829386ff6c94e848972df16cb95f9a7d2705137f87d16124ffc50269a35fefd3

Sharing

Copy URL Twitter E-mail

General

Target

829386ff6c94e848972df16cb95f9a7d2705137f87d16124ffc50269a35fefd3
Size

2.5MB
MD5

7ac506940235ca971ba6dbdcce43ac16
SHA1

25b95cf6e98cdc49072e9e6ae07bd378012f568d
SHA256

829386ff6c94e848972df16cb95f9a7d2705137f87d16124ffc50269a35fefd3
SHA512

5766154c01df5c3f6963c81a43bd4deb7c4f675eda2106297e1f9b0923551e8879ee822d981974a5b16644e977e3e72508496c0c175090dfcbc3707da6995a30
SSDEEP

49152:X9yXVv5X8LKul9POJ793VrSd+41wVkTKsIgK//9T6oS8SjW1tlnsWhqnyvh5LiO4:E//593pSddwAKsIgq9T6oS8SjhWnvh5y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
829386ff6c94e848972df16cb95f9a7d2705137f87d16124ffc50269a35fefd3

Files

829386ff6c94e848972df16cb95f9a7d2705137f87d16124ffc50269a35fefd3
.exe windows:5 windows x86 arch:x86

9aa2643437d89349116a3d397585c074

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Jenkins\workspace\GA_12.1_Fnet_plugin\Starship\fxnet_release_v11\plugin_fxnet\DesktopAd\Release\FoxitDesktopAd.pdb

Imports

gdiplus

GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdiplusShutdown
GdipGetImageWidth
GdipCreateFromHDC
GdipDisposeImage
GdipAlloc
GdipLoadImageFromFileICM
GdipDrawImageRectI
GdipDeleteGraphics
GdipGetImageHeight
GdipFree
GdipLoadImageFromStream
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImageI

kernel32

DuplicateHandle
GetVolumeInformationW
GlobalFlags
SetErrorMode
GetTempFileNameW
GetWindowsDirectoryW
GetNumberFormatW
GetProfileIntW
SearchPathW
VirtualProtect
GetUserDefaultLCID
FindResourceExW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
ExitProcess
GetFileType
GetConsoleCP
GetConsoleMode
ExitThread
RtlUnwind
RaiseException
SetStdHandle
HeapQueryInformation
VirtualAlloc
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
WriteConsoleW
LCMapStringW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
GetFileTime
GetFileSizeEx
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
lstrcpyW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
LocalAlloc
InitializeCriticalSectionAndSpinCount
ActivateActCtx
DeactivateActCtx
FileTimeToLocalFileTime
CopyFileW
FindResourceW
LoadResource
GetModuleHandleW
SizeofResource
GetProcAddress
LockResource
GetLastError
CreateMutexW
FreeLibrary
GetCurrentProcess
GlobalLock
OpenProcess
GlobalAlloc
GetSystemDirectoryW
VirtualFreeEx
LoadLibraryW
Sleep
ReadProcessMemory
GlobalUnlock
VirtualAllocEx
CloseHandle
WriteProcessMemory
FreeResource
WritePrivateProfileStringW
GetLocalTime
GlobalSize
MulDiv
SetLastError
FileTimeToSystemTime
DeleteFileW
GetCurrentDirectoryW
GetModuleFileNameW
CreateFileW
LocalFree
WaitForSingleObject
WideCharToMultiByte
lstrlenW
GetTickCount
FindFirstFileW
CreateDirectoryW
GetVersionExW
GetTimeZoneInformation
MultiByteToWideChar
GlobalFree
FindClose
GetSystemInfo
SetFileAttributesW
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetFileSize
HeapCompact
SetFilePointer
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
InterlockedCompareExchange
UnlockFile
LockFile
OutputDebugStringW
UnlockFileEx
GetProcessHeap
lstrcmpiW
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
InitializeCriticalSection
FormatMessageW
HeapDestroy
LeaveCriticalSection
GetFileAttributesA
HeapCreate
HeapValidate
GetFileAttributesW
ReadFile
FlushFileBuffers
GetTempPathW
HeapSize
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetFileAttributesExW
DeleteCriticalSection
OutputDebugStringA
GetVersionExA
GetCurrentProcessId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
SetEvent
CreateEventW
GetPrivateProfileStringW
GetPrivateProfileIntW
ReleaseMutex
TerminateThread
SetThreadPriority
SuspendThread
ResumeThread
CreateThread

