e6b1fbfe074c291ab9de45d8615a8cc0347a507f500973c1eb262ad80e6059f8

Sharing

Copy URL Twitter E-mail

General

Target

e6b1fbfe074c291ab9de45d8615a8cc0347a507f500973c1eb262ad80e6059f8
Size

3.7MB
MD5

0e8bf9af3cbef3cbd3d3b2763e9451db
SHA1

24ca291e6c98a54853b094a3399210c2cb264cb1
SHA256

e6b1fbfe074c291ab9de45d8615a8cc0347a507f500973c1eb262ad80e6059f8
SHA512

3bb82e49abfa6192a0cfb10bbd79006497c433c3079ca5a0aa20436fda4da58aa1078b654baf055bffaee25234389abdd24d3db1159ec4926d0a19917ae96d65
SSDEEP

49152:SX64fFBcFZK2lOK8A18DcPlE9WTVWSAX1XIx8DUMNXBSSIJBIv52:SX6YrcKw/lNVXGXByBIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6b1fbfe074c291ab9de45d8615a8cc0347a507f500973c1eb262ad80e6059f8

Files

e6b1fbfe074c291ab9de45d8615a8cc0347a507f500973c1eb262ad80e6059f8
.dll windows:6 windows x86 arch:x86

fe179979581d949cedff9ac65ae1bf8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Add
ImageList_AddMasked
ImageList_Destroy
ImageList_Replace
ImageList_Create
ImageList_SetImageCount
_TrackMouseEvent
ImageList_GetIconSize
InitCommonControlsEx
ord380

shell32

ord74
ord88
ShellExecuteW

shlwapi

StrCmpLogicalW
SHAutoComplete
StrCmpIW
ord12

gdiplus

GdipDeleteBrush
GdipCreatePen1
GdipCreateSolidFill
GdipSetSmoothingMode
GdipAlloc
GdipCloneBrush
GdipFree
GdipCreatePath
GdipDeletePen
GdipBitmapUnlockBits
GdipDeletePath
GdipAddPathLineI
GdipAddPathArcI
GdipClosePathFigure
GdipFillPath
GdipDrawPath
GdipFillPolygon
GdipCreateFromHDC
GdipDeleteGraphics
GdipFillRectangleI
GdiplusShutdown
GdipDrawLineI
GdipSetClipRectI
GdipCreateLineBrushFromRectI
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectRectI
GdipSetImageAttributesWrapMode
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdiplusStartup
GdipBitmapLockBits

shared

_uGetOpenFileName@32
_uGetWindowText@8
_uGetFullPathName@8
_uChooseColor@12
_ModalDialog_PokeExisting@0
_ModalDialog_CanCreateNew@0
_uMessageBox@16
_stricmp_utf8_partial@12
_uExtTextOut@32
_uGetTextExtentPoint32@16
_uTabCtrl_InsertItem@12
_uGetFileAttributes@4
_uGetModuleFileName@8
_uCharLower@4
_uSendMessageText@16
_uTreeView_InsertItem@8
_uFixAmpersandChars@8
_stricmp_utf8_max@12
_uFormatSystemErrorMessage@8
_uModifyMenu@20
_uGetMenuString@16
_uGetMenuItemType@8
_uTabCtrl_SetItem@12
_FindOwningPopup@4
_uSendDlgItemMessageText@20
_uSetDlgItemText@12
_ModalDialog_Switch@4
_GetInfiniteWaitEvent@0
_uShellNotifyIcon@24
_stricmp_utf8_ex@16
_uSetWindowText@8
_uGetDlgItemText@12
_uAppendMenu@16
_uStringCompare@8
_uFixAmpersandChars_v2@8
_uLoadImage@24
_stricmp_utf8@8
??1uCallStackTracker@@QAE@XZ
??0uCallStackTracker@@QAE@PBD@Z
_uPrintCrashInfo_OnEvent@8
_uBugCheck@0
_uShellNotifyIconEx@32
_uDragQueryFile@12
_uDragQueryFileCount@4

uxtheme

SetWindowTheme
OpenThemeData
GetThemeMargins
GetThemeTextExtent
DrawThemeText
GetThemePartSize
IsThemeActive
IsAppThemed
IsThemePartDefined
GetThemeColor
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeBackground
CloseThemeData
EnableThemeDialogTexture

dwmapi

DwmSetWindowAttribute

usp10

ScriptRecordDigitSubstitution
ScriptFreeCache
ScriptStringFree
ScriptStringAnalyse
ScriptString_pcOutChars
ScriptStringGetLogicalWidths
ScriptString_pSize
ScriptStringOut
ScriptString_pLogAttr
ScriptApplyDigitSubstitution

windowscodecs

WICConvertBitmapSource

kernel32

CompareStringW
ExitProcess
SetConsoleCtrlHandler
GetFileType
SetStdHandle
ResumeThread
ExitThread
HeapQueryInformation
HeapSize
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
TerminateProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessAffinityMask
VirtualFree
GetCurrentProcess
DuplicateHandle
SetThreadGroupAffinity
GetThreadGroupAffinity
GetNumaHighestNodeNumber
GetLogicalProcessorInformationEx
GetCurrentProcessorNumberEx
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateThread
SignalObjectAndWait
InitializeSListHead
GetModuleHandleA
GetModuleFileNameW
FreeLibraryAndExitThread
GetThreadTimes
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
LoadLibraryExW
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
GetSystemTimeAsFileTime
FlushProcessWriteBuffers
CreateEventExW
InitializeCriticalSectionEx
FlsFree
SetThreadPriority
GetCurrentThread
CloseHandle
WaitForSingleObject
IsValidLocale
GetLastError
GetTickCount
GlobalLock
FindResourceW
SizeofResource
LoadResource
LockResource
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryW
GetProcAddress
FreeLibrary
OutputDebugStringW
GetCurrentThreadId
FormatMessageW
IsDebuggerPresent
MulDiv
CompareStringEx
GetLocalTime
QueryPerformanceCounter
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleExW
GlobalAlloc
GlobalUnlock
GlobalFree
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
ReleaseSemaphore
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
HeapAlloc
CreateMutexExW
GetProcessHeap
GetModuleHandleW
DebugBreak
FlsSetValue
FlsGetValue
FlsAlloc
SwitchToThread
GetLocaleInfoEx
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
InitOnceComplete
InitOnceBeginInitialize
TryAcquireSRWLockExclusive
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
IsProcessorFeaturePresent
GlobalSize
GetTimeFormatW
GetDateFormatW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetTickCount64
RaiseException
GetThreadPriority
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
Sleep
SetEvent
CreateEventW
WriteConsoleW
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
LCMapStringW
SetFilePointerEx
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetTimeZoneInformation
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
SetLastError

