0e16a65a02bd0df2d00055e705b39e7ee89c49ef12983665e8773aaccf0b7bb0

Sharing

Copy URL Twitter E-mail

General

Target

0e16a65a02bd0df2d00055e705b39e7ee89c49ef12983665e8773aaccf0b7bb0
Size

4.6MB
MD5

d925e0d1d58805f12145122f6527a92b
SHA1

ebf5043f3ad932333b875fe1ac16bfc3d9e6a3a0
SHA256

0e16a65a02bd0df2d00055e705b39e7ee89c49ef12983665e8773aaccf0b7bb0
SHA512

3befbb840a5538a54a092ee9fe34f9dcc7a239480c85cc3d2bd8513f07e872f8b49cbec8908cbf12a9baacd65dae671fea37761c7c5d522b39ab773c34b3d771
SSDEEP

98304:3SbCaZjJy/RD5v02CMEQ8xKKFLOAkGkzdnEVomFHKnP:PaZFypUvQ8xKKFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e16a65a02bd0df2d00055e705b39e7ee89c49ef12983665e8773aaccf0b7bb0

Files

0e16a65a02bd0df2d00055e705b39e7ee89c49ef12983665e8773aaccf0b7bb0
.exe windows:6 windows x64 arch:x64

00587f4aed9f99a582bb12c5251a1a71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\PuyaSVN\PT061\A15_MCU_tools\B02_PY_ISP\04_Software\PY32IspTool\x64\Release\PY32IspTool_x64.pdb

Imports

kernel32

SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
GetTimeZoneInformation
LCMapStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
GetSystemTimeAsFileTime
ExitProcess
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetFileType
SetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
RaiseException
OutputDebugStringW
GetStringTypeW
GetStartupInfoW
IsDebuggerPresent
FlsGetValue
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
GetTempFileNameW
GetProfileIntW
GetTickCount64
InitializeSListHead
SearchPathW
GetWindowsDirectoryW
FindResourceExW
GetTempPathW
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetCurrentDirectoryW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
FileTimeToSystemTime
ResumeThread
SuspendThread
GetVersionExW
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FindFirstFileW
FindClose
DeleteFileW
GetCurrentProcessId
CompareStringW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetProcAddress
GetModuleHandleExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
SetLastError
WaitCommEvent
SetCommTimeouts
SetCommState
SetCommMask
GetCommTimeouts
GetCommState
GetCommModemStatus
EscapeCommFunction
SetupComm
ClearCommBreak
TerminateThread
SetThreadPriority
Sleep
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSection
CloseHandle
WriteFile
FlushFileBuffers
CreateFileW
PurgeComm
ClearCommError
GetTickCount
WaitForSingleObject
GetOverlappedResult
ReadFile
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
DecodePointer
LoadResource
FindResourceW
SizeofResource
LockResource
FlsAlloc
WriteConsoleW

user32

DrawFrameControl
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
NotifyWinEvent
IsRectEmpty
InvertRect
DrawFocusRect
HideCaret
MessageBeep
EnableScrollBar
ReleaseCapture
SetCapture
GetAsyncKeyState
EnumDisplayMonitors
SystemParametersInfoW
GetSysColorBrush
SetLayeredWindowAttributes
TranslateMessage
GetMessageW
CharUpperW
LoadMenuW
DrawStateW
GetCursorPos
GetWindowThreadProcessId
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
SetWindowRgn
OffsetRect
DrawIconEx
GetComboBoxInfo
EnableWindow
SendMessageW
SetCursor
LoadCursorW
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
IntersectRect
DestroyMenu
GetMenuItemInfoW
SendDlgItemMessageA
GetKeyNameTextW
MapVirtualKeyW
RealChildWindowFromPoint
CopyImage
TrackMouseEvent
IsZoomed
SetTimer
KillTimer
DeleteMenu
PeekMessageW
DispatchMessageW
WindowFromPoint
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
UnionRect
MonitorFromPoint
ToUnicodeEx
GetKeyboardLayout
IsIconic
GetClientRect
SetRectEmpty
UnregisterClassW
wsprintfW
PostMessageW
PostThreadMessageW
IsWindow
GetSystemMetrics
GetSystemMenu
AppendMenuW
DrawIcon
InvalidateRect
LoadIconW
DrawEdge
InflateRect
GetParent
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetFocus
CheckMenuItem
ReuseDDElParam
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
RegisterWindowMessageW
WaitMessage
CharNextW
InvalidateRgn
GetNextDlgGroupItem
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetDoubleClickTime
GetIconInfo
CopyIcon
ModifyMenuW
GetUpdateRect
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
SubtractRect
CreateMenu
DestroyCursor
GetWindowRgn
UnpackDDElParam
LoadImageW
DestroyIcon
InsertMenuItemW
TranslateAcceleratorW
SetClassLongPtrW
LockWindowUpdate
BringWindowToTop
SetParent
SetRect
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos

gdi32

CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgn
CreateRectRgnIndirect
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CombineRgn
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
PatBlt
CreatePolygonRgn
Polygon
Polyline
GetMapMode
SetRectRgn
DPtoLP
CreateRoundRectRgn
CreateDIBSection
CreatePalette
GetPaletteEntries
Rectangle
RealizePalette
GetRgnBox
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
RoundRect
EnumFontFamiliesExW
GetNearestPaletteIndex
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
ExtTextOutW
GetTextExtentPoint32W
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
GetObjectW
DeleteObject
CreateDIBitmap
BitBlt
CreateFontIndirectW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
SHBrowseForFolderW
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
SHAppBarMessage
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFileExistsW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindFileNameW

uxtheme

GetWindowTheme
GetThemePartSize
IsAppThemed
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemeSysColor
DrawThemeText
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent

ole32

CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CoInitialize
CoCreateGuid
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

VariantClear
VariantChangeType
SysFreeString
OleCreateFontIndirect
LoadTypeLi
SysAllocString
VarBstrFromDate
VariantInit
VariantCopy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysStringByteLen

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipDrawImageI

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00587f4aed9f99a582bb12c5251a1a71

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

setupapi

oleacc

imm32

winmm

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 588KB - Virtual size: 587KB

.data Size: 32KB - Virtual size: 64KB

.pdata Size: 90KB - Virtual size: 90KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1.9MB - Virtual size: 1.9MB

.reloc Size: 61KB - Virtual size: 61KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 588KB - Virtual size: 587KB

.data
Size: 32KB - Virtual size: 64KB

.pdata
Size: 90KB - Virtual size: 90KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

.reloc
Size: 61KB - Virtual size: 61KB