f328163ad1b9a40a9d2bec4fd70bac8b8b3341613b9593e49d3f6fd5fe295205

Sharing

Copy URL Twitter E-mail

General

Target

f328163ad1b9a40a9d2bec4fd70bac8b8b3341613b9593e49d3f6fd5fe295205
Size

1.4MB
MD5

2b3fef09bfb2a55fe3df2beac14e3824
SHA1

f7935e1e57aa29dfb3f2fab92c563b3f21d2c20d
SHA256

f328163ad1b9a40a9d2bec4fd70bac8b8b3341613b9593e49d3f6fd5fe295205
SHA512

80b870b9f3902b0dff7eecc7dcdfe4366e446c80fc2c4ba1bfb7b3971a00116f913f41ad204f025bfb465e9eae66873fe5a490699a0bcf1992900a0b5c758acc
SSDEEP

24576:ectkZXdUg8fz0BFe8iFHMPHAV14uDk5aoyvwEbnQtFwnQv5bPxGqB:laXdH8b2iFHvDxI5VEbnQrwnQvhxGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f328163ad1b9a40a9d2bec4fd70bac8b8b3341613b9593e49d3f6fd5fe295205

Files

f328163ad1b9a40a9d2bec4fd70bac8b8b3341613b9593e49d3f6fd5fe295205
.exe windows:6 windows x86 arch:x86

b7593da14ba69cb0d49318864424f388

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

dinput8

DirectInput8Create

winmm

timeEndPeriod
timeGetDevCaps
timeSetEvent
PlaySoundW
timeGetTime
mciSendCommandA
timeKillEvent
timeBeginPeriod

imm32

ImmGetDefaultIMEWnd
ImmAssociateContext

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

CreateWaitableTimerA
SwitchToThread
GetCurrentThreadId
SizeofResource
FindResourceA
LockResource
LoadResource
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
GetVolumeInformationW
FindFirstFileW
VirtualFree
FindNextFileW
DeviceIoControl
VirtualAlloc
GetDriveTypeA
GetModuleFileNameW
SetErrorMode
FindClose
GetVolumeInformationA
GetFileAttributesW
GetLogicalDriveStringsW
GetDiskFreeSpaceA
GetDevicePowerState
FileTimeToSystemTime
GetDiskFreeSpaceExW
DeleteFileW
GetLocalTime
SetCurrentDirectoryW
SystemTimeToFileTime
GetTempFileNameW
GetDriveTypeW
GetModuleHandleA
SetThreadAffinityMask
GetLogicalProcessorInformation
GetCurrentThread
CreateDirectoryW
RemoveDirectoryW
ExitThread
SetFileAttributesW
OpenMutexA
CreateThread
CreateProcessW
MoveFileW
GetExitCodeProcess
GetExitCodeThread
CopyFileW
GlobalMemoryStatus
GlobalMemoryStatusEx
GetComputerNameA
CreateFileMappingA
CreateMutexA
ReleaseMutex
CreateFileMappingW
OpenProcess
MultiByteToWideChar
GetUserDefaultUILanguage
FindResourceW
QueryPerformanceFrequency
QueryPerformanceCounter
SetFilePointerEx
WaitForMultipleObjects
GetCurrentProcessId
RtlUnwind
GetACP
GetThreadPriority
MulDiv
CreateSemaphoreA
ReleaseSemaphore
OutputDebugStringW
InitializeSListHead
SetWaitableTimer
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleExW
ExitProcess
UnmapViewOfFile
TryEnterCriticalSection
ResetEvent
GetSystemInfo
WaitForSingleObjectEx
DecodePointer
RaiseException
InitializeCriticalSectionEx
InitializeCriticalSectionAndSpinCount
GlobalUnlock
GlobalLock
GlobalAlloc
GetFileTime
GetStdHandle
HeapFree
HeapAlloc
GetFileType
LCMapStringW
HeapReAlloc
HeapSize
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
GetStringTypeW
GetConsoleMode
FlushFileBuffers
GetFileSize
GetLastError
CreateFileW
SetFilePointer
SetFileTime
WriteFile
ReadFile
CreateEventA
CloseHandle
SetEvent
WaitForSingleObject
SetThreadPriority
DeleteCriticalSection
Sleep
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WriteConsoleW
GetSystemTime
SetLastError
EncodePointer
GetVersionExA
GetSystemTimeAsFileTime
MapViewOfFile
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ResumeThread
GetConsoleOutputCP
GetCurrentProcess
FreeLibraryAndExitThread

