchMessageA
RegisterWindowMessageA
GetQueueStatus
PostThreadMessageA
PeekMessageA
RegisterWindowMessageW
IsIconic
GetCursorPos
SendInput
GetWindowThreadProcessId
GetWindow
MessageBoxW
EndDialog
GetSystemMetrics
GetWindowLongW
ModifyMenuW
GetMenuItemID
EnumChildWindows
SetWindowTextW
GetDlgCtrlID
GetMenuStringW
GetClassNameW
CharNextExA
GetWindowTextW
GetMessagePos
SetTimer
FindWindowExW
IsChild
LoadCursorW
SetCursor
MapDialogRect
KillTimer
IsWindowVisible
IsWindow
InsertMenuW
SetForegroundWindow
InflateRect
GetSysColor
LoadImageW
LoadMenuW
GetMenuItemCount
ScreenToClient
GetSubMenu
ClientToScreen
LoadIconW
RemoveMenu
AppendMenuW
EnableMenuItem
GetDC
SetClassLongW
GetCapture
CopyRect
DrawFocusRect
SetCapture
GetClassLongW
PtInRect
DrawFrameControl
ReleaseCapture
ReleaseDC
DeferWindowPos
GetKeyState
PostMessageW
GetWindowRect
PostQuitMessage
ShowOwnedPopups
MessageBeep
RegisterClipboardFormatW
SetRect
CopyImage
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
TrackMouseEvent
DestroyIcon
CopyAcceleratorTableW
InvalidateRgn
IsRectEmpty
SetWindowContextHelpId
GetNextDlgGroupItem
DrawIconEx
GetIconInfo
SetLayeredWindowAttributes
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
IsClipboardFormatAvailable
MonitorFromPoint
DrawStateW
GetSystemMenu
SetWindowRgn
NotifyWinEvent
PostThreadMessageW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
GetMenuDefaultItem
EnableScrollBar
HideCaret
InvertRect
DrawEdge
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
CharUpperBuffW
SetMenuDefaultItem
DrawMenuBar
DefFrameProcW
GetFocus
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetComboBoxInfo
GetDoubleClickTime
EnableWindow
InvalidateRect
UnregisterClassW
SendMessageW
GetParent
GetClientRect
EndDeferWindowPos
OffsetRect
CreateMenu
GetWindowRgn
DestroyCursor

gdi32

SetPixelV
GetTextFaceW
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
GetWindowOrgEx
GetViewportOrgEx
SetPaletteEntries
ExtFloodFill
RoundRect
Rectangle
LPtoDP
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
RealizePalette
GetDIBits
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
GetRgnBox
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
CreateDCW
CopyMetaFileW
SetTextColor
SetBkColor
GetTextExtentPoint32W
GetTextColor
DeleteObject
GetBkColor
SelectObject
GetStockObject
GetDeviceCaps
GetObjectW
CreateFontIndirectW
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegDeleteValueW
CryptDestroyHash
CryptHashData
CryptDeriveKey
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptAcquireContextW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
CryptReleaseContext
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CryptDestroyKey

shell32

SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHGetSpecialFolderPathW
Shell_NotifyIconW
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetFileInfoW

comctl32

ImageList_SetBkColor
ImageList_GetImageInfo
ImageList_Draw
InitCommonControlsEx
ImageList_ReplaceIcon

shlwapi

UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
StrStrW
PathIsRelativeW
PathFileExistsW
PathFindFileNameW
StrCmpW
StrCmpIW
StrToIntW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
CloseThemeData
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetCurrentThemeName
GetWindowTheme
GetThemeColor
GetThemeSysColor
OpenThemeData

ole32

IsAccelerator
OleTranslateAccelerator
PropVariantClear
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleLockRunning
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CreateBindCtx
CoTaskMemFree
CoUninitialize
MkParseDisplayName
CoInitialize
CoCreateInstance
CoTaskMemAlloc
OleDestroyMenuDescriptor

oleaut32

SysFreeString
VariantClear
VariantChangeType
SysStringLen
SysAllocString
SysAllocStringByteLen
VariantInit
SysAllocStringLen
OleCreateFontIndirect
VariantCopy
LoadRegTypeLi
DispCallFunc
SystemTimeToVariantTime
LoadTypeLi
VarBstrFromDate
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime

oledlg

OleUIBusyW

ws2_32

gethostname
inet_ntoa
getaddrinfo
inet_addr
freeaddrinfo
getsockopt
WSAAddressToStringA
WSASocketA
getsockname
WSASetLastError
gethostbyname
accept
bind
closesocket
connect
htonl
htons
WSAIoctl
gethostbyaddr
WSAStringToAddressA
ntohs
recv
recvfrom
select
send
sendto
socket
WSAAsyncSelect
WSAGetLastError
WSACleanup
WSAStartup

gdiplus

GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipSetInterpolationMode
GdipBitmapLockBits
GdipDrawImageRectI

