b1e9c465e16af32dba71c51f371ab73fd6d122aa3ead34f3865b89d4912ae216

Sharing

Copy URL Twitter E-mail

General

Target

b1e9c465e16af32dba71c51f371ab73fd6d122aa3ead34f3865b89d4912ae216
Size

2.5MB
MD5

8f4af67e1b6cd98d04f372f50de4c913
SHA1

d7a8cb48f6d46ed65a4b254fba561b2281c05f1d
SHA256

b1e9c465e16af32dba71c51f371ab73fd6d122aa3ead34f3865b89d4912ae216
SHA512

0b50847cdade14823ab2ad717ccc7b7064f4399c05c9ecea1f0b6bbf6faf3e4d1d3016df737a086ac81b15f74fcf30e78fb5e5f50130c01d5501efb2e220dacb
SSDEEP

49152:rVgUH0lQ8V3jEispeCCxr/tDNGGpGrICOCPQ6bJyyy1WSf/:rVVH0lQulHr/5NGGpGrICOmQ6bJyyy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1e9c465e16af32dba71c51f371ab73fd6d122aa3ead34f3865b89d4912ae216

Files

b1e9c465e16af32dba71c51f371ab73fd6d122aa3ead34f3865b89d4912ae216
.exe windows:5 windows x86 arch:x86

e95c7f089672b64c0c1de55c023d540d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\1. 鼠标[2021-08-15]-封存\0.合版. 704C_E_F[2021-07-01]Inchar-暂时封存\0. 704C_E_F_公版--所有集合-3.4{20210430]-升级Menu+多语言VK、\Release\GamingMouse.pdb

Imports

kernel32

GetFileType
SetStdHandle
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread
GetStdHandle
GetConsoleMode
ExitProcess
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
QueryPerformanceFrequency
GetACP
GetStringTypeW
LCMapStringW
GetDriveTypeW
GetTimeZoneInformation
GetConsoleCP
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetTempPathW
GetTempFileNameW
GetProfileIntW
GetTickCount
SearchPathW
GetWindowsDirectoryW
FindResourceExW
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
VerifyVersionInfoW
VerSetConditionMask
GetCurrentDirectoryW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetVersionExW
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
ResumeThread
SuspendThread
SetThreadPriority
SetEvent
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetProcAddress
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
WideCharToMultiByte
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
WaitForSingleObject
CreateFileW
OutputDebugStringW
CreateEventW
lstrcpyW
WinExec
ReadFile
GetModuleFileNameW
CreateMutexW
CloseHandle
CopyFileW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
WritePrivateProfileStringW
InterlockedExchange
GetSystemTime
Sleep
MultiByteToWideChar
GetPrivateProfileStringW
FindResourceW
GetModuleHandleW
SizeofResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
LockResource
GetModuleHandleExW
WriteConsoleW

user32

OffsetRect
SetRectEmpty
SendDlgItemMessageA
CopyImage
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
GetKeyNameTextW
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
CharUpperW
TranslateMessage
GetMessageW
GetMenuItemInfoW
DestroyMenu
IntersectRect
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
TrackMouseEvent
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
GetNextDlgGroupItem
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
DrawIconEx
RegisterClipboardFormatW
DrawEdge
SendMessageW
PostMessageW
EnableWindow
GetDC
ReleaseDC
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
IsZoomed
SetCapture
ReleaseCapture
SetTimer
KillTimer
DeleteMenu
MessageBeep
WindowFromPoint
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
FillRect
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
WaitMessage
CharNextW
CopyAcceleratorTableW
RemovePropW
SetRect
SetWindowRgn
InvalidateRect
GetWindowRect
PtInRect
GetParent
PostThreadMessageW
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
GetSubMenu
GetMenuItemID
GetMenuItemCount
ModifyMenuW
GetClientRect
CopyRect
InflateRect
UpdateWindow
SetForegroundWindow
InvalidateRgn
GetCursorPos
ShowWindow
RegisterDeviceNotificationW
IsIconic
GetAsyncKeyState
keybd_event
mouse_event
MapVirtualKeyW
GetSystemMetrics
LoadMenuW
GetSystemMenu
CreatePopupMenu
AppendMenuW
DrawIcon
ClientToScreen
LoadIconW
SystemParametersInfoW
LockWorkStation
DrawStateW
DestroyIcon
UnregisterClassW
GetMenuStringW
GetMenuState
InsertMenuW
RemoveMenu
DrawTextW
DrawFrameControl
DrawFocusRect
SetClassLongW
SetParent
LoadImageW
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
ScreenToClient
GetSysColor
CharUpperBuffW
LockWindowUpdate
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
BringWindowToTop
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetCursorPos
CopyIcon
FrameRect
GetWindowRgn
SubtractRect
CreateMenu
GetUpdateRect
GetComboBoxInfo
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
DestroyCursor
GetDoubleClickTime
IsClipboardFormatAvailable
InvertRect
HideCaret
GetIconInfo
BeginDeferWindowPos

gdi32

TextOutW
CopyMetaFileW
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
CreateRectRgnIndirect
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreateRoundRectRgn
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
EnumFontFamiliesExW
RealizePalette
SetPixel
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetTextExtentPoint32W
GetBkColor
GetDIBColorTable
GetDeviceCaps
CreateSolidBrush
Rectangle
GetObjectW
SetDIBColorTable
CreateDIBSection
StretchBlt
SelectObject
GetTextExtentPointW
GetPixel
DeleteObject
DeleteDC
CreateRectRgn
CreateCompatibleDC
CombineRgn
OffsetViewportOrgEx
CreateDCW
BitBlt

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW

shell32

DragFinish
Shell_NotifyIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
ShellExecuteW
DragQueryFileW
SHAppBarMessage
SHGetDesktopFolder

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrFormatKBSizeW

uxtheme

DrawThemeBackground
GetThemePartSize
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor

ole32

OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime

oledlg

OleUIBusyW

gdiplus

GdipGetImageWidth
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0

hid

HidP_GetCaps
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetFeature
HidD_SetFeature
HidD_GetAttributes

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

PlaySoundW

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 362KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e95c7f089672b64c0c1de55c023d540d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

hid

setupapi

oleacc

winmm

imm32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 362KB - Virtual size: 361KB

.data Size: 23KB - Virtual size: 328KB

.gfids Size: 105KB - Virtual size: 105KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 141KB - Virtual size: 140KB

.reloc Size: 152KB - Virtual size: 152KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 362KB - Virtual size: 361KB

.data
Size: 23KB - Virtual size: 328KB

.gfids
Size: 105KB - Virtual size: 105KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 141KB - Virtual size: 140KB

.reloc
Size: 152KB - Virtual size: 152KB