128bd7dbde7ac238aaec80961421a57d154fcdbe86f83501883ed45996fa41eb

Sharing

Copy URL Twitter E-mail

General

Target

128bd7dbde7ac238aaec80961421a57d154fcdbe86f83501883ed45996fa41eb
Size

5.7MB
MD5

63abd97192acc5cdc333594a3253d375
SHA1

a72e22a3b00a6b58fca364857ee07e2ddb7ff6e9
SHA256

128bd7dbde7ac238aaec80961421a57d154fcdbe86f83501883ed45996fa41eb
SHA512

275950247f932f16b1440c014fdf159c0b0eac1fcf7f951e6cfb5bedfb88073dc615e2eb488afa2de1c7b1e48842603d9dd162768336448b68bff65360273215
SSDEEP

98304:+GokfppPyQJTt2qdxF7Lrwjkeb0pdlILzjdO8EEiI:Jokf7ZGqdxF7Lgrgpd65Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
128bd7dbde7ac238aaec80961421a57d154fcdbe86f83501883ed45996fa41eb

Files

128bd7dbde7ac238aaec80961421a57d154fcdbe86f83501883ed45996fa41eb
.exe windows:5 windows x86 arch:x86

45d8eeb7f810f7ec66c06e9333a22081

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\Work\2345input\bin\Win32\Release\pdb\2345PinyinConfig.pdb

Imports

dbghelp

MiniDumpWriteDump

shlwapi

StrToIntA
ord12
PathAppendW
StrDupW
PathFindFileNameW

msimg32

AlphaBlend

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_Create
ImageList_GetIcon
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_SetBkColor

imm32

ImmNotifyIME
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmReleaseContext
ImmAssociateContextEx
ImmDisableIME
ImmGetContext

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

FindClose
WaitForSingleObject
GetFileAttributesW
GetVersionExW
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
HeapReAlloc
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
GetFileSize
GetProcessHeap
SystemTimeToFileTime
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
FlushFileBuffers
GetPrivateProfileStringW
CreateProcessW
SetFileAttributesW
MoveFileExW
LockResource
GlobalFree
GlobalSize
lstrcpyW
GetLocalTime
LCMapStringW
GetStartupInfoW
OpenProcess
GetEnvironmentVariableA
OpenMutexW
VirtualQuery
CreateEventW
SetEvent
ResetEvent
GlobalMemoryStatusEx
OpenEventW
ExpandEnvironmentStringsW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
LocalAlloc
DeviceIoControl
GetTempFileNameW
RemoveDirectoryW
FindNextFileW
DuplicateHandle
GetFileInformationByHandle
GetFileType
FileTimeToDosDateTime
CreateDirectoryW
GetCurrentDirectoryW
DosDateTimeToFileTime
ExitProcess
ReleaseMutex
GetACP
lstrcatW
GetDriveTypeW
ResumeThread
GetLongPathNameW
UnlockFileEx
GetFileTime
GetEnvironmentVariableW
GetVolumeInformationW
GetLogicalDriveStringsW
GetWindowsDirectoryW
MoveFileW
SwitchToThread
GetFileSizeEx
QueryPerformanceFrequency
CreateMutexW
SetEndOfFile
OpenFileMappingW
GetTempPathW
GetFullPathNameA
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
GetLocaleInfoW
SetWaitableTimer
CreateWaitableTimerW
FreeResource
GetModuleHandleA
DisableThreadLibraryCalls
CreateThread
VirtualProtect
GetModuleHandleExW
FlushInstructionCache
MapViewOfFileEx
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
Thread32Next
Thread32First
SuspendThread
CreateToolhelp32Snapshot
GetThreadContext
SetThreadContext
OpenThread
RtlUnwind
ExitThread
FreeLibraryAndExitThread
FindFirstFileExW
PeekNamedPipe
GetStdHandle
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleCP
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
SetFilePointer
InitializeCriticalSection
LockFile
GetStringTypeW
EncodePointer
SizeofResource
EnterCriticalSection
InterlockedDecrement
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
MultiByteToWideChar
GetLastError
RaiseException
LoadResource
FindResourceW
DecodePointer
SetFileTime
OutputDebugStringA
GetDiskFreeSpaceW
InterlockedCompareExchange
GetFullPathNameW
HeapFree
HeapCreate
FindFirstFileW
TryEnterCriticalSection
AreFileApisANSI
ConnectNamedPipe
CreateFileW
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
FreeLibrary
InterlockedIncrement
lstrcmpiW
LoadLibraryExW
LocalFree
CreateNamedPipeW
WriteFile
CancelIo
ReadFile
CreateIoCompletionPort
CloseHandle
PostQueuedCompletionStatus
GetQueuedCompletionStatus
InterlockedExchange
InterlockedExchangeAdd
lstrlenW
WritePrivateProfileStringW
CopyFileW
DeleteFileW
GetTickCount
MulDiv
lstrcmpW
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
SetLastError
SetErrorMode
Sleep
WaitForMultipleObjects
GetCurrentProcessId
QueryDosDeviceW