user32

EmptyClipboard
CloseClipboard
SetClipboardData
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadImageW
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongW
DestroyAcceleratorTable
SetParent
UnregisterClassW
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
CharNextW
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
EnableScrollBar
UnionRect
IsRectEmpty
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
SetWindowRgn
LoadMenuW
IntersectRect
OffsetRect
DestroyIcon
WaitMessage
ReleaseCapture
SetCapture
KillTimer
SetTimer
DeleteMenu
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
RealChildWindowFromPoint
CharUpperW
LoadCursorW
GetSysColorBrush
ShowWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
InvalidateRect
DrawStateW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
RegisterClipboardFormatW
CreateDialogIndirectParamW
EndDialog
GetMessageW
TranslateMessage
GetActiveWindow
SetWindowContextHelpId
MapDialogRect
ClientToScreen
ShowOwnedPopups
SetCursor
PostQuitMessage
WindowFromPoint
IsWindowEnabled
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
FrameRect
CopyIcon
CharUpperBuffW
PostThreadMessageW
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetDoubleClickTime
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetUpdateRect
IsClipboardFormatAvailable
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
GetSubMenu
RemoveMenu
GetDesktopWindow
MoveWindow
UpdateLayeredWindow
GetSystemMenu
ScreenToClient
GetWindowRect
IsIconic
PostMessageW
SetForegroundWindow
DrawIcon
FindWindowW
GetClientRect
GetDC
GetForegroundWindow
LoadIconW
GetWindowLongW
AppendMenuW
SetWindowLongW
GetCursorPos
FindWindowExW
GetSystemMetrics
SendMessageW
EnableWindow
GetWindowThreadProcessId
GetClassInfoW
SetWindowPos
OpenClipboard
GetNextDlgTabItem

gdi32

DeleteObject
SelectObject
CreateCompatibleDC
DPtoLP
DeleteDC
SetPixelV
GetTextFaceW
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
SetPaletteEntries
ExtFloodFill
EnumFontFamiliesExW
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
CreateCompatibleBitmap
PatBlt
GetMapMode
CombineRgn
SetRectRgn
GetRgnBox
GetTextColor
GetBkColor
CreateDIBSection
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
CreateRectRgnIndirect
CreateDIBitmap
GetTextExtentPoint32W
CreateFontIndirectW
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
SelectPalette
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
CreateBitmap
CreateDCW
CopyMetaFileW
GetDeviceCaps

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

DragFinish
SHGetSpecialFolderPathW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
DragQueryFileW
ShellExecuteW
SHGetFileInfoW

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFileExistsW
PathIsDirectoryW
UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW

ole32

CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateGuid
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoInitializeEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
VariantCopy
SysAllocString
OleCreateFontIndirect
SysFreeString
SafeArrayDestroy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

oledlg

OleUIBusyW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

iphlpapi

GetAdaptersInfo

wininet

InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetGetLastResponseInfoW
InternetSetOptionExW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetCloseHandle
HttpOpenRequestW
HttpAddRequestHeadersW
InternetSetStatusCallbackW
HttpSendRequestW
InternetConnectW
InternetOpenW
InternetQueryDataAvailable

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Exports

Exports

OPENSSL_Applink

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 259KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9aa2643437d89349116a3d397585c074

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

version

iphlpapi

wininet

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 363KB - Virtual size: 362KB

.data Size: 44KB - Virtual size: 76KB

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 259KB - Virtual size: 260KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 363KB - Virtual size: 362KB

.data
Size: 44KB - Virtual size: 76KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 259KB - Virtual size: 260KB