5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a

Sharing

Copy URL

Twitter E-mail

General

Target

5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a
Size

604KB
MD5

69650a5c2bce34d556964bb5f83686bc
SHA1

39dc1d54245b5663f06a4dd233bd573312832a63
SHA256

5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a
SHA512

6ddb63f4e71f064d6bb4026037062792d1650b61652135ccf4a75a009354d646433cff07d1217b6d1772a6a2b7ca66e1c7ef1788f08746d0a86399de6dc9d1da
SSDEEP

6144:x49BR+yOy5Z5XRGgX7Wwc74lwC3+W/6CbqK/5Kq45GVd5eJljeW9sA7h:+9BHXRGgrxc74lwCOW/ruQp45pljeY7h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a

Files

5b4b0c40503d25bf7d8398262ac7f36c7e3ae36f3bc62b393350a4a9afb3f87a
.exe windows:4 windows x86 arch:x86

0bc5316256476323b2ed871c0136d6bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Build\workspace\PDG-OSCE16.0-PLM2.3-130.52-debug\PLM\src\Client\PccNT\AoSUIManager\Release\AosUImanager.pdb

Imports

ws2_32

shutdown
send
WSAStartup
recv
accept
WSAGetLastError
listen
bind
htons
closesocket
WSACleanup
getnameinfo
getaddrinfo
socket

comctl32

InitCommonControlsEx

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFileExistsW
PathAppendW
PathIsUNCW
PathFindFileNameW

kernel32

TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
ExitThread
CreateThread
InitializeCriticalSection
GetDateFormatA
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
Sleep
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
SetEnvironmentVariableA
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FileTimeToSystemTime
GlobalFlags
GetThreadLocale
InterlockedIncrement
WritePrivateProfileStringW
ResumeThread
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
InterlockedDecrement
GlobalFree
GlobalAlloc
lstrlenW
GetModuleFileNameW
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
lstrcmpW
GetModuleHandleW
GetVersionExA
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
FormatMessageW
LocalFree
GetWindowsDirectoryW
GetCurrentThreadId
GetCurrentProcessId
lstrlenA
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
WriteFile
CreateFileW
DeleteFileW
CreateProcessW
MultiByteToWideChar
GetStartupInfoW
WideCharToMultiByte
GetLastError
WaitForMultipleObjects
CreateEventW
CloseHandle
WaitForSingleObject
GetTickCount
GetTempPathW
GetPrivateProfileIntW
InterlockedCompareExchange
SetNamedPipeHandleState
WaitNamedPipeW
GetTimeFormatA

user32

GetSysColorBrush
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
EndDialog
GetMessageW
TranslateMessage
GetActiveWindow
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowTextW
IsDialogMessageW
GetMenuState
GetWindowThreadProcessId
IsWindowEnabled
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
UnregisterClassA
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
GetParent
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
DestroyMenu
CharNextW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindow
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
TabbedTextOutW
DrawIcon
GetSystemMetrics
GetWindowPlacement
IsIconic
LoadIconW
UnregisterClassW
GetClassInfoW
MoveWindow
ShowWindow
FindWindowW
LoadStringW
PostMessageW
GetClientRect
SendMessageW
InvalidateRect
PtInRect
GetCursorPos
EnableWindow
LoadBitmapW
GetWindowRect
ReleaseDC
DrawTextW
GetDC
KillTimer
SetTimer
ReleaseCapture
LoadCursorW
SetCapture
GetDesktopWindow
CreateDialogIndirectParamW
SetActiveWindow
GetNextDlgTabItem
GetPropW

gdi32

SelectObject
DeleteDC
CreateSolidBrush
SaveDC
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateBitmap
GetStockObject
CreateCompatibleDC
BitBlt
PtVisible
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetMapMode
GetRgnBox
GetDeviceCaps
CreateFontIndirectW
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
GetObjectW
GetWindowExtEx
GetViewportExtEx
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
RectVisible

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bc5316256476323b2ed871c0136d6bf

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

comctl32

advapi32

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

oledlg

ole32

oleaut32

Sections

.text Size: 296KB - Virtual size: 295KB

.rdata Size: 80KB - Virtual size: 77KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 148KB - Virtual size: 144KB

.reloc Size: 40KB - Virtual size: 38KB

.text
Size: 296KB - Virtual size: 295KB

.rdata
Size: 80KB - Virtual size: 77KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 148KB - Virtual size: 144KB

.reloc
Size: 40KB - Virtual size: 38KB