90586569300083af09cfd314ca3e58bb78f72788fe8adf34f0dbb023fdf46d91

Sharing

Copy URL

Twitter E-mail

General

Target

90586569300083af09cfd314ca3e58bb78f72788fe8adf34f0dbb023fdf46d91
Size

2.7MB
MD5

a734c5eb7e9b2fd22bac5105bc1f7f50
SHA1

e56d8c0a9a1351b97ecf4646ee29dd76b6e6ca7e
SHA256

90586569300083af09cfd314ca3e58bb78f72788fe8adf34f0dbb023fdf46d91
SHA512

36f35914d6e7ffc0a30c6701a14eb5000e242e83661f81799268f70b707a0ee4fcbdc65f275e0c54ddf3c640ac13ccecef7dd3d6b4c78319c070e3151b4d3415
SSDEEP

49152:rPQ7PQ4kAOtJAzXqHB5VP8m9M3qtZK0KaKsAwcRUuPl8YThYWv/RKW2DjGTARU63:rPQ7PQ4kDtGz2B5VP8StZKnaKs/c7Ple

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90586569300083af09cfd314ca3e58bb78f72788fe8adf34f0dbb023fdf46d91

Files

90586569300083af09cfd314ca3e58bb78f72788fe8adf34f0dbb023fdf46d91
.dll windows:6 windows x86 arch:x86

a831d80a45159a721c7771d43c2a1949

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvfw32

DrawDibDraw
DrawDibClose
DrawDibOpen

winmm

DefDriverProc
PlaySoundA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

GetModuleHandleExW
AreFileApisANSI
HeapQueryInformation
SetStdHandle
GetFileType
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetConsoleCP
GetConsoleMode
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetStringTypeW
SetFilePointerEx
LCMapStringW
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableA
CreateFileW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
ExitProcess
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
VirtualQuery
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
lstrcpyA
GetVolumeInformationA
lstrcmpiA
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
DeleteFileA
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
FileTimeToSystemTime
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
VirtualAlloc
ReadConsoleW
VerSetConditionMask
TlsAlloc
GetPrivateProfileStringA
lstrcmpA
GetCurrentThread
ResumeThread
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeResource
GetSystemDirectoryW
EncodePointer
CopyFileA
FormatMessageA
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
ReleaseSemaphore
CreateSemaphoreA
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleTextAttribute
IsDBCSLeadByteEx
GetACP
ResetEvent
WritePrivateProfileStringA
OpenMutexA
GetCurrentThreadId
CreateMutexA
ReleaseMutex
GetModuleHandleA
GetSystemInfo
GetVersion
GetPrivateProfileIntA
MulDiv
WaitForMultipleObjects
GetVersionExA
CreateThread
Sleep
CreateEventA
WaitForSingleObject
SetEvent
Beep
MultiByteToWideChar
GetWindowsDirectoryA
GlobalMemoryStatusEx
OpenProcess
GetCurrentProcessId
CloseHandle
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcess
GetProcessTimes
InitializeCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
FreeLibrary
OutputDebugStringA
GetLastError
ExitThread

user32

GetDoubleClickTime
SetClassLongA
LockWindowUpdate
SetParent
SetRect
SetCursorPos
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
GetSystemMenu
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
CharUpperA
DestroyIcon
IsIconic
InvalidateRect
DeleteMenu
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
MapVirtualKeyA
GetKeyNameTextA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
SetMenuItemInfoA
DrawIcon
GetWindowRgn
DestroyCursor
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
SetMenuDefaultItem
GetWindowThreadProcessId
CopyIcon
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetParent
SendDlgItemMessageA
GetWindow
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
InflateRect
CopyRect
FrameRect
FillRect
ReleaseDC
GetDC
GetSystemMetrics
GetDesktopWindow
KillTimer
SetTimer
LoadBitmapW
PostMessageA
RegisterWindowMessageA
UnregisterClassA
LoadIconA
SetWindowPos
EnableWindow
SendMessageA
IntersectRect

gdi32

IntersectClipRect
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetRectRgn
DPtoLP
GetNearestPaletteIndex
GetPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
SetTextAlign
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
GetPixel
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
CombineRgn
GetObjectA
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
GetTextColor
GetStockObject
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
SetTextColor
SetBkColor
CreateDCA
CopyMetaFileA
CreateDIBSection
PatBlt
CreateSolidBrush
CreateBitmap
BitBlt
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetDIBits
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetCharacterPlacementA
CreateFontA
PtInRegion
GetRegionData
GetBitmapBits
ExtCreateRegion
DeleteObject
LineTo

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderA
SHGetFolderPathA
DragFinish
DragQueryFileA
SHGetDesktopFolder

shlwapi

PathFindFileNameA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathFindExtensionA
PathRemoveFileSpecW

uxtheme

CloseThemeData
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName

ole32

DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
OleLockRunning
CoTaskMemFree
CoTaskMemAlloc
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoUninitialize

oleaut32

SysAllocString
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
VariantChangeType

dsound

ord1

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePalette
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Exports

Exports

CodecLib
CreateHEVC_Codec
CreateHEVC_Nal
CreateHEVC_Parser
DriverProc
GetHEVC_NalType
GetHEVC_ParserSliceType
GetHEVC_SPS
ReleaseHEVC_Codec
UserProc
UserProcLib

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GvCodecL
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a831d80a45159a721c7771d43c2a1949

Headers

DLL Characteristics

File Characteristics

Imports

msvfw32

winmm

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

dsound

oleacc

gdiplus

imm32

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 532KB - Virtual size: 531KB

.data Size: 25KB - Virtual size: 150KB

GvCodecL Size: 512B - Virtual size: 8B

.rodata Size: 512B - Virtual size: 240B

.rsrc Size: 22KB - Virtual size: 22KB

.reloc Size: 139KB - Virtual size: 139KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 532KB - Virtual size: 531KB

.data
Size: 25KB - Virtual size: 150KB

GvCodecL
Size: 512B - Virtual size: 8B

.rodata
Size: 512B - Virtual size: 240B

.rsrc
Size: 22KB - Virtual size: 22KB

.reloc
Size: 139KB - Virtual size: 139KB