336822557f23d6bd376c1227270815ad69503a0133440438f3417bca3bf8a0d7

Sharing

Copy URL

Twitter E-mail

General

Target

336822557f23d6bd376c1227270815ad69503a0133440438f3417bca3bf8a0d7
Size

1.1MB
MD5

3f080af4ba965e6cdae36b31937ff4d0
SHA1

6b44cfea4372425cccbd8afc80cf8d28a8d95626
SHA256

336822557f23d6bd376c1227270815ad69503a0133440438f3417bca3bf8a0d7
SHA512

fa3b0b38762d9a211b973dd94664bc7287bf1d56c1144a5e8ea0d51b32ae7b876f3c930e4ea15a06b01177a6134f5ee500f4c7436fd34bddd5464db366017ab4
SSDEEP

24576:rceIg6y8Q3oOOhagepRuxdxxY13xE9YGvasXcG9ibtR:rcHgWQYOjgeDuxdxxYxxJGvasXc+ib3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
336822557f23d6bd376c1227270815ad69503a0133440438f3417bca3bf8a0d7

Files

336822557f23d6bd376c1227270815ad69503a0133440438f3417bca3bf8a0d7
.exe windows:6 windows x86 arch:x86

9d7826902a559dcee7a924b22e12af5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\HiView2\Release\HiView2.pdb

Imports

kernel32

GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
DecodePointer
WaitForSingleObject
HeapAlloc
HeapFree
GetStdHandle
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
HeapSetInformation
LoadLibraryW
FindClose
FindFirstFileW
DeleteFileW
GetLastError
SetFileAttributesW
GetFileAttributesW
CreateFileW
WriteFile
CreateDirectoryW
GetLocalTime
MulDiv
GetProcAddress
DeleteCriticalSection
ResetEvent
CreateThread
CloseHandle
SetEvent
OutputDebugStringW
FindFirstFileExW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
GetModuleHandleW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
CreateEventW
GetFileType
WriteConsoleW

user32

GetWindowRect
EndPaint
BeginPaint
ReleaseDC
InvalidateRect
ReleaseCapture
GetParent
SetRect
SetWindowLongW
SetCapture
LoadCursorW
GetCapture
RegisterClassExW
CreateWindowExW
SetWindowPos
GetDC
PostMessageW
DefWindowProcW
GetWindowLongW
PeekMessageW
DispatchMessageW
MsgWaitForMultipleObjects
PtInRect
KillTimer
GetClientRect
SetFocus
FrameRect
SetTimer
GetSystemMetrics
SendMessageW
FillRect
ShowScrollBar
SetScrollInfo
LoadBitmapW
GetMessageW
CreateDialogParamW
SetProcessDpiAwarenessContext
IsWindow
GetWindowTextW
TranslateMessage
LoadIconW
EnableNonClientDpiScaling
PostQuitMessage
UpdateWindow
DrawFocusRect
MessageBoxW
EndDialog
DialogBoxParamW
IsDialogMessageW
DestroyWindow
GetDlgItemTextW
SetDlgItemTextW
SetWindowTextW
ShowWindow
SendDlgItemMessageW
LoadImageW
EnableWindow
DeferWindowPos
BeginDeferWindowPos
GetDialogBaseUnits
EndDeferWindowPos
GetDlgItem

gdi32

Polygon
GetStockObject
TextOutW
GetObjectW
StretchDIBits
GetDeviceCaps
LineTo
CreatePen
SetDIBits
MoveToEx
SetStretchBltMode
CreateSolidBrush
CreateFontIndirectW
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetTextExtentExPointW
DeleteDC
SetTextColor
SetBkMode
SetBkColor
DeleteObject
ExtTextOutW

advapi32

RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
SHOpenFolderAndSelectItems

ole32

CoTaskMemFree
CreateBindCtx
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

VariantInit
VariantClear

mfplat

MFCreateMediaType
MFCreateSample
MFStartup
MFShutdown
MFCreateMemoryBuffer

mfreadwrite

MFCreateSinkWriterFromURL

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

winmm

timeGetTime

gdiplus

GdipSaveImageToFile
GdipDrawLineI
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageHeight
GdipImageRotateFlip
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromFileICM
GdipGetImageWidth
GdiplusStartup
GdiplusShutdown
GdipCreatePen1
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipSetSmoothingMode
GdipDrawArcI
GdipFree
GdipCreateFromHDC
GdipDeleteGraphics
GdipDeletePen
GdipCloneImage

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 719KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d7826902a559dcee7a924b22e12af5f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

mfplat

mfreadwrite

comctl32

msimg32

winmm

gdiplus

Sections

.text Size: 335KB - Virtual size: 335KB

.rdata Size: 78KB - Virtual size: 78KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 719KB - Virtual size: 719KB

.reloc Size: 23KB - Virtual size: 22KB

.text
Size: 335KB - Virtual size: 335KB

.rdata
Size: 78KB - Virtual size: 78KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 719KB - Virtual size: 719KB

.reloc
Size: 23KB - Virtual size: 22KB