0d0a6d2ae0d4d10caf80202242133e4deb4b35e8e71f645ed2b9c8eec8cbc923

Sharing

Copy URL

Twitter E-mail

General

Target

0d0a6d2ae0d4d10caf80202242133e4deb4b35e8e71f645ed2b9c8eec8cbc923
Size

5.6MB
MD5

804fd1675f8d1df627d358ef1274d5b7
SHA1

8f366e1345e2ea6d551a3bc077c28c18110805c0
SHA256

0d0a6d2ae0d4d10caf80202242133e4deb4b35e8e71f645ed2b9c8eec8cbc923
SHA512

490800bce5035ca6b10389a7a60449d5b9eca2ef40e2c139ed70ab83709be5879f7493115aa43e07a9fb7973f6fab047b7ad4ff786cacf7c7f7d8e363d1ea28d
SSDEEP

98304:Sd/O5xriHljd6jBNWjArSxV2V/DFLOAkGkzdnEVomFHKnP:8O5hiFgnmxV2V/DFLOyomFHKnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d0a6d2ae0d4d10caf80202242133e4deb4b35e8e71f645ed2b9c8eec8cbc923

Files

0d0a6d2ae0d4d10caf80202242133e4deb4b35e8e71f645ed2b9c8eec8cbc923
.exe windows:5 windows x64 arch:x64

013b669d68fe7d55dbf3678490be4179

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\PROJECT\FancyCache\release\exe\amd64\FancyCcV.pdb

Imports

kernel32

GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
LCMapStringW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStringTypeW
GetACP
ExitProcess
GetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetCommandLineW
GetEnvironmentStringsW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFileType
SetStdHandle
RtlUnwindEx
RtlPcToFileHeader
DebugBreak
IsValidLocale
EnumResourceLanguagesW
GetVersion
GetSystemDefaultLangID
GetUserDefaultLangID
CreateMutexW
lstrcatW
WinExec
CreateProcessW
GetComputerNameExW
GetSystemWindowsDirectoryW
GetSystemInfo
GetVolumePathNamesForVolumeNameW
lstrlenW
OutputDebugStringW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetCommandLineA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
LocalUnlock
LocalLock
GetDiskFreeSpaceW
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
SearchPathW
GetWindowsDirectoryW
VerifyVersionInfoW
VerSetConditionMask
GetCurrentDirectoryW
FindResourceExW
lstrcpyW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
GlobalGetAtomNameW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetCurrentThread
VirtualProtect
ResumeThread
SuspendThread
SetThreadPriority
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
GetThreadLocale
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
lstrcmpiW
LoadLibraryExW
GetProcAddress
GetModuleHandleExW
GetModuleHandleW
GetCurrentProcess
DuplicateHandle
OutputDebugStringA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameW
GetFileSize
SizeofResource
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
GetModuleFileNameW
GetCurrentProcessId
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
MultiByteToWideChar
WaitForSingleObject
MulDiv
lstrcpynW
SetVolumeMountPointW
DefineDosDeviceW
SetEvent
CreateEventW
GetDiskFreeSpaceExW
GetVolumeNameForVolumeMountPointW
CreateFileW
DeviceIoControl
GetVolumeInformationW
Sleep
GetDriveTypeW
GetLogicalDrives
GetLocalTime
GetSystemTimeAsFileTime
WideCharToMultiByte
GetComputerNameW
GetVersionExW
GlobalMemoryStatusEx
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
FindResourceW
LoadResource
RaiseException
CloseHandle
HeapReAlloc
LockResource
GetLastError
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
GetConsoleCP

