8304bb7b9123933a8440c82b0c2b028aa391a43bffe94419b6a19ca9b397c999

Sharing

Copy URL Twitter E-mail

General

Target

8304bb7b9123933a8440c82b0c2b028aa391a43bffe94419b6a19ca9b397c999
Size

2.3MB
MD5

8197db37395de8af70da1ad263173468
SHA1

5e1da6e9ccad8e1687e66976d9d797c7562078db
SHA256

8304bb7b9123933a8440c82b0c2b028aa391a43bffe94419b6a19ca9b397c999
SHA512

922e71632e93c5dfce54db32605a6d8f37c957d117741ab8b8ed6486390e3de06c808e0f144f5ae5bc2aa5a65d7a5ed667afd2ec022f902402c29a34d4ac050f
SSDEEP

49152:Z00e2mOyKP9zrWZoTT6JBussai47n/p8pcQZZAawW9:c2mOyKPFWZzJbFi47nrkAk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8304bb7b9123933a8440c82b0c2b028aa391a43bffe94419b6a19ca9b397c999

Files

8304bb7b9123933a8440c82b0c2b028aa391a43bffe94419b6a19ca9b397c999
.exe windows:5 windows x86 arch:x86

f39eca6ac76c2ff9e06eaf60dd43bc03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\work\workspace_mw\prj_dm2309\Bin_normal\SelfMPTool.pdb

Imports

dbghelp

MiniDumpWriteDump

kernel32

FindResourceExW
GetTempFileNameW
GetDiskFreeSpaceW
lstrlenA
GlobalFlags
SetErrorMode
GetStartupInfoW
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
DeleteFileA
RaiseException
RtlUnwind
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
ExitProcess
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
SetFileTime
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
LocalFileTimeToFileTime
GetFileAttributesExW
GetTickCount
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
CompareStringA
InterlockedExchange
GlobalGetAtomNameW
GetModuleHandleA
SetThreadPriority
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
GetThreadLocale
GetStringTypeExW
MoveFileW
SystemTimeToFileTime
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetLocaleInfoA
FindResourceA
GetVolumeInformationA
GetSystemDirectoryA
OutputDebugStringA
OutputDebugStringW
GetDriveTypeW
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
SetFileAttributesA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetModuleHandleW
GetVersionExA
FreeResource
GlobalLock
GlobalUnlock
lstrlenW
SetLastError
GetPrivateProfileStringA
OpenSemaphoreW
Beep
DeleteFileW
lstrcpynA
GetOverlappedResult
WriteFile
LocalFree
FormatMessageW
SuspendThread
ResumeThread
GetCommMask
WaitForMultipleObjects
ClearCommError
WaitCommEvent
PurgeComm
SetCommState
BuildCommDCBW
GetCommState
SetCommMask
SetCommTimeouts
CreateEventW
ResetEvent
SetEvent
LoadLibraryA
CreateDirectoryW
GetFileAttributesW
DeviceIoControl
GetWindowsDirectoryW
GetModuleFileNameW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetCurrentProcessId
IsDebuggerPresent
VirtualProtect
SetUnhandledExceptionFilter
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
GlobalAlloc
GlobalFree
InterlockedDecrement
InterlockedIncrement
GetCurrentProcess
GetPrivateProfileSectionW
GetLastError
ReadFile
GetFileSizeEx
CreateFileW
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentThreadId
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
GetLocaleInfoW
lstrcpynW
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetDiskFreeSpaceA
GetCPInfo
SetFilePointerEx

user32

SetCursor
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
ValidateRect
FillRect
MapDialogRect
GetAsyncKeyState
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
UnregisterClassW
MessageBeep
DefWindowProcW
GetMenu
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
ReuseDDElParam
UnpackDDElParam
IsRectEmpty
UnionRect
SetRect
WindowFromPoint
DrawIcon
SetWindowRgn
CreateDialogIndirectParamW
DestroyWindow
IsWindowEnabled
LoadCursorW
PostQuitMessage
RegisterClipboardFormatW
SetWindowContextHelpId
ShowOwnedPopups
CharNextW
RemovePropW
GetSysColorBrush
GetNextDlgTabItem
EndDialog
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
ScreenToClient
GetCursorPos
CharUpperA
DispatchMessageW
TranslateMessage
GetMessageW
GetSystemMetrics
ReleaseCapture
ClipCursor
SetCapture
EnumWindows
UpdateWindow
SetForegroundWindow
DeleteMenu
PostThreadMessageW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
DestroyIcon
MapWindowPoints
IsIconic
IsZoomed
GetWindowRect
GetMenuState
CheckMenuItem
ReleaseDC
ModifyMenuW
PostMessageW
LoadBitmapW
KillTimer
SetTimer
ClientToScreen
GetSubMenu
EnableMenuItem
LoadMenuW
GetFocus
InflateRect
MessageBoxW
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetDC
DrawFocusRect
CharUpperW
DrawTextW
DrawFrameControl
CopyRect
SetWindowLongW
CallWindowProcW
PtInRect
GetClientRect
GetWindowLongW
GetParent
CallWindowProcA
InvalidateRect
IsWindow
ShowWindow
GetClassNameW
GetDlgItem
IsWindowVisible
GetKeyState
EnumChildWindows
SendMessageW
GetSysColor
EnableWindow
GetTopWindow

gdi32

CreatePen
GetMapMode
DPtoLP
GetBkColor
GetCharWidthW
CreateFontW
CreateEllipticRgn
LPtoDP
Ellipse
EnumFontFamiliesExW
GetTextColor
GetRgnBox
SelectClipRgn
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
CreatePatternBrush
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
StretchDIBits
GetTextMetricsW
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
DeleteObject
CreateBitmap
GetClipBox
Rectangle
GetStockObject
StretchBlt
SelectObject
CreateFontIndirectW
GetDeviceCaps
GetObjectW
CreateRectRgnIndirect
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
ExtTextOutW
SetTextColor
SetBkColor

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

CloseServiceHandle
DeleteService
StartServiceW
CreateServiceA
ControlService
QueryServiceStatus
OpenServiceA
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueW
RegCloseKey
OpenSCManagerA

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
DragFinish
DragQueryFileW
ExtractIconW
ShellExecuteW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
PathFileExistsW

oledlg

OleUIBusyW

ole32

CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoRegisterMessageFilter
OleUninitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries

oleaut32

SysAllocString
VarDateFromStr
VariantTimeToSystemTime
VariantClear
VariantChangeType
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
SystemTimeToVariantTime
OleCreateFontIndirect
VariantCopy
SafeArrayDestroy

iphlpapi

GetAdaptersInfo

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
CM_Request_Device_EjectW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
CM_Get_Parent

uxtheme

IsAppThemed
DrawThemeBackground
CloseThemeData
OpenThemeData
GetThemePartSize

psapi

GetProcessMemoryInfo
GetPerformanceInfo

Sections

.text
Size: 625KB - Virtual size: 625KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f39eca6ac76c2ff9e06eaf60dd43bc03

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dbghelp

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

iphlpapi

setupapi

uxtheme

psapi

Sections

.text Size: 625KB - Virtual size: 625KB

.rdata Size: 173KB - Virtual size: 173KB

.data Size: 70KB - Virtual size: 87KB

.info Size: 512B - Virtual size: 512B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 625KB - Virtual size: 625KB

.rdata
Size: 173KB - Virtual size: 173KB

.data
Size: 70KB - Virtual size: 87KB

.info
Size: 512B - Virtual size: 512B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB