88535b766ff7cbc93e789efb389f7fd31f18eb7c6c696ff19a485de1270c9167

Sharing

Copy URL Twitter E-mail

General

Target

88535b766ff7cbc93e789efb389f7fd31f18eb7c6c696ff19a485de1270c9167
Size

7.8MB
MD5

7b649ec357ff7f7d05b39640a494fa7c
SHA1

63360ce3cc4e6257c124b5b6e589b84db778ec29
SHA256

88535b766ff7cbc93e789efb389f7fd31f18eb7c6c696ff19a485de1270c9167
SHA512

da35aaf1ba13f6f952c368c9685529fa7a0ee4bb0772a6e0a7c98d6e0d654b347e4b1edc6a8f3be5d5017735027f434fa429a53125bfb93914132bbaa05fff53
SSDEEP

196608:avpPBFBagQs2ix9/iUxMP8Kx1Nl3myW0xut:anFBagQs2ix9l+8QNFC0xut

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88535b766ff7cbc93e789efb389f7fd31f18eb7c6c696ff19a485de1270c9167

Files

88535b766ff7cbc93e789efb389f7fd31f18eb7c6c696ff19a485de1270c9167
.exe windows:5 windows x86 arch:x86

d606fc67ad971465f35f2602e10a8b74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

s:\PROJECT\metin2\mainline\Srcs\Tools\TorrentPatch\bin\TorrentPatch_x86_MT_VC90.pdb

Imports

kernel32

GetCurrentThreadId
LoadLibraryW
CreateSemaphoreW
ReleaseSemaphore
InterlockedIncrement
InterlockedDecrement
SetThreadPriority
TerminateThread
ResumeThread
TlsGetValue
TlsSetValue
GetProcessAffinityMask
GetCurrentProcess
ExitProcess
GetACP
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
SystemTimeToFileTime
GetTempPathW
FindClose
FindFirstFileW
GetTempFileNameW
GetStdHandle
GetTimeZoneInformation
GetThreadLocale
GetCurrentProcessId
GetEnvironmentVariableW
GetCPInfo
IsValidCodePage
GetDiskFreeSpaceW
SetEnvironmentVariableW
GetFileType
GetFileAttributesW
GetWindowsDirectoryW
FindNextFileW
RaiseException
CreateThread
DuplicateHandle
ExpandEnvironmentStringsW
GetCommandLineW
SetErrorMode
SetLastError
LocalAlloc
HeapSize
GetProcessHeap
InterlockedExchange
CreateDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetFileAttributesA
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapReAlloc
ExitThread
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetDriveTypeA
GetFullPathNameA
GetFullPathNameW
MoveFileW
MoveFileA
RemoveDirectoryW
WriteConsoleW
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetCurrentThread
SetHandleCount
VirtualFree
VirtualAlloc
HeapCreate
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
GetCurrentDirectoryA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
CompareStringA
CreateFileMappingW
QueryPerformanceFrequency
CreateEventA
CreateSemaphoreA
CreateIoCompletionPort
GetQueuedCompletionStatus
InterlockedExchangeAdd
PostQueuedCompletionStatus
InterlockedCompareExchange
QueueUserAPC
SleepEx
DeviceIoControl
SetFilePointerEx
ReadFileScatter
GetOverlappedResult
WriteFileGather
VirtualLock
VirtualUnlock
GetFileAttributesExW
FormatMessageA
ResetEvent
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
lstrcpyA
GetSystemTime
SetThreadAffinityMask
CreateFileA
ReadFile
SetFilePointer
UnmapViewOfFile
GetSystemInfo
CreateFileMappingA
OutputDebugStringA
MapViewOfFile
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryA
SetEvent
WaitForSingleObject
CreateEventW
TlsFree
TlsAlloc
GetModuleHandleW
DeleteFileW
WriteFile
DeleteFileA
GetTickCount
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
LocalFree
FormatMessageW
CreateProcessW
SetFileTime
TerminateProcess
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExW
GetFileSize
GetCurrentDirectoryW
GlobalFree
GlobalAlloc
GlobalUnlock
GlobalLock
GetFileTime
GetFileSizeEx
CreateFileW
SetCurrentDirectoryW
CopyFileW
GetModuleFileNameW
Sleep
OpenMutexW
ReleaseMutex
CloseHandle
GetLastError
OutputDebugStringW
CreateMutexW
VirtualQuery

