12914a7be2d17bdcab2908aa2a8a309f8d9d2fead50a2d4a6f4d51889a9033b2

Sharing

Copy URL Twitter E-mail

General

Target

12914a7be2d17bdcab2908aa2a8a309f8d9d2fead50a2d4a6f4d51889a9033b2
Size

4.4MB
MD5

05e6a2a013778fbb254d55b4128ef4e4
SHA1

a8fe9b755fe643565c21e78eb594a0ad49567a08
SHA256

12914a7be2d17bdcab2908aa2a8a309f8d9d2fead50a2d4a6f4d51889a9033b2
SHA512

5f13badeb4d8099859ba8f5f0ed5ab597968fd26361bb3253d35d475b611fb938d1b5a573fa6ccfc0b2de8a5375cf6bb2839e36dd1c7fdc6c9fffa119b1af582
SSDEEP

98304:KGc8lCkf5IktM+q8dLFYVp8ggNjxFLOAkGkzdnEVomFHKnP:KGZEdkXFip8gmxFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12914a7be2d17bdcab2908aa2a8a309f8d9d2fead50a2d4a6f4d51889a9033b2

Files

12914a7be2d17bdcab2908aa2a8a309f8d9d2fead50a2d4a6f4d51889a9033b2
.exe windows:6 windows x64 arch:x64

e5022dc862bcbd6062bbff0694be34e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

dinput8

DirectInput8Create

kernel32

GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
SetFilePointerEx
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
GetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
SetEnvironmentVariableW
VirtualAlloc
GetSystemInfo
GetFileType
SetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
GetStringTypeW
LCMapStringEx
OutputDebugStringW
FreeEnvironmentStringsW
WriteConsoleW
VirtualQuery
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleHandleW
FindResourceExW
GlobalMemoryStatusEx
GetModuleFileNameW
CreateProcessW
CloseHandle
GetFileAttributesExW
GetUserDefaultLocaleName
HeapFree
EnterCriticalSection
LeaveCriticalSection
VerSetConditionMask
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
OutputDebugStringA
EncodePointer
SetLastError
GetCurrentThreadId
GetSystemDirectoryW
FreeLibrary
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
LoadLibraryW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
CompareStringW
GlobalUnlock
GlobalLock
MulDiv
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalSize
GlobalFree
LocalFree
FormatMessageW
CopyFileW
GetCurrentProcessId
GetCurrentThread
GetVersionExW
lstrcmpA
lstrcpyW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
RtlUnwind
VerifyVersionInfoW
SetEvent
WaitForSingleObject
CreateEventW
SetThreadPriority
ResumeThread
CreateFileW
GetFileAttributesW
GetFileSize
InitializeCriticalSectionAndSpinCount
GlobalReAlloc
DeleteFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
lstrcmpiW
GlobalGetAtomNameW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
FileTimeToSystemTime
GetCurrentDirectoryW
GetTempPathW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
GetWindowsDirectoryW
SearchPathW
GetTickCount
GetProfileIntW
Sleep
GetTempFileNameW
GetUserDefaultLCID
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW

user32

LoadImageW
DestroyIcon
IntersectRect
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SendDlgItemMessageA
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
MapVirtualKeyW
GetKeyNameTextW
EnumDisplayMonitors
SystemParametersInfoW
LoadCursorW
SetRectEmpty
SetLayeredWindowAttributes
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
GetSysColorBrush
SetWindowRgn
DrawFrameControl
PostQuitMessage
GetCursorPos
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
InvalidateRect
DrawStateW
GetWindowThreadProcessId
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
CopyImage
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
SetRect
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
BringWindowToTop
LockWindowUpdate
GetDoubleClickTime
GetIconInfo
CopyIcon
KillTimer
SendMessageW
SetTimer
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
CharUpperW
DestroyMenu
GetMenuItemInfoW
RealChildWindowFromPoint
GetAsyncKeyState
MapDialogRect
TrackMouseEvent
IsZoomed
SetCapture
ReleaseCapture
DeleteMenu
MessageBeep
WindowFromPoint
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
SetParent
GetWindowRect
GetActiveWindow
LoadIconW
GetClientRect
EnableMenuItem
GetSystemMenu
IsIconic
GetSystemMetrics
DrawIcon
MessageBoxW
GetKeyboardState
GetParent
ClipCursor
UnregisterClassW
EnumDisplaySettingsW
GetDesktopWindow
LoadMenuW
GetSubMenu
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgItem
GetDlgCtrlID
SetFocus
GetFocus
GetKeyState
GetCapture
ModifyMenuW
DestroyAcceleratorTable
SetClassLongPtrW
GetUpdateRect
ToUnicodeEx
EnableWindow
SetCursorPos
CopyRect
DrawEdge
DrawFocusRect
FillRect
GetWindowRgn
DestroyCursor
InvertRect
HideCaret
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
GetNextDlgGroupItem
IsClipboardFormatAvailable
SubtractRect
WaitMessage
PostThreadMessageW
FrameRect
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
CharUpperBuffW
RegisterClipboardFormatW
CopyAcceleratorTableW
CreateAcceleratorTableW
LoadAcceleratorsW
GetWindowLongPtrW
GetKeyboardLayout

gdi32

GetTextFaceW
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetSystemPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
GetRgnBox
Rectangle
CreateRoundRectRgn
DPtoLP
SetRectRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
RealizePalette
GetTextCharsetInfo
EnumFontFamiliesW
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
Polyline
Polygon
CreatePolygonRgn
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateRectRgnIndirect
CreateEllipticRgn
CombineRgn
CreateDCW
CopyMetaFileW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetObjectW
SetTextColor
SetBkColor
DeleteDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

SHGetKnownFolderPath
ord165
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
DragFinish
DragQueryFileW
SHAppBarMessage
ShellExecuteW

shlwapi

PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindExtensionW

uxtheme

OpenThemeData
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
DrawThemeText
IsAppThemed
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoDisconnectObject
CreateStreamOnHGlobal
CoInitialize
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantClear
SysStringLen
VariantChangeType
VariantInit
SysFreeString
SysAllocString

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth

xinput1_4

ord2

dxgi

CreateDXGIFactory1

netapi32

NetServerGetInfo

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 570KB - Virtual size: 570KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5022dc862bcbd6062bbff0694be34e1

Headers

DLL Characteristics

File Characteristics

Imports

dinput8

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

xinput1_4

dxgi

netapi32

oleacc

imm32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 570KB - Virtual size: 570KB

.data Size: 32KB - Virtual size: 63KB

.pdata Size: 87KB - Virtual size: 86KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 61KB - Virtual size: 60KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 570KB - Virtual size: 570KB

.data
Size: 32KB - Virtual size: 63KB

.pdata
Size: 87KB - Virtual size: 86KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 61KB - Virtual size: 60KB