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

hid

HidP_GetUsages
HidD_SetFeature
HidD_FreePreparsedData
HidD_GetPreparsedData
HidP_GetCaps
HidP_GetButtonCaps
HidD_GetIndexedString
HidD_GetProductString
HidD_GetAttributes
HidP_SetUsages
HidD_GetManufacturerString
HidD_FlushQueue
HidD_GetSerialNumberString

wsock32

inet_ntoa
listen
ntohl
setsockopt
__WSAFDIsSet

psapi

GetModuleFileNameExW

dbghelp

MiniDumpWriteDump

msi

ord45
ord70

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCrackUrlW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetSetOptionW
InternetGetLastResponseInfoW
InternetSetStatusCallbackW
InternetCanonicalizeUrlW

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

waveInOpen
waveInGetDevCapsA
waveInGetNumDevs
waveInPrepareHeader
waveInUnprepareHeader
waveOutReset
waveOutRestart
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
waveInAddBuffer
waveInStart
waveInStop
waveInReset
timeKillEvent
timeBeginPeriod
timeEndPeriod
timeSetEvent
waveInClose
PlaySoundW
waveOutGetErrorTextA
waveInGetErrorTextA
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetVolume
waveOutSetVolume
waveOutOpen
waveOutClose
waveOutPause

avcodec-57

av_codec_next
av_init_packet
avcodec_alloc_context3
avcodec_close
avcodec_decode_video2
avcodec_encode_video2
avcodec_open2
avcodec_register_all

avutil-55

av_frame_unref
av_free
av_log_get_level
av_log_set_callback
av_log_set_level
av_opt_set
av_opt_set_int
av_strerror

swscale-4

sws_freeContext
sws_getContext
sws_scale

rpcrt4

UuidCompare

quartz

AMGetErrorTextA

sdl2

SDL_GetWindowSize
SDL_ShowWindow
SDL_HideWindow
SDL_DestroyWindow
SDL_PollEvent
SDL_GetError
SDL_CreateWindow
SDL_CreateWindowFrom
SDL_CreateTexture
SDL_RenderSetViewport
SDL_RenderClear
SDL_RenderCopy
SDL_RenderPresent
SDL_DestroyTexture
SDL_DestroyRenderer
SDL_Init
SDL_Quit
SDL_GetWindowWMInfo
SDL_SetWindowSize
SDL_GetWindowFlags
SDL_SetWindowPosition
SDL_GetWindowPosition
SDL_UpdateTexture
SDL_GetWindowID
SDL_CreateRenderer

avformat-57

av_register_all

Exports

Exports

hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_feature_report
hid_get_indexed_string
hid_get_manufacturer_string
hid_get_product_string
hid_get_serial_number_string
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_write

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 631KB - Virtual size: 631KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d516d36b8c10d02d61c4a4cf64c402b0

Headers

DLL Characteristics

File Characteristics

Imports

wtsapi32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

ws2_32

gdiplus

setupapi

hid

wsock32

psapi

dbghelp

msi

oleacc

wininet

imm32

winmm

avcodec-57

avutil-55

swscale-4

rpcrt4

quartz

sdl2

avformat-57

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 631KB - Virtual size: 631KB

.data Size: 45KB - Virtual size: 399KB

_RDATA Size: 68KB - Virtual size: 68KB

.rsrc Size: 117KB - Virtual size: 117KB

.reloc Size: 199KB - Virtual size: 198KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 631KB - Virtual size: 631KB

.data
Size: 45KB - Virtual size: 399KB

_RDATA
Size: 68KB - Virtual size: 68KB

.rsrc
Size: 117KB - Virtual size: 117KB

.reloc
Size: 199KB - Virtual size: 198KB