35a03493eefec728268679290ba6ad1ef56e9292b6b0ba03a81c3e779e27d35a

Sharing

Copy URL Twitter E-mail

General

Target

35a03493eefec728268679290ba6ad1ef56e9292b6b0ba03a81c3e779e27d35a
Size

2.4MB
MD5

b77c4956b3c6602a91374da97c7d9704
SHA1

607474e0d0c8126aa7568b57cf147641ffae7ad1
SHA256

35a03493eefec728268679290ba6ad1ef56e9292b6b0ba03a81c3e779e27d35a
SHA512

304898d3f0375e8669299aa932685a483a4653a1bd7f6cd2e0d88883c7da2ea3116112fffac91ad735c0cc008d32afe2622bfabf40e6a5d64b86c3d840f3079b
SSDEEP

24576:5xTq3J79Wx9EfhtD3gcJAYKFAFyGSN4bhE6uV7viyqmpTRyVfMKbbr0z7WE:5xTq3J7uCgZuh9yzKHrkq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35a03493eefec728268679290ba6ad1ef56e9292b6b0ba03a81c3e779e27d35a

Files

35a03493eefec728268679290ba6ad1ef56e9292b6b0ba03a81c3e779e27d35a
.exe windows:5 windows x86 arch:x86

baa32c23ecc1ae6b7b08e824da7fff5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\03_VC_Study\03_ECTools2Svn_S\05_Z03_EC_TOOL_HHZN_POWER_TOOL++\_DbgOut\HHZN_PowerTool.pdb

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetVolumeInformationA
GetModuleFileNameA
GetPrivateProfileStringA
LocalFree
FormatMessageA
GetLastError
FindResourceA
SizeofResource
LockResource
LoadResource
WideCharToMultiByte
CreateMutexA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FileTimeToLocalFileTime
OpenEventA
SetEnvironmentVariableA
CompareStringW
CreateProcessA
GetExitCodeProcess
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetProcessHeap
GetStringTypeW
lstrlenA
GlobalSize
CopyFileA
lstrlenW
MulDiv
MultiByteToWideChar
SetLastError
EnumResourceLanguagesA
ConvertDefaultLocale
GetLocaleInfoA
GetCurrentThreadId
GetCurrentThread
lstrcmpA
GlobalDeleteAtom
FreeLibrary
InterlockedExchange
CompareStringA
CloseHandle
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
GlobalAddAtomA
GetCurrentProcessId
FreeResource
GetPrivateProfileIntA
SetThreadPriority
GetThreadPriority
ResumeThread
GetVersionExA
GlobalFindAtomA
GlobalGetAtomNameA
lstrcmpW
InterlockedDecrement
InterlockedIncrement
SetErrorMode
GetAtomNameA
GetModuleHandleW
GetModuleFileNameW
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
FileTimeToSystemTime
SystemTimeToFileTime
GetThreadLocale
GetCurrentDirectoryA
GlobalFlags
VirtualProtect
GetProfileIntA
GetHandleInformation
DuplicateHandle
CreateFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetStringTypeA
GetFullPathNameA
GetStringTypeExA
lstrcmpiA
GetShortPathNameA
GetCPInfo
GetOEMCP
GetFileAttributesA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
FindResourceExA
GetFileSizeEx
LocalFileTimeToFileTime
SetFileAttributesA
GetTickCount
RtlUnwind
Sleep
ExitProcess
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
CreateThread
ExitThread
DebugBreak
GetStdHandle
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
IsDebuggerPresent
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetHandleCount
GetConsoleCP
GetConsoleMode
GetACP
IsValidCodePage
FatalAppExitA
SetConsoleCtrlHandler
LoadLibraryW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
VirtualFree
HeapAlloc
HeapSize
WritePrivateProfileStringA

user32

GetSystemMetrics
GetMenuItemID
InsertMenuA
AppendMenuA
MsgWaitForMultipleObjects
ReuseDDElParam
TranslateAcceleratorA
DestroyIcon
CharUpperA
UnpackDDElParam
GetMenuBarInfo
SetRectEmpty
GetAsyncKeyState
WaitMessage
ReleaseCapture
DestroyMenu
LoadAcceleratorsA
ShowWindow
MoveWindow
SetWindowTextA
GetDialogBaseUnits
GetKeyNameTextA
MapVirtualKeyA
CharNextA
CopyAcceleratorTableA
MessageBeep
IsDialogMessageA
ScrollWindowEx
UnregisterClassA
RegisterClipboardFormatA
InSendMessage
IsClipboardFormatAvailable
IsRectEmpty
GetClipboardFormatNameA
IsWindowUnicode
GetMessageW
DispatchMessageW
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemCount
IsMenu
RemoveMenu
PostQuitMessage
MapDialogRect
IsWindow
SendMessageA
PostMessageA
TabbedTextOutA
GetFocus
SetMenuItemBitmaps
LoadBitmapA
GetMenuCheckMarkDimensions
DispatchMessageA
TranslateMessage
GetMessageA
ValidateRect
SetWindowsHookExA
GetCursorPos
PeekMessageA
CallNextHookEx
GetKeyState
SetCursor
GetWindowThreadProcessId
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowLongA
MessageBoxA
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
EndDialog
GetSysColorBrush
WindowFromDC
ExcludeUpdateRgn
FillRect
FrameRect
InvertRect
DrawIcon
DrawStateA
DrawEdge
DrawFrameControl
DrawFocusRect
DrawTextA
DrawTextExA
GetTabbedTextExtentA
GrayStringA
ScrollDC
CreateMenu
CreatePopupMenu
DeleteMenu
CheckMenuItem
EnableMenuItem
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemInfoA
SetMenuItemInfoA
InsertMenuItemA
ModifyMenuA
LoadMenuA
LoadMenuIndirectA
SetMenuContextHelpId
GetMenuContextHelpId
CheckMenuRadioItem
SetWindowContextHelpId
GetWindow
SetWindowPos
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
GetSysColor
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
OpenIcon
CloseWindow
LoadIconA
LoadCursorA
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
IsChild
GetTopWindow
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
GetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect

