1b1cb2b9406e36473b017e8f58d657b83d37ade72c56eb5e67c4a33918eb0f97

Sharing

Copy URL

Twitter E-mail

General

Target

1b1cb2b9406e36473b017e8f58d657b83d37ade72c56eb5e67c4a33918eb0f97
Size

3.4MB
MD5

592cf65d2ada79452fc49c1e83053b0f
SHA1

2503cb2e2245099a1bc10b0262ac8e55761af9f1
SHA256

1b1cb2b9406e36473b017e8f58d657b83d37ade72c56eb5e67c4a33918eb0f97
SHA512

3558e9f8778df037f841af12d4a626d25089f08c95d76cc8d1978d99491fc0e297a466017cac884d306467e5710f6ae12219298e5c4424f7d3e1828e09dd0ba2
SSDEEP

98304:XoAf/gMVFO3C7XPB9IIbxmLsrFLOAkGkzdnEVomFHKnP8:Jo6FOqNbxmLsrFLOyomFHKnP8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1cb2b9406e36473b017e8f58d657b83d37ade72c56eb5e67c4a33918eb0f97

Files

1b1cb2b9406e36473b017e8f58d657b83d37ade72c56eb5e67c4a33918eb0f97
.exe windows:6 windows x86 arch:x86

ad622aed031d7c30080b189b2b4a8e44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ProjectCode\IP3\LED\LEDTst\Release\LEDTst.pdb

Imports

kernel32

FlsGetValue
FlsSetValue
FlsFree
TerminateProcess
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FlsAlloc
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
WriteConsoleW
LCMapStringEx
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTickCount64
QueryPerformanceCounter
GetStartupInfoW
InitOnceExecuteOnce
GetProcessHeap
GetStdHandle
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
SetThreadStackGuarantee
HeapQueryInformation
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
ExitThread
CreateThread
GetModuleHandleExW
ExitProcess
HeapReAlloc
RaiseException
RtlUnwind
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetCommandLineW
GetUserDefaultUILanguage
FindResourceExW
GetWindowsDirectoryW
SearchPathW
GetProfileIntW
VirtualProtect
GetTempPathW
GetTempFileNameW
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
GetFileSize
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
DeleteFileW
GetCurrentDirectoryW
GetThreadLocale
FileTimeToSystemTime
GlobalFlags
InterlockedIncrement
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
ResumeThread
SetThreadPriority
WaitForSingleObject
CloseHandle
WritePrivateProfileStringW
GetLocaleInfoEx
GetThreadPreferredUILanguages
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
RegisterApplicationRestart
RegisterApplicationRecoveryCallback
lstrcmpA
GetVersionExW
GetCurrentThread
InterlockedExchange
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
GlobalAlloc
GetCurrentProcessId
MulDiv
GlobalUnlock
GlobalLock
CompareStringEx
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeResource
FreeLibrary
GetVersion
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
OutputDebugStringA
GetFileAttributesW
GetLocalTime
Sleep
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
OutputDebugStringW
FindResourceW
LoadResource
LockResource
SizeofResource
GetStringTypeW
lstrcpyW
InitializeCriticalSectionEx

user32

ReleaseCapture
SetCapture
WaitMessage
UnregisterClassW
IntersectRect
RealChildWindowFromPoint
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
SendDlgItemMessageA
ShowOwnedPopups
TranslateMessage
GetMessageW
GetCursorPos
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DrawIconEx
IsRectEmpty
OffsetRect
InflateRect
DrawFocusRect
GetSysColorBrush
SetWindowRgn
DrawStateW
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
FillRect
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetKeyboardLayout
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetWindowRect
GetSubMenu
LoadMenuW
IsDialogMessageW
GetWindow
GetParent
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
SetWindowPos
ToUnicodeEx
RegisterClipboardFormatW
ReuseDDElParam
SetWindowLongW
EnableWindow
GetSysColor
MoveWindow
ShowWindow
IsWindow
KillTimer
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
AppendMenuW
GetSystemMenu
LoadIconW
SetCursor
LoadCursorW
MessageBeep
GetWindowRgn
DestroyCursor
CreateMenu
InvertRect
HideCaret
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
IsClipboardFormatAvailable
IsWindowVisible
InvalidateRect
FrameRect
CharUpperBuffW
WindowFromPoint
GetKeyNameTextW
CreateAcceleratorTableW
MapVirtualKeyW
SetScrollPos
GetKeyboardState
SendMessageW
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
UpdateLayeredWindow
GetUpdateRect
ChangeWindowMessageFilter
SetClassLongW
DestroyAcceleratorTable
ModifyMenuW
IsMenu
SetMenuDefaultItem
GetMenuDefaultItem
CopyIcon
GetIconInfo
GetDoubleClickTime
EnableScrollBar
LockWindowUpdate
CreatePopupMenu
BringWindowToTop
UnionRect
SetCursorPos
NotifyWinEvent
GetAsyncKeyState
CharUpperW
IsZoomed
TrackMouseEvent
LoadImageW
DestroyIcon
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
MonitorFromPoint
SetParent
EnumDisplayMonitors
SetRectEmpty
SetLayeredWindowAttributes
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
GetScrollPos
DeleteMenu
SubtractRect

gdi32

GetDeviceCaps
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
CombineRgn
CreateEllipticRgn
CreateRectRgnIndirect
GetClipBox
GetBkColor
GetTextColor
GetTextExtentPoint32W
PatBlt
CreatePolygonRgn
Polygon
Polyline
GetTextMetricsW
GetMapMode
SetRectRgn
DPtoLP
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateCompatibleBitmap
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
SetTextColor
SetBkColor
CreateSolidBrush
Ellipse
GetObjectW
CreateFontIndirectW

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
InitNetworkAddressControl
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHGetFileInfoW
SHAppBarMessage
SHGetKnownFolderPath
SHCreateItemFromParsingName
SHGetDesktopFolder
SHBrowseForFolderW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindExtensionW
PathRemoveFileSpecW

uxtheme

GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
DrawThemeParentBackground
DrawThemeTextEx
BufferedPaintInit
BufferedPaintUnInit
BeginBufferedPaint
EndBufferedPaint
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor

dwmapi

DwmIsCompositionEnabled
DwmDefWindowProc
DwmSetWindowAttribute

ole32

CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CoInitializeEx
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoCreateInstance
CoInitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
OleInitialize
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoFreeUnusedLibraries

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocString
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType
SysFreeString
VariantClear
SysAllocStringLen
VariantInit

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc

winring0

ord7
ord54
ord1
ord8

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 384KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad622aed031d7c30080b189b2b4a8e44

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

dwmapi

ole32

oleaut32

oledlg

gdiplus

winring0

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 309KB - Virtual size: 308KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 384KB - Virtual size: 384KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 309KB - Virtual size: 308KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 384KB - Virtual size: 384KB