77557bb54a083bbb97d1c7d84d0706e0

Sharing

Copy URL Twitter E-mail

General

Target

77557bb54a083bbb97d1c7d84d0706e0
Size

4.0MB
MD5

77557bb54a083bbb97d1c7d84d0706e0
SHA1

d60d93ed48d960e5a0af354749e790a47a9125a9
SHA256

e6d9f69ded6fd91d3a7a825695365f8c3276cea511fa61b3055da1de0ee6b9df
SHA512

b08ac09665371f99f848a31c7066370cb97419381190e0c34cd5749b78a6362bbc8d72a64a3c328b75eabbf27f7cb32850507d93d6df8d6a15be80b778adf41c
SSDEEP

49152:B1Ox2l+RtfsLgAI4XIrXNSoIyr9JJb2EzgAuMtnDs8X:B1zsRt0Ulr9eyBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77557bb54a083bbb97d1c7d84d0706e0

Files

77557bb54a083bbb97d1c7d84d0706e0
.exe windows:4 windows x86 arch:x86

4f06ac7ff1ee2fa1cabab80d59267044

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey

ddraw

DirectDrawCreate

dsound

DirectSoundCreate

gdi32

GetStockObject
CreateDCA
GetObjectA
GetDIBits
CreateCompatibleBitmap
DeleteObject
CreateCompatibleDC
BitBlt
DeleteDC
TextOutA
CreateFontA
SelectObject
SetBkMode
SetTextColor

handes

?DecryptFunc@@YGHPAD0@Z

imm32

ImmSetConversionStatus
ImmGetContext
ImmSetOpenStatus

kernel32

CreateToolhelp32Snapshot
GetCurrentProcessId
GetFileSize
GetSystemDirectoryA
FindNextFileA
FindClose
GetComputerNameA
WriteFile
SetFilePointer
GetLocalTime
SuspendThread
ResumeThread
GetCurrentThreadId
CreateDirectoryA
CopyFileA
DeleteCriticalSection
TerminateThread
GetExitCodeThread
WaitForSingleObject
SetThreadPriority
_hwrite
_lclose
_lcreat
CompareFileTime
GlobalFree
GlobalAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
IsDBCSLeadByte
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
TerminateProcess
LocalFree
LocalAlloc
GetLastError
SetEndOfFile
SetEnvironmentVariableA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
QueryPerformanceCounter
GetSystemInfo
Module32First
lstrcat
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
GetFileType
GetStdHandle
LockResource
HeapSize
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
ExitProcess
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
RaiseException
VirtualQuery
GetSystemDefaultLangID
GetCurrentProcess
GetModuleHandleA
ResetEvent
CreateEventA
SetEvent
GetModuleFileNameA
FindFirstFileA
CreateFileA
ReadFile
CloseHandle
Module32Next
InitializeCriticalSection
GetCurrentThread
GetTickCount
Sleep
EnterCriticalSection
LeaveCriticalSection
ExitThread
lstrlen
lstrcmpi
CompareStringW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetLocaleInfoA
DeleteFileA
OutputDebugStringA
lstrcmp
VirtualProtect
lstrcpy
InterlockedExchange
GetACP
GetEnvironmentStringsW
CreateThread
CompareStringA

shell32

ShellExecuteA

shlwapi

PathFileExistsA

user32

SendMessageA
SetWindowTextA
DefWindowProcA
PostMessageA
SetForegroundWindow
PostQuitMessage
SetFocus
GetForegroundWindow
ReleaseDC
GetWindowTextA
GetDC
DispatchMessageA
TranslateMessage
PeekMessageA
DrawTextA
SetWindowLongA
ShowCursor
UpdateWindow
ShowWindow
CreateWindowExA
LoadBitmapA
CallWindowProcA
RegisterClassA
LoadCursorA
LoadIconA
GetSystemMetrics
GetClassNameA
EnumWindows
FindWindowA
wsprintfA
CharLowerA
SetTimer
OffsetRect
ClientToScreen
GetClientRect
MessageBoxA
GetWindowRect
GetDesktopWindow

wininet

HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetQueryDataAvailable

winmm

mixerSetControlDetails
timeEndPeriod
timeKillEvent
timeSetEvent
timeBeginPeriod
mmioClose
mmioAscend
mmioRead
mmioDescend
mmioOpenA
mmioSeek
mmioSetInfo
mmioAdvance
mmioGetInfo
mixerClose
mixerOpen
mixerGetDevCapsA
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
timeGetTime

ws2_32

WSACleanup
getsockname
accept
inet_ntoa
gethostbyname
closesocket
WSAGetLastError
ioctlsocket
htons
send
WSAAsyncSelect
connect
inet_addr
socket
WSAStartup

wsock32

setsockopt
recv

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Exports

Exports

SetExtChangeZip
UnZipData
UnZipDataToDirectory
UnZipDataToFile
UnZipFile
ZipData
ZipFile
_CloseD3d@0
_InitD3D@4
_smPlayD3D@24
fcEXP

Sections

.text
Size: 2.8MB - Virtual size: 63.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4f06ac7ff1ee2fa1cabab80d59267044

Headers

File Characteristics

Imports

advapi32

ddraw

dsound

gdi32

handes

imm32

kernel32

shell32

shlwapi

user32

wininet

winmm

ws2_32

wsock32

ole32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 63.9MB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.idata Size: 8KB - Virtual size: 8KB

.text
Size: 2.8MB - Virtual size: 63.9MB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.idata
Size: 8KB - Virtual size: 8KB