7df4b7b1b2f4478c58b3ccf1e43e9ff5c91bc68349260bdaef0f15c9f1bdc135

Sharing

Copy URL

Twitter E-mail

General

Target

7df4b7b1b2f4478c58b3ccf1e43e9ff5c91bc68349260bdaef0f15c9f1bdc135
Size

2.8MB
MD5

89ddf4ab5fe5171d314a1c4fd45ff03a
SHA1

50279f4bc7183bc81ee812e1e4de48dc9b6d6d8b
SHA256

7df4b7b1b2f4478c58b3ccf1e43e9ff5c91bc68349260bdaef0f15c9f1bdc135
SHA512

c0447efbc1ce1ef5a0c17fc60de23b8a91ca9972111cfc90d3a0abb350df62f7b6c8338742b533737e620f957d0704a114d7ada14a8fb2439fac583d51d6267d
SSDEEP

49152:jxvnsCZ7e8yJVoMpbkbmZjV9vGz2BR6ECGFJ2SLCIyqstXAhQ4SH:jx/X1tyJVVpbkbGJpGz2BR6ECGFJ2SLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7df4b7b1b2f4478c58b3ccf1e43e9ff5c91bc68349260bdaef0f15c9f1bdc135

Files

7df4b7b1b2f4478c58b3ccf1e43e9ff5c91bc68349260bdaef0f15c9f1bdc135
.exe windows:6 windows x86 arch:x86

9997c0b67efac148e44d1c717354a626

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\work\hero\Tools\Hero2dTools\GameShell\output\vs2013\main.pdb

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetStringTypeW
LCMapStringW
CompareStringW
GetConsoleOutputCP
CreateFileW
ReadConsoleW
GetConsoleMode
SetFilePointerEx
MoveFileA
ExitProcess
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
ExpandEnvironmentStringsA
TerminateThread
CreateThread
OutputDebugStringW
WriteConsoleW
CopyFileA
GetFileAttributesA
GetStdHandle
CloseHandle
CreateProcessA
LoadResource
LockResource
SizeofResource
FindResourceA
GetPrivateProfileStringA
DecodePointer
RaiseException
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FormatMessageA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
OutputDebugStringA
SetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LoadLibraryW
WaitForSingleObject
GetCurrentThreadId
SetThreadPriority
ResumeThread
GetCurrentThread
GetVersionExA
GetModuleFileNameA
LoadLibraryExW
FindResourceW
GlobalDeleteAtom
lstrcmpA
WideCharToMultiByte
CompareStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GlobalAddAtomA
GetCurrentProcessId
MulDiv
EncodePointer
GetSystemDirectoryW
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GlobalSize
LocalFree
DeleteFileA
GlobalFlags
GetACP
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetCurrentDirectoryA
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
CreateFileA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
GetVolumeInformationA
DuplicateHandle
GetCurrentProcess
lstrcmpiA
GetThreadLocale
lstrcpyA
VirtualProtect
GetOEMCP
GetCPInfo
FileTimeToSystemTime
GetWindowsDirectoryA
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetTickCount
VerSetConditionMask
VerifyVersionInfoA
FindResourceExW
GetTempPathA
GetProfileIntA
SearchPathA
Sleep
GetTempFileNameA
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead

user32

GetKeyNameTextA
MapVirtualKeyA
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
DrawFocusRect
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetMenuDefaultItem
CreatePopupMenu
GetAsyncKeyState
GetMenuItemInfoA
DestroyMenu
LoadImageW
TrackMouseEvent
InflateRect
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LoadCursorW
WindowFromPoint
WaitMessage
CharUpperA
DestroyIcon
InvalidateRect
KillTimer
DeleteMenu
SystemParametersInfoA
CopyImage
LoadCursorA
GetSysColorBrush
RealChildWindowFromPoint
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuState
GetMenuStringA
IsDialogMessageA
SetWindowTextA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
SetLayeredWindowAttributes
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
DrawIcon
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetClientRect
LoadIconW
UnregisterClassA
RedrawWindow
GetDesktopWindow
GetWindow
LoadImageA
GetCapture
GetWindowPlacement
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetSysColor
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
SetParent
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
SetCursorPos
ClientToScreen
TabbedTextOutA
CopyIcon
FrameRect
GetSystemMetrics
MessageBoxA
SendMessageA
PostMessageA
IsIconic
MonitorFromWindow
SetCapture
ReleaseCapture
EndPaint
DrawTextA
GetDC
ValidateRgn
ScreenToClient
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
IsWindow
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
PostQuitMessage
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
GetLastActivePopup
SetWindowPos
SetWindowContextHelpId
MapDialogRect
UnhookWindowsHookEx
DrawTextExA
GrayStringA
IsWindowVisible
SetTimer
GetWindowRect
FillRect
EnableWindow
GetParent
GetWindowDC
ReleaseDC
BeginPaint
SetWindowRgn
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
PostThreadMessageA
GetScrollRange
UnionRect

gdi32

GetTextFaceA
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
Rectangle
EnumFontFamiliesExA
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
CreateCompatibleBitmap
DPtoLP
SetRectRgn
PatBlt
GetMapMode
GetRgnBox
CreateRectRgnIndirect
GetBkColor
GetTextMetricsA
GetTextExtentPoint32A
CreateDCA
CopyMetaFileA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
SetTextColor
SetBkMode
GetTextColor
GetBkMode
CreateFontIndirectA
CreateRectRgn
CombineRgn
SetDIBColorTable
GetObjectA
CreateDIBSection
SelectObject
DeleteDC
CreateCompatibleDC
BitBlt
DeleteObject
CreateSolidBrush

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

shell32

SHGetFileInfoA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
PathIsUNCA
PathFindFileNameA

uxtheme

OpenThemeData
GetThemeSysColor
GetWindowTheme
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName

ole32

CoRegisterMessageFilter
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoInitializeEx
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
OleCreateFontIndirect
VariantCopy
VarBstrFromDate
SysAllocStringByteLen
VariantChangeType
SysFreeString
VariantInit
SysAllocStringLen
VariantClear
SysAllocString

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageRawFormat
GdipGetImagePixelFormat
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

wininet

InternetOpenA
InternetCloseHandle
InternetConnectA
HttpSendRequestA
HttpOpenRequestA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 869KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9997c0b67efac148e44d1c717354a626

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

wininet

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 312KB - Virtual size: 312KB

.data Size: 23KB - Virtual size: 44KB

.rsrc Size: 869KB - Virtual size: 868KB

.reloc Size: 139KB - Virtual size: 138KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 312KB - Virtual size: 312KB

.data
Size: 23KB - Virtual size: 44KB

.rsrc
Size: 869KB - Virtual size: 868KB

.reloc
Size: 139KB - Virtual size: 138KB