gdi32

OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
ModifyWorldTransform
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
GetPath
GetMiterLimit
FlattenPath
FillPath
CloseFigure
BeginPath
AbortPath
GetCharWidthFloatA
GetCharABCWidthsFloatA
ExtEscape
DrawEscape
PolyBezier
GetCurrentObject
GetColorAdjustment
PolyPolyline
GetArcDirection
AngleArc
SetPixelV
PlgBlt
MaskBlt
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
GetGlyphOutlineA
GetKerningPairsA
GetFontData
GetCharABCWidthsA
GetOutlineTextMetricsA
ResetDCA
GetBoundsRect
SetBoundsRect
Escape
GetAspectRatioFilterEx
GetCharacterPlacementA
GetFontLanguageInfo
GetCharWidthA
GetTextCharacterExtra
GetTextMetricsA
GetTextFaceA
GetTextAlign
GetTextExtentPoint32A
TextOutA
ExtFloodFill
FloodFill
SetPixel
GetPixel
StretchBlt
BitBlt
PatBlt
RoundRect
Rectangle
PolyPolygon
Polygon
Pie
Ellipse
Chord
Polyline
Arc
GetCurrentPositionEx
RectVisible
ScaleWindowExtEx
SetViewportExtEx
InvertRgn
FrameRgn
FillRgn
LPtoDP
DPtoLP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetWorldTransform
GetGraphicsMode
GetMapMode
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
UpdateColors
RealizePalette
GetNearestColor
SelectObject
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
CreateCompatibleDC
CreateICA
RectInRegion
PtInRegion
GetRgnBox
OffsetRgn
EqualRgn
CombineRgn
SetRectRgn
GetRegionData
ExtCreateRegion
PathToRegion
CreateRoundRectRgn
CreatePolyPolygonRgn
CreatePolygonRgn
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateRectRgnIndirect
CreateRectRgn
ResizePalette
GetNearestPaletteIndex
AnimatePalette
SetPaletteEntries
GetPaletteEntries
CreateHalftonePalette
CreatePalette
CreateDiscardableBitmap
CreateCompatibleBitmap
GetBitmapDimensionEx
SetBitmapDimensionEx
GetBitmapBits
SetBitmapBits
CreateBitmapIndirect
CreateFontA
CreateFontIndirectA
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBrushIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePenIndirect
CreatePen
GetObjectType
UnrealizeObject
GetStockObject
GetObjectA
CreateBitmap
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
GetDeviceCaps
CreateDCA
CopyMetaFileA
DeleteObject
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
StretchDIBits
EnumFontFamiliesExA
DeleteMetaFile
PaintRgn
ScaleViewportExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PtVisible
EndPath
PolyBezierTo

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA

advapi32

RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
OpenThreadToken
RegQueryValueA
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RevertToSelf
SetThreadToken

shell32

SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA
DragAcceptFiles

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA
PathStripToRootA

oledlg

ord3
ord7
ord6
ord5
ord9
ord4
ord8

ole32

OleRegGetMiscStatus
OleRegEnumVerbs
DoDragDrop
OleSetMenuDescriptor
OleGetClipboard
OleQueryLinkFromData
OleQueryCreateFromData
OleIsRunning
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
CreateStreamOnHGlobal
GetClassFile
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
OleFlushClipboard
OleSetClipboard
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoUninitialize
CoInitializeEx
CoCreateInstance
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
OleDestroyMenuDescriptor
CreateOleAdviseHolder
CreateDataAdviseHolder
OleTranslateAccelerator
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
IsAccelerator
GetRunningObjectTable
CoLockObjectExternal
OleIsCurrentClipboard

oleaut32

SysAllocStringLen
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
DosDateTimeToVariantTime
VarCyFromStr
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SafeArrayGetElemsize
SafeArrayGetDim
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SysFreeString

Sections

.textbss
Size: - Virtual size: 915KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

baa32c23ecc1ae6b7b08e824da7fff5e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.textbss Size: - Virtual size: 915KB

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 317KB - Virtual size: 316KB

.data Size: 20KB - Virtual size: 42KB

.idata Size: 23KB - Virtual size: 23KB

.didat Size: 1024B - Virtual size: 793B

.rsrc Size: 50KB - Virtual size: 50KB

.reloc Size: 100KB - Virtual size: 99KB

.textbss
Size: - Virtual size: 915KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 317KB - Virtual size: 316KB

.data
Size: 20KB - Virtual size: 42KB

.idata
Size: 23KB - Virtual size: 23KB

.didat
Size: 1024B - Virtual size: 793B

.rsrc
Size: 50KB - Virtual size: 50KB

.reloc
Size: 100KB - Virtual size: 99KB