151fddaa38c622b42953fc6e3e29de639e2602ef4d1e3040ba4154bde02baaff

Sharing

Copy URL Twitter E-mail

General

Target

151fddaa38c622b42953fc6e3e29de639e2602ef4d1e3040ba4154bde02baaff
Size

2.5MB
MD5

35a69a0bad527008dd12a9f861654e39
SHA1

35bd3c295e33a9a59cac03e6d9591b6b1b650f74
SHA256

151fddaa38c622b42953fc6e3e29de639e2602ef4d1e3040ba4154bde02baaff
SHA512

7381cd539056ca059994c3b57896fffcfb2f9c388f05da3f61277b92b1d2d5d852ca8cb93a8c802c9fbc2e222b7e7fcecea59b88dd2b81de2f5c0e134dedc24a
SSDEEP

49152:DeQt13Le4Btj8BZUDv2QsKi9Xn6fBRs3HGBud5NCbR6h82iWhCcUl60WELIJcY:DeQ7aGtjQyuQspBn0BRsXGcd5NCbRU8J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
151fddaa38c622b42953fc6e3e29de639e2602ef4d1e3040ba4154bde02baaff

Files

151fddaa38c622b42953fc6e3e29de639e2602ef4d1e3040ba4154bde02baaff
.dll windows:6 windows x86 arch:x86

92740ec778c66da86c855c7fd2c46491

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvfw32

ICClose
ICOpen
ICDecompress
ICSendMessage

winhttp

WinHttpQueryHeaders
WinHttpWriteData
WinHttpOpen
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetCredentials
WinHttpOpenRequest
WinHttpConnect
WinHttpSetOption

rpcrt4

UuidToStringA
RpcStringFreeA

crypt32

CryptStringToBinaryA
CryptDecodeObjectEx
CryptBinaryToStringA
CryptExportPKCS8
CryptEncodeObjectEx
CryptExportPublicKeyInfo

kernel32

SearchPathA
GetTempFileNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
CreateEventW
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
InitializeSListHead
GetStdHandle
GetTempPathA
HeapQueryInformation
GetFullPathNameW
SetStdHandle
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
FindResourceExW
GetProfileIntA
ExitProcess
GetOEMCP
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetSystemDirectoryW
EncodePointer
SetErrorMode
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalAddAtomA
CompareStringA
GlobalDeleteAtom
GetCurrentThread
lstrcmpA
LocalAlloc
LoadLibraryExW
CreateMutexA
GetACP
ReleaseMutex
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
lstrcmpiA
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
SetLastError
CopyFileA
FormatMessageA
MulDiv
GlobalLock
GlobalUnlock
GlobalSize
SuspendThread
SetThreadPriority
GetCurrentThreadId
DecodePointer
RaiseException
HeapReAlloc
HeapSize
ReadFile
WriteFile
GetPrivateProfileStringA
GetCurrentProcess
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateThread
CreateIoCompletionPort
GetSystemWindowsDirectoryA
LoadLibraryExA
GetCurrentProcessId
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
GetTickCount
GetSystemDefaultUILanguage
GetLocalTime
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetSystemInfo
GetPrivateProfileIntA
LocalFree
CreateDirectoryA
WritePrivateProfileStringA
GetVersionExA
GetLastError
ResetEvent
GlobalFree
GlobalAlloc
FindResourceW
HeapFree
GetProcessHeap
HeapAlloc
ResumeThread
CreateEventA
WaitForSingleObject
SetEvent
WaitForMultipleObjects
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetFileAttributesA
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
CreateFileA
WriteConsoleW
GetFullPathNameA
lstrcpyA
LockResource
SizeofResource
LoadResource
FindResourceA
Sleep
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
CompareStringW
LCMapStringW
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
GetCurrentDirectoryW
ReadConsoleW
GetStringTypeW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetSystemTimeAsFileTime

