2f24a42b02366dcb8a33b90ff5f957cf91e926dc682e32ed2b784355f1254fe4

Sharing

Copy URL Twitter E-mail

General

Target

2f24a42b02366dcb8a33b90ff5f957cf91e926dc682e32ed2b784355f1254fe4
Size

501KB
MD5

2d60735f4e5481f38c62ca8cfee4fa81
SHA1

56a55f5034a48ceb8562060e1b84b28052ebe1ce
SHA256

2f24a42b02366dcb8a33b90ff5f957cf91e926dc682e32ed2b784355f1254fe4
SHA512

5a77a7126dde5a2d82948a00a3802fb638a74bb164c4fa4115f2d872a35caf7d753755a7f41649e9c8cfc1ac57158c2e3b34f40ff3560b39ea686b5dfd1f4ae7
SSDEEP

12288:VE8irns/2fdrYXBiRySmF4VYR4ZJj7laTrCj1Y:VE8irnsuBYRiRySmF4VuYJJaTuj1Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f24a42b02366dcb8a33b90ff5f957cf91e926dc682e32ed2b784355f1254fe4

Files

2f24a42b02366dcb8a33b90ff5f957cf91e926dc682e32ed2b784355f1254fe4
.dll windows:4 windows x86 arch:x86

b3f8cd01c5b9733edf4469889c612525

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

comctl32

ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_EndDrag
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetBkColor
InitCommonControlsEx
SetWindowSubclass

gdi32

AddFontResourceExA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreatePen
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
ExcludeClipRect
GetDeviceCaps
GetObjectW
GetStockObject
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
LineTo
MoveToEx
Polyline
Rectangle
RoundRect
SelectObject
SetBkColor
SetBkMode
SetTextColor
TextOutW

gdiplus

GdipAddPathArc
GdipAddPathLine
GdipAddPathString
GdipBitmapGetPixel
GdipBitmapSetPixel
GdipClosePathFigure
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipCreateFontFamilyFromName
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreatePath
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipDeleteCustomLineCap
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeletePath
GdipDeletePen
GdipDisposeImage
GdipDrawEllipse
GdipDrawImage
GdipDrawImageRect
GdipDrawImageRectRect
GdipDrawLine
GdipDrawPath
GdipDrawPolygon
GdipDrawRectangle
GdipFillEllipse
GdipFillPath
GdipFillPolygon
GdipFillRectangle
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageHeight
GdipGetImageWidth
GdipGetMatrixElements
GdipGetPathGradientPointCount
GdipGetPenFillType
GdipSaveImageToFile
GdipSetImageAttributesRemapTable
GdipSetPenCustomEndCap
GdipSetPenCustomStartCap
GdipSetSmoothingMode
GdipWindingModeOutline
GdiplusShutdown
GdiplusStartup

kernel32

CloseHandle
CompareStringW
CreateDirectoryW
CreateFileW
CreateWaitableTimerA
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceW
FreeLibrary
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetLargestConsoleWindowSize
GetLastError
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetVersionExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LockResource
MoveFileW
MulDiv
MultiByteToWideChar
PeekConsoleInputA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ReadFile
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleWindowInfo
SetUnhandledExceptionFilter
SetWaitableTimer
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleInputA
WriteFile
WritePrivateProfileStringW

msvcrt

__setusermatherr
_amsg_exit
_beginthreadex
_controlfp
_errno
_i64toa
_i64tow
_initterm
_iob
_itoa
_itow
_lock
_snprintf
_snwprintf
_strdup
_strnicmp
_ui64toa
_ui64tow
_ultoa
_ultow
_unlock
_wtoi64
abort
atoi
calloc
exit
fputs
free
fwrite
islower
isupper
localtime
iswctype
localeconv
log10
malloc
mbstowcs
memset
memcmp
memcpy
memmove
modf
pow
qsort
rand
realloc
setlocale
sprintf
srand
strchr
strcpy
strlen
strncmp
strtoul
time
tolower
toupper
towupper
vfprintf
wcschr
wcscmp
wcscspn
wcslen
wcsncmp
wcsstr
wcstod
wcstombs
wcstoul

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoGetObject
CoInitialize
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VarBstrFromDec
VarCat
VariantClear
VariantCopy

shell32

ExtractAssociatedIconW
ExtractIconW
SHFileOperationW
SHGetPathFromIDListW
ShellExecuteA
ShellExecuteW

shlwapi

PathRemoveBackslashW

user32

AdjustWindowRectEx
AppendMenuW
BeginDeferWindowPos
BeginPaint
CallWindowProcW
CopyAcceleratorTableW
CreateAcceleratorTableW
CreateIconIndirect
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyAcceleratorTable
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageW
DrawIconEx
DrawTextW
EnableWindow
EndDeferWindowPos
EndPaint
EnumThreadWindows
FillRect
FindWindowExA
FindWindowExW
FindWindowW
FlashWindowEx
GetActiveWindow
GetAncestor
GetClassLongW
GetClassNameA
GetClassNameW
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetMenu
GetMessageW
GetParent
GetPropW
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsDialogMessageW
IsIconic
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorW
LoadIconA
LoadImageA
LoadImageW
LoadStringW
MapVirtualKeyA
MapWindowPoints
MessageBoxW
ModifyMenuW
MsgWaitForMultipleObjects
OpenIcon
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
RegisterClassExW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageTimeoutW
SendMessageW
SetCapture
SetClassLongW
SetCursor
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenuItemBitmaps
SetMenuItemInfoW
SetParent
SetPropW
SetRect
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
ShowWindow
SystemParametersInfoW
TrackMouseEvent
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnregisterClassW
UpdateLayeredWindow
UpdateWindow
VkKeyScanA
WindowFromPoint

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
recv
send
socket

Exports

Exports

ABOUTSHOW@4
BACKCSERVICE@20
CLOSECSERVICE@4
GETREWARDLIST@4
LAUNCHSTARTPAGE@24
OPENCSERVICE@16
SETACCOUNTLOGIN@8
SETSTARTFULLSCREEN@0

Sections

.text
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3f8cd01c5b9733edf4469889c612525

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

gdiplus

kernel32

msvcrt

ole32

oleaut32

shell32

shlwapi

user32

version

ws2_32

Exports

Exports

Sections

.text Size: 413KB - Virtual size: 412KB

.data Size: 23KB - Virtual size: 23KB

.rdata Size: 36KB - Virtual size: 35KB

.bss Size: - Virtual size: 39KB

.edata Size: 512B - Virtual size: 268B

.idata Size: 12KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 413KB - Virtual size: 412KB

.data
Size: 23KB - Virtual size: 23KB

.rdata
Size: 36KB - Virtual size: 35KB

.bss
Size: - Virtual size: 39KB

.edata
Size: 512B - Virtual size: 268B

.idata
Size: 12KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 10KB - Virtual size: 10KB