user32

EnableMenuItem
LoadImageW
SystemParametersInfoW
PostQuitMessage
GetWindowThreadProcessId
GetShellWindow
GetUserObjectSecurity
GetCursorInfo
ClientToScreen
SetCursor
ShowCursor
SetCursorPos
BringWindowToTop
FindWindowW
SetForegroundWindow
GetKeyboardState
IsIconic
CloseWindow
GetDlgItemTextW
IsDlgButtonChecked
LoadIconW
TranslateMessage
GetForegroundWindow
RegisterHotKey
PeekMessageW
DispatchMessageW
SetActiveWindow
UnregisterHotKey
GetSystemMenu
SetTimer
SwapMouseButton
KillTimer
EnableWindow
PostMessageA
WaitForInputIdle
EnumDisplayMonitors
GetCursorPos
AdjustWindowRectEx
LoadCursorA
RegisterClassExW
LoadCursorW
SetWindowPos
GetClientRect
MonitorFromWindow
FillRect
SetRect
CreateDialogParamW
CallWindowProcW
DestroyWindow
MessageBoxW
ScreenToClient
EndDialog
DialogBoxParamA
GetDlgItemTextA
SetWindowLongA
GetDlgCtrlID
CallWindowProcA
SetDlgItemTextW
SetWindowTextA
SendDlgItemMessageW
DefWindowProcA
SetFocus
SendDlgItemMessageA
SetDlgItemTextA
SendMessageA
SetWindowLongW
GetDlgItem
GetWindowTextLengthA
GetParent
DialogBoxParamW
UpdateWindow
InvalidateRect
GetWindowTextW
IsWindow
MessageBoxA
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
IsClipboardFormatAvailable
SetScrollInfo
DefWindowProcW
PostMessageW
GetWindowRect
CreateWindowExW
SendMessageW
GetSystemMetrics
SetWindowTextW
GetScrollInfo
ShowWindow
GetAsyncKeyState
RedrawWindow
MoveWindow
EnableScrollBar
BeginPaint
EndPaint
GetDC
ReleaseDC
PeekMessageA
PostThreadMessageA
GetQueueStatus
RegisterWindowMessageA
DispatchMessageA
MsgWaitForMultipleObjects
GetMonitorInfoA

gdi32

AddFontMemResourceEx
AddFontResourceExW
RemoveFontMemResourceEx
RemoveFontResourceExW
SetBrushOrgEx
StretchDIBits
CreateRectRgnIndirect
SelectClipRgn
SetStretchBltMode
GetStockObject
CreateFontA
SelectPalette
GetOutlineTextMetricsW
GetTextMetricsA
GetCharABCWidthsFloatW
DeleteObject
GetGlyphOutlineW
GetTextExtentPoint32W
TextOutW
DeleteDC
CreateFontW
EnumFontFamiliesExW
CreateCompatibleDC
CreateDIBSection
SelectObject
SetBkMode
SetTextColor
CreatePalette
GetObjectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegDeleteKeyW
RevertToSelf
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueA
GetSecurityDescriptorOwner
ImpersonateLoggedOnUser
IsValidSid
OpenProcessToken
DuplicateTokenEx
LookupAccountSidW
GetUserNameA
RegCreateKeyExW
RegSetValueExW

shell32

SHBrowseForFolderW
ShellExecuteW
SHChangeNotify
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHGetMalloc
DragQueryFileA
DragFinish
DragAcceptFiles
DragQueryFileW

ole32

CoUninitialize
CoTaskMemAlloc
PropVariantClear
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
CoCreateInstance

wininet

InternetOpenW
InternetSetFilePointer
InternetReadFile
InternetAttemptConnect
InternetOpenUrlW
InternetCloseHandle
InternetQueryDataAvailable

gdiplus

GdipGetImageWidth
GdipGetImageEncodersSize
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipGetImageEncoders
GdipCloneImage
GdipCreateBitmapFromFile
GdipFree
GdipGetImagePixelFormat
GdipDisposeImage
GdipAlloc
GdipBitmapUnlockBits
GdipSaveImageToFile

mf

MFCreateTopology
MFCreateMediaSession
MFCreateTopologyNode
MFCreateAudioRendererActivate
MFCreateVideoRendererActivate

mfplat

MFCreateFile
MFCreateSourceResolver
MFStartup
MFShutdown
MFCreateMFByteStreamOnStream

dsound

ord11

Exports

Exports

??4SThreadParam@@QAEAAU0@$$QAU0@@Z
??4SThreadParam@@QAEAAU0@ABU0@@Z

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7593da14ba69cb0d49318864424f388

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

dinput8

winmm

imm32

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

wininet

gdiplus

mf

mfplat

dsound

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 234KB - Virtual size: 233KB

.data Size: 13KB - Virtual size: 415KB

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 48KB - Virtual size: 47KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 234KB - Virtual size: 233KB

.data
Size: 13KB - Virtual size: 415KB

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 48KB - Virtual size: 47KB