user32

EndDialog
CreateDialogIndirectParamA
OffsetRect
SetRectEmpty
InflateRect
GetMenuItemInfoA
DestroyMenu
DestroyIcon
InvalidateRect
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
SystemParametersInfoA
CopyImage
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
MapVirtualKeyA
GetNextDlgTabItem
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
OpenClipboard
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
SetWindowRgn
GetKeyNameTextA
SetLayeredWindowAttributes
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
UnhookWindowsHookEx
SetCursor
ShowOwnedPopups
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongA
IsWindowEnabled
EnableWindow
GetAsyncKeyState
MapDialogRect
IntersectRect
TrackMouseEvent
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
LoadImageA
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
LoadCursorW
NotifyWinEvent
CreatePopupMenu
SetPropA
GetMenuDefaultItem
GetPropA
SetParent
MessageBoxA
PostMessageA
UnregisterClassA
GetDesktopWindow
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
MonitorFromPoint
UnionRect
UpdateLayeredWindow
DestroyCursor
RemoveMenu
CharUpperA
GetSystemMetrics
PostQuitMessage
EnumDisplayMonitors
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
GetForegroundWindow

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetObjectA
SetTextColor
SetBkColor
DeleteDC
CreateBitmap
GetDeviceCaps
CreateDCA
DPtoLP
ExtSelectClipRgn
CopyMetaFileA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

CryptDecrypt
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
RegOpenKeyExA
CryptImportKey
CryptGenKey
RegSetValueExA
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA

shell32

SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
SHAppBarMessage
SHGetSpecialFolderPathA
DragFinish

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
StrFormatKBSizeA

uxtheme

GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

ole32

CoDisconnectObject
CoInitializeEx
CreateStreamOnHGlobal
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateGuid

oleaut32

VariantCopy
VarBstrFromDate
LoadTypeLi
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString

winmm

PlaySoundA
mmioWrite
mmioSetInfo
mmioAdvance
mmioGetInfo
mmioCreateChunk
mmioSeek
mmioAscend
mmioDescend
mmioClose

dsound

ord6
ord1

iphlpapi

GetAdaptersAddresses

ws2_32

recvfrom
ioctlsocket
connect
select
__WSAFDIsSet
WSAGetLastError
send
recv
inet_addr
htons
inet_ntoa
WSAStartup
WSACleanup
WSASocketA
listen
accept
getpeername
WSACreateEvent
WSACloseEvent
getsockopt
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
WSASend
shutdown
closesocket
htonl
bind
freeaddrinfo
WSARecv
getaddrinfo
socket
setsockopt
WSAAddressToStringA
sendto

gdiplus

GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdiplusStartup
GdipAlloc
GdiplusShutdown
GdipGetImagePalette
GdipCloneImage
GdipFree

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Exports

Exports

CreateGeoObject
GeoSetInfo
IPCam5Aud2WayEnable
IPCam5AudEnable
IPCam5Connect
IPCam5Connect2
IPCam5DecodcEnable
IPCam5Disconnect
IPCam5Disconnect2
IPCam5EnableCallBack
IPCam5GetDeviceInfo
IPCam5GetGPIOSetting
IPCam5GetGPIOValue
IPCam5GetIOInfo
IPCam5GetLastError
IPCam5GetMotionSettings
IPCam5GetTimerInterval
IPCam5GetVSettingFromSVR
IPCam5GetVersion
IPCam5GetVideoData
IPCam5GetVideoEventHandle
IPCam5GetVideoSetting
IPCam5Init
IPCam5ReleaseVideoData
IPCam5Run
IPCam5SendData
IPCam5SetAudioFormat
IPCam5SetCallback
IPCam5SetGPIOSetting
IPCam5SetGPIOValue
IPCam5SetInfo
IPCam5SetMotionDetection
IPCam5SetMotionNotifyType
IPCam5SetTimerInterval
IPCam5SetUsrPtr
IPCam5SetVideoSetting
IPCam5Stop
IPCam5Test
ReleaseGeoObject
StartPassiveSVR
StopPassiveSVR

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92740ec778c66da86c855c7fd2c46491

Headers

DLL Characteristics

File Characteristics

Imports

msvfw32

winhttp

rpcrt4

crypt32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

winmm

dsound

iphlpapi

ws2_32

gdiplus

oleacc

imm32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 366KB - Virtual size: 365KB

.data Size: 23KB - Virtual size: 65KB

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 153KB - Virtual size: 153KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 366KB - Virtual size: 365KB

.data
Size: 23KB - Virtual size: 65KB

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 153KB - Virtual size: 153KB