user32

SetRectEmpty
UnloadKeyboardLayout
ActivateKeyboardLayout
LoadStringW
GetWindowThreadProcessId
GetLastActivePopup
WindowFromPoint
AttachThreadInput
GetForegroundWindow
IsIconic
DrawIconEx
DrawTextW
LoadImageW
SetClipboardData
GetAsyncKeyState
DestroyCursor
CopyRect
SetRect
DialogBoxParamW
TrackMouseEvent
UpdateLayeredWindow
UnregisterHotKey
RegisterHotKey
GetKeyState
OpenClipboard
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
GetActiveWindow
MonitorFromWindow
MsgWaitForMultipleObjects
GetKeyboardState
GetCaretBlinkTime
ToAscii
AdjustWindowRectEx
ShowWindowAsync
ValidateRect
SetParent
VkKeyScanW
GetMessageW
DispatchMessageW
PeekMessageW
TranslateMessage
PostQuitMessage
UnionRect
EqualRect
EnumChildWindows
GetWindowDC
IsZoomed
GetDCEx
IsRectEmpty
SetWindowRgn
EndDialog
OffsetRect
GetMonitorInfoW
MapWindowPoints
PtInRect
MapVirtualKeyW
DestroyIcon
SetCursorPos
SetScrollInfo
ShowScrollBar
GetScrollInfo
GetScrollPos
SetTimer
SetCursor
KillTimer
SetScrollPos
UpdateWindow
GetCursorPos
SystemParametersInfoW
GetWindowTextLengthW
GetWindow
DestroyWindow
GetDC
FillRect
CreateWindowExW
ScreenToClient
SetWindowTextW
RegisterClassExW
IsWindow
InvalidateRgn
RedrawWindow
ClientToScreen
DestroyAcceleratorTable
IsChild
GetSysColor
MoveWindow
CreateAcceleratorTableW
SetFocus
LoadCursorW
GetClassNameW
SetCapture
GetClientRect
GetDlgItem
GetClassInfoExW
RegisterWindowMessageW
ReleaseCapture
InvalidateRect
ReleaseDC
BeginPaint
EndPaint
GetWindowTextW
GetDesktopWindow
FindWindowW
FindWindowExW
GetWindowRect
IsWindowVisible
SetWindowPos
GetSystemMetrics
ShowWindow
GetWindowLongW
DefWindowProcW
CallWindowProcW
PostMessageW
GetFocus
SendMessageW
LoadIconW
SetWindowLongW
GetParent
SetForegroundWindow
MessageBoxW
UnregisterClassW
CharNextW
SetCaretPos
GetPropW
LoadBitmapW
EmptyClipboard
GetAncestor
EnumThreadWindows
EnableWindow
MonitorFromPoint
GetIconInfo
LoadKeyboardLayoutW
GetClassLongW
RemovePropW
SetPropW
IntersectRect

gdi32

CreateFontIndirectW
SetGraphicsMode
GetBitmapBits
SetTextColor
SetBkMode
SetWorldTransform
CreateDIBitmap
EnumFontFamiliesW
GetDIBits
CreateDIBSection
SetBkColor
ExtTextOutW
EnumFontFamiliesExW
SetViewportOrgEx
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetStockObject
GetDeviceCaps
GetObjectW
DeleteObject
CreateSolidBrush
DeleteDC
GetTextMetricsW
CreateDCW
GetClipBox
EnumFontsW
CreateRectRgnIndirect
CreatePolygonRgn
CreateRoundRectRgn
GetRgnBox
PtInRegion

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

advapi32

GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
EqualSid
GetAce
GetAclInformation
GetSecurityDescriptorDacl
GetFileSecurityW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
LookupAccountNameW
RegCreateKeyExW
RegEnumValueW
RegQueryValueExW
RegDeleteKeyW
SystemFunction036
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryInfoKeyW

shell32

ExtractIconExW
SHGetFolderPathW
SHGetSpecialFolderPathW
DragQueryFileW
DragFinish