user32

InflateRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
WindowFromPoint
TranslateMessage
GetMessageW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MapVirtualKeyW
GetKeyNameTextW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
SendDlgItemMessageW
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
IntersectRect
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetTopWindow
GetClassNameW
IsRectEmpty
SetWindowRgn
NotifyWinEvent
PostThreadMessageW
WaitMessage
UnregisterClassW
RegisterWindowMessageW
ToUnicodeEx
GetClassLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
GetSysColor
AdjustWindowRectEx
GetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
GetAsyncKeyState
MapDialogRect
ShowOwnedPopups
IsZoomed
MessageBeep
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
GetSysColorBrush
RealChildWindowFromPoint
CopyImage
GetDialogBaseUnits
TrackMouseEvent
LoadImageW
DeleteMenu
BeginPaint
GetForegroundWindow
SetActiveWindow
GetKeyboardLayout
TrackPopupMenu
SetMenu
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
MonitorFromWindow
EnableWindow
SetCursor
LoadCursorW
IsWindow
SendMessageW
SetForegroundWindow
PostMessageW
GetSystemMetrics
SetParent
KillTimer
GetClientRect
MonitorFromPoint
GetWindowRect
LoadIconW
DestroyIcon
GetWindow
GetCursorPos
ReleaseDC
IsIconic
InvalidateRect
ReleaseCapture
UpdateWindow
UnregisterDeviceNotification
CharNextW
InvalidateRgn
SetWindowContextHelpId
DrawAnimatedRects
FindWindowW
CreateIconIndirect
LoadStringW
ExitWindowsEx
GetClipboardData
keybd_event
EnumWindows
RegisterDeviceNotificationW
EnableMenuItem
GetDesktopWindow
PostQuitMessage
AppendMenuW
CheckMenuItem
SetCapture
SetPropW
SetMenuDefaultItem
SetMenuItemInfoW
GetDlgCtrlID
CopyRect
GetCapture
GetSubMenu
DrawIcon
CreatePopupMenu
RemovePropW
ScreenToClient
SetWindowLongPtrW
SetWindowPos
IsWindowVisible
GetDC
LoadMenuW
ModifyMenuW
GetSystemMenu
GetLastActivePopup
FillRect
GetParent
MapWindowPoints
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
IsWindowEnabled
MessageBoxW
GetWindowLongW
GetWindowThreadProcessId
UnhookWindowsHookEx
CharUpperW
SetFocus
SetScrollPos
GetScrollPos
GetWindowTextW
GetWindowTextLengthW
DispatchMessageW
PeekMessageW
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
EnumChildWindows
RegisterClipboardFormatW
LockWindowUpdate
SetClassLongPtrW
SetRect
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
GetIconInfo
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetMenuDefaultItem
HideCaret
InvertRect
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
CharUpperBuffW
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetComboBoxInfo
GetDoubleClickTime
CreateMenu
GetClassInfoExW
CreateWindowExW
IsMenu
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetTimer
DrawStateW
GetDlgItem
GetFocus
GetKeyState
GetMenu
DestroyCursor
GetWindowRgn
TrackPopupMenuEx

gdi32

SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreateFontW
GetCharWidthW
StretchDIBits
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesExW
CreateDIBitmap
EnumFontFamiliesW
SetBkMode
GetDIBits
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetTextColor
GetBkColor
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
LPtoDP
Rectangle
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetTextFaceW
SetPixelV
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteDC
SetTextColor
CreateSolidBrush
DeleteObject
GetObjectW
GetDeviceCaps
CopyMetaFileW
CreateDCW
SetBkColor
CreateRectRgnIndirect
PatBlt
GetTextCharsetInfo
CreateBitmap

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

CheckTokenMembership
FreeSid
AllocateAndInitializeSid
GetUserNameW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW

shell32

Shell_NotifyIconW
SHFormatDrive
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
ShellExecuteExW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Destroy
ImageList_GetIcon
ImageList_Draw
ImageList_GetImageInfo
ImageList_SetBkColor
_TrackMouseEvent
ImageList_GetIconSize
InitMUILanguage
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
StrFormatKBSizeW
PathStripToRootW
PathIsUNCW

uxtheme

GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText

ole32

CoLockObjectExternal
CreateILockBytesOnHGlobal
RegisterDragDrop
StgOpenStorageOnILockBytes
OleLockRunning
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateStreamOnHGlobal
CoDisconnectObject
CLSIDFromString
CoInitialize
CoCreateGuid
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoUninitialize
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
StgCreateDocfileOnILockBytes
CoSetProxyBlanket
CoInitializeSecurity
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdiplusStartup
GdipSetPixelOffsetMode
GdipCreateImageAttributes
GdipSetImageAttributesWrapMode
GdipSetCompositingMode
GdipDrawImageRectRectI
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectI

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces

winhttp

WinHttpQueryDataAvailable
WinHttpCrackUrl
WinHttpConnect
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpWriteData
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReceiveResponse

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 846KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

013b669d68fe7d55dbf3678490be4179

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

version

setupapi

winhttp

iphlpapi

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 846KB - Virtual size: 846KB

.data Size: 35KB - Virtual size: 87KB

.pdata Size: 112KB - Virtual size: 111KB

.gfids Size: 108KB - Virtual size: 108KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 101B

.rsrc Size: 2.1MB - Virtual size: 2.1MB

.reloc Size: 75KB - Virtual size: 74KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 846KB - Virtual size: 846KB

.data
Size: 35KB - Virtual size: 87KB

.pdata
Size: 112KB - Virtual size: 111KB

.gfids
Size: 108KB - Virtual size: 108KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 101B

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

.reloc
Size: 75KB - Virtual size: 74KB