425b1f518bb965d8591d12542db0a6b8

Sharing

Copy URL Twitter E-mail

General

Target

425b1f518bb965d8591d12542db0a6b8
Size

9.7MB
MD5

425b1f518bb965d8591d12542db0a6b8
SHA1

367c949af32623bfc9af6043b242d45d4e687db1
SHA256

5566779035df6b2f2a61d065ff4d330de0eb9167653432478d7e68f52f3c3574
SHA512

709315feaf936eeeb70680335f68eb6ee83c2a6398fe74a48acd6822089a6ad33fcf943ab9fe8f2867270e328964c01a84cbd4354b7902614bc251f139a99a1d
SSDEEP

98304:8Wf3af8mmu3xKmD/E8ErBRO6afSZ7O/H81QXgOL1Jypjkcx99VNgWnjSl6/xDYBi:7afV4TO6afjEufnUxQil

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
425b1f518bb965d8591d12542db0a6b8

Files

425b1f518bb965d8591d12542db0a6b8
.exe windows:4 windows x86 arch:x86

afbb09eccb92bed16afe834e6c2c54f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3d8

Direct3DCreate8

dinput8

DirectInput8Create

winmm

timeGetTime
timeBeginPeriod
timeKillEvent
timeSetEvent
timeEndPeriod

ws2_32

__WSAFDIsSet
select
connect
recv
WSAGetLastError
getsockname
inet_addr
recvfrom
send
closesocket
htons
sendto
inet_ntoa
WSAStartup
WSACleanup
gethostname
gethostbyname
WSAAsyncGetHostByName
htonl
bind
socket
ioctlsocket
setsockopt
ntohs

iphlpapi

SetIpForwardEntry
GetIpAddrTable
GetBestRoute
GetNetworkParams
GetAdaptersInfo
GetIpForwardTable

kernel32

GetEnvironmentStringsW
GetProcessHeap
IsProcessorFeaturePresent
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
IsValidCodePage
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
CloseHandle
GetLastError
CreateMutexA
Sleep
FindClose
FindFirstFileA
FindNextFileA
FileTimeToSystemTime
DeleteFileA
RemoveDirectoryA
GetFileAttributesA
GetDriveTypeA
GetModuleFileNameA
GetFullPathNameA
SetCurrentDirectoryA
CreateDirectoryA
GetModuleHandleA
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreA
SetPriorityClass
GetCurrentProcess
WaitForMultipleObjects
SetEvent
GetExitCodeThread
SetThreadPriority
CreateThread
CreateEventA
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
IsBadWritePtr
IsBadReadPtr
InterlockedIncrement
InterlockedDecrement
ResetEvent
GetSystemInfo
VirtualFree
GetCurrentThreadId
VirtualAlloc
FreeLibrary
LoadLibraryA
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetThreadPriority
GetCurrentThread
GetTickCount
MulDiv
OutputDebugStringA
WriteFile
lstrlenA
lstrcpyA
DebugBreak
FatalAppExitA
SetConsoleTitleA
AllocConsole
GetStdHandle
lstrcmpiA
lstrcatA
GetProfileIntA
ResumeThread
SuspendThread
PulseEvent
SetThreadAffinityMask
SetThreadPriorityBoost
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
GetOverlappedResult
GetStartupInfoA
GetCommandLineA
RaiseException
RtlUnwind
ExitThread
TlsSetValue
TlsGetValue
ExitProcess
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLocalTime
SetHandleCount
GetFileType
TlsFree
TlsAlloc
GetOEMCP
GetCPInfo
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
FlushFileBuffers
VirtualProtect
VirtualQuery
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale

user32

SetRect
GetAsyncKeyState
GetKeyboardLayout
GetKeyboardState
GetQueueStatus
RegisterWindowMessageA
PostThreadMessageA
wsprintfA
MsgWaitForMultipleObjects
RegisterHotKey
SystemParametersInfoA
UnregisterHotKey
GetSystemMetrics
CreateWindowExA
AdjustWindowRectEx
MessageBoxA
PostMessageA
SetForegroundWindow
ShowWindow
FindWindowA
SendMessageA
DefWindowProcA
InvalidateRect
ShowCursor
PostQuitMessage
SetFocus
EndPaint
BeginPaint
RegisterClassExA
LoadIconA
UpdateWindow
LoadCursorA
DispatchMessageA
TranslateMessage
PeekMessageA
ReleaseDC
GetDC
EnumDisplaySettingsA
ScreenToClient
GetKeyState
WindowFromPoint
GetCursorPos
GetActiveWindow
CallWindowProcA
SetWindowLongA
AttachThreadInput
GetWindowThreadProcessId
RegisterDeviceNotificationA
GetClassLongA
GetWindowLongA
GetWindowRect
SetCursor
RedrawWindow
SetWindowPos
IsIconic
UnregisterDeviceNotification
GetForegroundWindow

gdi32

GetDeviceCaps

advapi32

RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
CoTaskMemAlloc

Sections

.text
Size: 6.8MB - Virtual size: 6.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.6MB - Virtual size: 49.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

afbb09eccb92bed16afe834e6c2c54f1

Headers

File Characteristics

Imports

d3d8

dinput8

winmm

ws2_32

iphlpapi

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 6.8MB - Virtual size: 6.8MB

.rdata Size: 256KB - Virtual size: 254KB

.data Size: 2.6MB - Virtual size: 49.0MB

.data1 Size: 4KB - Virtual size: 2KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 6.8MB - Virtual size: 6.8MB

.rdata
Size: 256KB - Virtual size: 254KB

.data
Size: 2.6MB - Virtual size: 49.0MB

.data1
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 32KB - Virtual size: 32KB