9f69deceb05c9d38c0c29baa01d7921dd65ec03fb3b4e71ccb8c6352dc64c6b2

Sharing

Copy URL Twitter E-mail

General

Target

9f69deceb05c9d38c0c29baa01d7921dd65ec03fb3b4e71ccb8c6352dc64c6b2
Size

4.5MB
MD5

27cc595948fa6683fbf5d51e3e3e5650
SHA1

c5f82a9edc1bb186e161190c92e95410093e8cab
SHA256

9f69deceb05c9d38c0c29baa01d7921dd65ec03fb3b4e71ccb8c6352dc64c6b2
SHA512

ed221d3a09215481ed512ab8ea9b27ff66637a7216dd82304141a70df7961812a9b2466da930c3ff0fd18c63350bbcb08d957070491f45703e4d18de29846169
SSDEEP

98304:FxbmC0oBpryusqDwFLOAkGkzdnEVomFHKnPsmz8Momh:TbmvoryuwFLOyomFHKnPrC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f69deceb05c9d38c0c29baa01d7921dd65ec03fb3b4e71ccb8c6352dc64c6b2

Files

9f69deceb05c9d38c0c29baa01d7921dd65ec03fb3b4e71ccb8c6352dc64c6b2
.exe windows:6 windows x64 arch:x64

f51ff0e36dda3bcfb0025f8951015e69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\SourceCode\GC3.Overclocking\production_V5.1\Service\ServiceSDK\Release\ThrottlePlugin\ARMOURYCRATEMesg.pdb

Imports

kernel32

GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
GetACP
ExitProcess
GetStdHandle
GetFileType
IsValidCodePage
VirtualAlloc
GetSystemInfo
QueryPerformanceFrequency
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlPcToFileHeader
RtlUnwindEx
SetFilePointerEx
FindFirstFileExW
SetStdHandle
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStringTypeW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FindNextFileW
WaitForSingleObjectEx
ResetEvent
SearchPathW
GetProfileIntW
GetTempFileNameW
GetWindowsDirectoryW
GetTickCount
FindResourceExW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
GetTempPathW
SetFilePointer
GetThreadLocale
VirtualProtect
GlobalGetAtomNameW
DeleteFileW
GlobalFlags
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
CopyFileW
FormatMessageW
MulDiv
GlobalSize
GetCurrentProcessId
lstrcpyW
InitializeCriticalSectionAndSpinCount
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
FreeResource
EncodePointer
WideCharToMultiByte
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
GetModuleHandleExW
GetVersionExW
GetCurrentThreadId
GetCurrentThread
OutputDebugStringA
CloseHandle
GetFullPathNameW
VerSetConditionMask
VerifyVersionInfoW
GetModuleFileNameA
LoadLibraryExW
GetModuleFileNameW
FileTimeToSystemTime
LocalFree
lstrcmpA
SetLastError
CreateFileW
GetFileAttributesW
GetSystemDirectoryW
LocalAlloc
Sleep
FreeLibrary
GetProcAddress
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
FindResourceW
EnterCriticalSection
HeapFree
GetModuleHandleW
GetUserDefaultUILanguage
MultiByteToWideChar
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
OutputDebugStringW
LoadResource
LockResource
SizeofResource
VirtualQuery

user32

MessageBeep
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
GetAsyncKeyState
SendDlgItemMessageA
GetMenuItemInfoW
DestroyMenu
RealChildWindowFromPoint
DeleteMenu
CopyImage
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
LoadMenuW
DrawStateW
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetCursorPos
ClientToScreen
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
EnumDisplayMonitors
SystemParametersInfoW
LoadCursorW
SetRectEmpty
GetSysColorBrush
SetLayeredWindowAttributes
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
MapDialogRect
SetWindowContextHelpId
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetClassLongPtrW
GetWindowLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetClientRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
GetClassInfoW
LoadIconW
KillTimer
SetTimer
RegisterDeviceNotificationW
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
DrawEdge
DrawFrameControl
SetWindowRgn
DrawFocusRect
DrawIconEx
ToUnicodeEx
GetKeyboardLayout
CharUpperW
GetKeyboardState
MapVirtualKeyW
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
TrackMouseEvent
SetMenu
GetMenu
GetCapture
IsZoomed
GetSystemMenu
NotifyWinEvent
SetCursorPos
SetParent
BringWindowToTop
CreatePopupMenu
IsWindowEnabled
GetWindowDC
GetWindowRect
OffsetRect
FillRect
InflateRect
RegisterClipboardFormatW
ReleaseDC
GetSystemMetrics
EnableWindow
SendMessageW
InvalidateRect
GetParent
CopyRect
LoadStringW
UnregisterClassW
PostMessageW
PostQuitMessage
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
GetDlgItem
GetDlgCtrlID
EnableScrollBar
UnionRect
MonitorFromPoint
DestroyIcon
SetFocus
GetFocus
GetKeyState
LockWindowUpdate
TranslateAcceleratorW
InsertMenuItemW
LoadImageW
UnpackDDElParam
ReuseDDElParam
GetWindowRgn
DestroyCursor
GetComboBoxInfo
DrawIcon
InvertRect
HideCaret
CreateMenu
PostThreadMessageW
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
FrameRect
CharUpperBuffW
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
ModifyMenuW
CopyIcon
GetIconInfo
GetDoubleClickTime
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetWindowLongW

gdi32

CreateBitmap
CreateHatchBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
GetTextCharsetInfo
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
GetRgnBox
CombineRgn
CreateEllipticRgn
CreateDCW
PatBlt
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
CreateDIBSection
GetMapMode
SetRectRgn
DPtoLP
EnumFontFamiliesExW
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetDeviceCaps
EnumFontFamiliesW
DeleteObject
CreatePatternBrush
CreatePen
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetObjectW
SetTextColor
SetBkColor
DeleteDC
GetTextExtentPoint32W
CreateFontIndirectW
CopyMetaFileW
Ellipse
GetTextMetricsW
CreateSolidBrush
OffsetWindowOrgEx
CreateRectRgnIndirect
GetStockObject

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW

shell32

SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindExtensionW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathIsUNCW
PathFindFileNameW

uxtheme

DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
DrawThemeParentBackground
IsAppThemed
DrawThemeText
OpenThemeData
CloseThemeData
GetThemeColor

ole32

OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoInitializeEx
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoGetClassObject
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
VariantCopy
SysAllocStringLen
VarBstrFromDate
SysStringLen
VariantChangeType
VariantInit
VariantClear
SysFreeString
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDrawImageRectRectI
GdipGraphicsClear
GdipResetPath
GdipDrawImageRectI
GdipFillPath
GdipAddPathStringI
GdipCreatePath
GdipSetSolidFillColor
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateFontFamilyFromName
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipCreateBitmapFromScan0

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 653KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 628KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f51ff0e36dda3bcfb0025f8951015e69

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 653KB - Virtual size: 653KB

.data Size: 30KB - Virtual size: 74KB

.pdata Size: 87KB - Virtual size: 86KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 628KB - Virtual size: 632KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 653KB - Virtual size: 653KB

.data
Size: 30KB - Virtual size: 74KB

.pdata
Size: 87KB - Virtual size: 86KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 628KB - Virtual size: 632KB