user32

SetWindowTextW
InvalidateRect
EndDeferWindowPos
BeginDeferWindowPos
GetWindow
GetMessageTime
SystemParametersInfoW
GetMenuItemInfoW
GetActiveWindow
CallNextHookEx
RegisterHotKey
UnregisterHotKey
UnhookWindowsHookEx
GetCapture
PtInRect
IsWindow
TrackPopupMenu
IsDialogMessageW
SetWindowsHookExW
GetSysColor
GetUpdateRgn
InflateRect
GetIconInfo
CreateIconIndirect
EndPaint
GetWindowDC
BeginPaint
LoadBitmapW
DestroyIcon
LoadImageW
CreateDialogParamW
GetDlgItem
DrawFrameControl
DrawIconEx
GetClassNameW
GetWindowTextW
GetWindowTextLengthW
SetMenu
DrawIcon
GetUpdateRect
BringWindowToTop
IsZoomed
IsIconic
GetDesktopWindow
GetSystemMenu
FlashWindow
CreateDialogIndirectParamW
GetForegroundWindow
DrawTextW
CopyRect
DrawFocusRect
OffsetRect
GetMessageW
ValidateRect
MapWindowPoints
DestroyCursor
keybd_event
IsClipboardFormatAvailable
HideCaret
DestroyAcceleratorTable
CreateAcceleratorTableW
TranslateAcceleratorW
DrawEdge
UnionRect
ChildWindowFromPoint
DefFrameProcW
TranslateMDISysAccel
DefMDIChildProcW
GetMenuStringW
GetMessagePos
DrawStateW
DrawStateA
RegisterClipboardFormatW
ChangeDisplaySettingsW
EnumDisplaySettingsW
SetScrollInfo
KillTimer
GetFocus
DispatchMessageA
PeekMessageA
SetWindowPos
SetWindowLongW
FillRect
GetWindowRect
GetAsyncKeyState
VkKeyScanW
DispatchMessageW
TranslateMessage
ReleaseDC
GetDC
CheckMenuRadioItem
CheckMenuItem
InsertMenuItemW
EnableMenuItem
GetMenuItemCount
GetSubMenu
CreateMenu
AppendMenuW
DrawMenuBar
GetMenuState
InsertMenuW
RemoveMenu
ModifyMenuW
DestroyMenu
CreatePopupMenu
SetMenuItemInfoW
UnregisterClassW
GetKeyState
RegisterWindowMessageW
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleW
DdeClientTransaction
DdeDisconnect
DdeInitializeW
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeUninitialize
DdeQueryStringW
DdeFreeStringHandle
DestroyWindow
SendMessageW
SetCursor
RegisterClassW
MessageBeep
PeekMessageW
MessageBoxW
PostThreadMessageW
GetScrollInfo
IsWindowEnabled
SetCursorPos
ReleaseCapture
SetCapture
IsWindowVisible
CallWindowProcW
DeferWindowPos
ClientToScreen
ScreenToClient
UpdateWindow
RedrawWindow
SetParent
GetCursorPos
WindowFromPoint
SetForegroundWindow
RegisterClipboardFormatA
OpenClipboard
SetClipboardData
CloseClipboard
SetWindowRgn
GetWindowLongW
GetClientRect
AdjustWindowRectEx
PostQuitMessage
DefWindowProcW
LoadIconW
LoadCursorW
CreateWindowExW
MoveWindow
GetSystemMetrics
PostMessageW
MessageBoxA
GetParent
SetTimer
ScrollWindow
ShowWindow
EnableWindow
ShowCursor
SetFocus

gdi32

StretchDIBits
DeleteObject
StretchBlt
MaskBlt
SetBrushOrgEx
GetStockObject
Ellipse
RoundRect
Rectangle
PolyPolygon
SetPolyFillMode
Polygon
Pie
Arc
CreateSolidBrush
SelectClipRgn
GetTextColor
GetBkColor
SetMapMode
SetViewportExtEx
GetRegionData
ExtCreateRegion
OffsetRgn
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
GetTextExtentExPointW
GetCharABCWidthsW
SetROP2
TextOutW
PolyBezier
Polyline
SetPixel
GetPixel
ExtFloodFill
ExtSelectClipRgn
GetClipBox
SetTextColor
SetStretchBltMode
SaveDC
RestoreDC
SetBkMode
SetBkColor
CreateBitmap
CreateCompatibleBitmap
BitBlt
DeleteDC
CreateCompatibleDC
GetPaletteEntries
GetObjectW
ExcludeClipRect
CreateRectRgn
GetTextExtentPoint32W
SelectPalette
RealizePalette
GdiFlush
SelectObject
GetTextMetricsW
GetDeviceCaps
CreateFontIndirectW
DeleteEnhMetaFile
CopyEnhMetaFileW
GetEnhMetaFileW
CreateDCW
StartDocW
EndPage
StartPage
EndDoc
SetAbortProc
EnumFontFamiliesExW
CreateICW
PatBlt
GetDIBColorTable
CreateDIBitmap
GetDIBits
CreateDIBSection
SetTextAlign
CreateRectRgnIndirect
GetSystemPaletteEntries
CombineRgn
RectInRegion
PtInRegion
EqualRgn
GetRgnBox
MoveToEx
LineTo
CreatePen
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
CreatePalette
GetNearestPaletteIndex

shell32

ShellExecuteW
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconW
ExtractIconExW
SHFileOperationW

ole32

OleSetContainedObject
OleInitialize
CoCreateInstance
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
OleGetClipboard
OleUninitialize
OleCreate

oleaut32

SysAllocString
VariantClear

comctl32

ImageList_Add
ImageList_BeginDrag
ImageList_SetDragCursorImage
ord17
ord16
CreateStatusWindowW
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageCount
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter

wininet

HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
HttpQueryInfoW

ws2_32

getpeername
WSAStartup
WSACleanup
ntohl
htonl
WSASetLastError
WSAAddressToStringA
WSAGetLastError
WSAStringToAddressA
htons
ntohs
setsockopt
WSASocketW
closesocket
bind
listen
WSAIoctl
WSASend
getservbyname
gethostbyname
getsockopt
getsockname
WSASendTo
WSARecvFrom
ioctlsocket
connect
WSARecv
accept
inet_addr
select
__WSAFDIsSet
socket

mswsock

GetAcceptExSockaddrs
AcceptEx

winmm

timeGetTime

comdlg32

PageSetupDlgW
PrintDlgW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
ChooseColorW
ChooseFontW

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 629KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d606fc67ad971465f35f2602e10a8b74

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

comctl32

wininet

ws2_32

mswsock

winmm

comdlg32

advapi32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 629KB - Virtual size: 628KB

.data Size: 102KB - Virtual size: 288KB

.tls Size: 512B - Virtual size: 2B

.SHARED Size: 512B - Virtual size: 4B

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 287KB - Virtual size: 286KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 629KB - Virtual size: 628KB

.data
Size: 102KB - Virtual size: 288KB

.tls
Size: 512B - Virtual size: 2B

.SHARED
Size: 512B - Virtual size: 4B

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 287KB - Virtual size: 286KB