user32

EnumWindows
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RealChildWindowFromPoint
SetCursor
DrawIconEx
GetParent
TrackPopupMenuEx
WindowFromDC
ValidateRect
IsWindowEnabled
GetPropW
SetDlgItemInt
GetWindowPlacement
EnumChildWindows
GetDlgCtrlID
IsClipboardFormatAvailable
EndDeferWindowPos
GetCapture
SystemParametersInfoW
ScrollWindowEx
SetScrollInfo
GetScrollInfo
SetActiveWindow
IsIconic
ReleaseCapture
DeferWindowPos
GetClassNameW
MonitorFromWindow
ChildWindowFromPointEx
GetMonitorInfoW
MonitorFromPoint
ClientToScreen
SetMenuItemInfoW
InsertMenuW
GetMenuItemCount
GetCursorPos
SetForegroundWindow
GetAsyncKeyState
GetKeyState
DeregisterShellHookWindow
RegisterShellHookWindow
RegisterWindowMessageW
WindowFromPoint
DestroyWindow
IsChild
IsWindow
UpdateWindow
SetWindowTextW
SetTimer
UnregisterClassW
SetWindowPlacement
RegisterClassW
LoadCursorW
GetWindowThreadProcessId
MessageBoxW
BeginDeferWindowPos
DrawTextW
InvalidateRect
DrawEdge
GetDoubleClickTime
KillTimer
GetNextDlgTabItem
SetCapture
ChildWindowFromPoint
CreateDialogParamW
DialogBoxParamW
DrawFocusRect
EqualRect
GetClipboardData
GetIconInfo
GetMenuItemID
GetMenuState
GetSubMenu
CheckMenuRadioItem
UnhookWindowsHookEx
DispatchMessageW
SetFocus
GetFocus
InsertMenuItemW
PostMessageW
GetAncestor
GetDlgItemInt
IntersectRect
GetWindow
MapWindowPoints
GetTopWindow
FillRect
SetLayeredWindowAttributes
GetLayeredWindowAttributes
IsWindowVisible
LoadImageW
GetMessagePos
BeginPaint
EndPaint
PtInRect
GetSystemMetrics
InflateRect
DrawTextExW
GetWindowTextW
GetWindowTextLengthW
RegisterClipboardFormatW
ScreenToClient
DestroyMenu
TrackPopupMenu
AppendMenuW
CreatePopupMenu
GetSysColorBrush
SendDlgItemMessageW
EndDialog
GetDlgItem
DestroyIcon
GetClientRect
GetDC
ReleaseDC
GetWindowRect
EnableWindow
CallWindowProcW
GetWindowLongW
DefWindowProcW
GetComboBoxInfo
SetWindowLongW
CreateWindowExW
RedrawWindow
GetSysColor
SendMessageW
SetWindowPos
SetParent
ShowWindow
TranslateMessage
PostQuitMessage
GetUpdateRect
GetMessageW
SetWindowsHookExW
CallNextHookEx
PostThreadMessageW
CharLowerW
MapDialogRect
GetMenuItemInfoW

gdi32

SetBkColor
SelectObject
GetObjectW
GetTextExtentPoint32W
GetBkMode
CombineRgn
CreateRectRgnIndirect
SetPixel
SetTextAlign
GetTextMetricsW
SetTextColor
OffsetWindowOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
CreateSolidBrush
CreateDIBSection
GdiFlush
CreatePen
SetBkMode
ExcludeClipRect
MoveToEx
LineTo
GetDeviceCaps
GetTextColor
EnumFontFamiliesExW
GdiAlphaBlend
ExtTextOutW
SetWindowOrgEx
GetStockObject
Rectangle
CreateDIBitmap
BitBlt
CreateFontIndirectW
GetPixel
DeleteObject

comdlg32

ChooseFontW

ole32

RegisterDragDrop
CoCreateFreeThreadedMarshaler
CoUninitialize
CoInitializeEx
OleGetClipboard
OleSetClipboard
OleInitialize
OleUninitialize
CoCreateInstance
ReleaseStgMedium
RevokeDragDrop

urlmon

CopyStgMedium

oleaut32

GetErrorInfo
SetErrorInfo
SysAllocString
SysFreeString
SysStringLen

Exports

Exports

foobar2000_get_interface

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe179979581d949cedff9ac65ae1bf8f

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shell32

shlwapi

gdiplus

shared

uxtheme

dwmapi

usp10

windowscodecs

kernel32

user32

gdi32

comdlg32

ole32

urlmon

oleaut32

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 259KB - Virtual size: 259KB

.data Size: 44KB - Virtual size: 57KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 97KB - Virtual size: 97KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 259KB - Virtual size: 259KB

.data
Size: 44KB - Virtual size: 57KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 97KB - Virtual size: 97KB