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoGetClassObject
GetHGlobalFromStream
OleLockRunning
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
StringFromGUID2
OleUninitialize
CoTaskMemFree

oleaut32

VarUI4FromStr
SysFreeString
VariantClear
LoadRegTypeLi
SysAllocStringLen
SysStringLen
DispCallFunc
SysAllocString
OleCreateFontIndirect
LoadTypeLi
VariantInit

urlmon

CoInternetCreateZoneManager
CoInternetCreateSecurityManager

gdiplus

GdipAddPathLineI
GdipCreateRegionPath
GdipGetInterpolationMode
GdipGetLineTransform
GdipSetImageAttributesColorMatrix
GdipGetFamily
GdipGetTextRenderingHint
GdipAddPathString
GdipGetStringFormatLineAlign
GdipGetEmHeight
GdipSaveGraphics
GdipCreateLineBrushI
GdipSetLineWrapMode
GdipGetLineSpacing
GdipCreateMatrix2
GdipDisposeImageAttributes
GdipDeletePath
GdipGetStringFormatAlign
GdipCreateMatrix
GdipSetSmoothingMode
GdipEndContainer
GdipCreatePath
GdipSetLinePresetBlend
GdipGetCellDescent
GdipCloneBitmapArea
GdipGetFontStyle
GdipTransformRegion
GdipFillPath
GdipGetPathWorldBounds
GdipMultiplyWorldTransform
GdipSetPenDashStyle
GdipDrawLine
GdipDrawRectangle
GdipScaleWorldTransform
GdipSetClipRectI
GdipClosePathFigure
GdipGetSmoothingMode
GdipDrawArcI
GdipCreateImageAttributes
GdipSetClipRegion
GdipDrawPath
GdipSetImageAttributesWrapMode
GdipGetClipBoundsI
GdipFillEllipse
GdipBeginContainer2
GdipGetTextureTransform
GdipGetMatrixElements
GdipCloneStringFormat
GdipSetTextRenderingHint
GdipGetCellAscent
GdipStringFormatGetGenericTypographic
GdipRotateWorldTransform
GdipRestoreGraphics
GdipDeleteRegion
ord1
GdipGetFontSize
GdipTranslateWorldTransform
GdipSetStringFormatAlign
GdipDeleteMatrix
GdipGetFamilyName
GdipCloneRegion
GdipSetStringFormatFlags
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSetCompositingQuality
GdipImageRotateFlip
GdipGetImageType
GdipCombineRegionPath
GdipImageGetFrameDimensionsCount
GdipDrawImageRectRect
GdipGetPropertyItem
GdipDrawImageRectI
GdipBitmapSetPixel
GdipGetImageHorizontalResolution
GdipSetInterpolationMode
GdipCloneBitmapAreaI
GdipSetPixelOffsetMode
GdipSetPageUnit
GdipGetImageVerticalResolution
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipBitmapGetPixel
GdipCreateTexture
GdipSetPropertyItem
GdipGetImageRawFormat
GdipSaveImageToStream
GdipGetPropertyItemSize
GdipSaveImageToFile
GdipGetImagePaletteSize
GdipBitmapUnlockBits
GdipGetImagePixelFormat
GdipBitmapLockBits
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipGetImageGraphicsContext
GdipDrawImage
GdipDrawImagePointRectI
GdipCreateBitmapFromFile
GdipCreateStringFormat
GdipCloneImage
GdipDisposeImage
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipGraphicsClear
GdipCreateBitmapFromHICON
GdipDeleteStringFormat
GdipDrawImageI
GdipDeleteFontFamily
GdipGetImageHeight
GdipDrawRectangleI
GdipCreateFontFamilyFromName
GdipDeleteBrush
GdipAlloc
GdipCreateFont
GdipCreateSolidFill
GdipGetGenericFontFamilySansSerif
GdipFree
GdipDrawString
GdipCreateFromHDC
GdipCloneBrush
GdipMeasureString
GdipFillRectangleI
GdipDeleteGraphics
GdipDeleteFont
GdipGetImageWidth
GdipDeletePen
GdipCreatePen1
GdipDrawImageRectRectI
GdiplusStartup
GdiplusShutdown
GdipSetCompositingMode
GdipAddPathEllipseI
GdipAddPathArcI
GdipAddPathRectangleI
GdipCombineRegionRegion
GdipGetBrushType
GdipSetLineTransform
GdipSetTextureTransform
GdipAddPathBezierI

iphlpapi

GetAdaptersAddresses

winmm

timeGetTime

psapi

GetMappedFileNameW

Exports

Exports

sqlite3_carray_init
sqlite3_csv_init
sqlite3_fileio_init
sqlite3_series_init
sqlite3_shathree_init
sqlite3_uuid_init

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 983KB - Virtual size: 982KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 142KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 505KB - Virtual size: 508KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45d8eeb7f810f7ec66c06e9333a22081

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dbghelp

shlwapi

msimg32

comctl32

imm32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

urlmon

gdiplus

iphlpapi

winmm

psapi

Exports

Exports

Sections

.text Size: 4.1MB - Virtual size: 4.1MB

.rdata Size: 983KB - Virtual size: 982KB

.data Size: 142KB - Virtual size: 185KB

_RDATA Size: 2KB - Virtual size: 1KB

.rsrc Size: 505KB - Virtual size: 508KB

.text
Size: 4.1MB - Virtual size: 4.1MB

.rdata
Size: 983KB - Virtual size: 982KB

.data
Size: 142KB - Virtual size: 185KB

_RDATA
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 505KB - Virtual size: 508KB