5150431c2e427d7ca6bfd4772e9171d1

Sharing

Copy URL Twitter E-mail

General

Target

5150431c2e427d7ca6bfd4772e9171d1
Size

505KB
MD5

5150431c2e427d7ca6bfd4772e9171d1
SHA1

29276182136ea673eda1f2b3b142a7c87c4266ee
SHA256

bcf59b1ec97cf8f345e6684a88271b30693a3452974b4f2b1ba47bc9273cc9c7
SHA512

b4becbb4af7f4bb81d594d80786e049981fde3ec57a028a223554fa8421c1001797318c50df893082c4886adbe6214859e33f3fa540b9e9351e590472d8a059b
SSDEEP

12288:cfyWMy4B+WtgJnyg+3yx+6jYv8Hit76REmeab1IKrBQS:cKWzUkaixNjDCRbjoIHS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/QQPrierTK.exe

Files

5150431c2e427d7ca6bfd4772e9171d1
.rar
QQPrierTK.exe
.exe windows:4 windows x86 arch:x86

cd455857fd09f454c918dc8ea04df184

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAEnumNetworkEvents
WSAEventSelect
WSARecv
WSASend
closesocket
send
connect
WSAWaitForMultipleEvents
socket
recv
WSACleanup
WSAStartup
htons
gethostbyname
ntohl
WSACreateEvent
WSACloseEvent
setsockopt

kernel32

LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
GetFileTime
GetTickCount
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetDriveTypeW
GetConsoleCP
GetThreadLocale
RtlUnwind
GetFileType
GetDriveTypeA
CreateFileA
GetFullPathNameA
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
VirtualQuery
ExitProcess
HeapSize
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetCurrentDirectoryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEnvironmentVariableA
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetCurrentProcessId
GetModuleHandleA
RaiseException
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
GetModuleHandleW
GetProcAddress
GetVersionExA
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
LockFile
LockFileEx
UnlockFile
GetSystemInfo
FindFirstFileW
FindNextFileW
FindClose
ResetEvent
SignalObjectAndWait
ReleaseMutex
CreateMutexW
GetSystemTime
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetEnvironmentVariableW
GetTempPathW
FlushFileBuffers
GetFileInformationByHandle
GetDiskFreeSpaceW
WriteFile
ReadFile
SetFilePointer
SetEndOfFile
CreateFileW
GetFileAttributesW
MoveFileW
MoveFileExW
DeleteFileW
GetCurrentThreadId
GetVersionExW
GetVersion
FormatMessageA
SetLastError
PulseEvent
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetSystemDirectoryW
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
GetLastError
WideCharToMultiByte
lstrcmpW
lstrlenW
WaitForSingleObject
CreateEventW
SetEvent
FreeLibrary
LoadLibraryW
GetWindowsDirectoryW
Sleep
CreateThread
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
GetConsoleMode

user32

UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetWindowThreadProcessId
GetCursorPos
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
UnregisterClassA
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
DefWindowProcW
CallWindowProcW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextLengthW
GetWindowTextW
GetFocus
SetWindowPos
SetFocus
ShowWindow
MoveWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
GetNextDlgGroupItem
CharUpperW
CharNextW
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
DestroyMenu
GetSysColorBrush
GetMessageW
DrawIcon
GetSystemMetrics
IsIconic
LoadIconW
CopyIcon
LoadCursorW
InflateRect
ReleaseDC
GetDC
GetParent
GetWindowRect
InvalidateRect
IsWindow
SetWindowLongW
SetCursor
SetCapture
RedrawWindow
ReleaseCapture
PtInRect
GetClientRect
MessageBeep
GetSysColor
UpdateWindow
SendMessageW
EnableWindow
OffsetRect
SetPropW

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateRectRgnIndirect
SetViewportExtEx
GetMapMode
GetRgnBox
GetBkColor
GetTextColor
GetWindowExtEx
GetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
SetTextColor
GetClipBox
GetDeviceCaps
CreateSolidBrush
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
RectVisible
GetStockObject
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
PtVisible

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegQueryValueW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsDirectoryW
StrStrIA
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
StgIsStorageFile
StgOpenStorage
CoTaskMemFree
CoGetClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoTaskMemAlloc
OleUninitialize

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
DispCallFunc
SysAllocString
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
OleCreateFontIndirect
SysFreeString

wsock32

ioctlsocket
bind
listen
accept
htonl
WSASetLastError
inet_ntoa
ntohs
gethostname
WSAGetLastError

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 960KB - Virtual size: 959KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

cd455857fd09f454c918dc8ea04df184

Headers

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wsock32

iphlpapi

Sections

.text Size: 960KB - Virtual size: 959KB

.rdata Size: 148KB - Virtual size: 145KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 960KB - Virtual size: 959KB

.rdata
Size: 148KB - Virtual size: 145KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 24KB - Virtual size: 21KB