9c648ab4389cf5afade09f366c82ef29c7d6639f92db7b74f228cbf5a3f24d68

Sharing

Copy URL Twitter E-mail

General

Target

9c648ab4389cf5afade09f366c82ef29c7d6639f92db7b74f228cbf5a3f24d68
Size

3.9MB
MD5

8db2e45a5b2f4d71e751e36fd5f75f8a
SHA1

13d2c99ac23327e5eec0b6702dda492791d9f07a
SHA256

9c648ab4389cf5afade09f366c82ef29c7d6639f92db7b74f228cbf5a3f24d68
SHA512

6dce65c6aa92910ede6d2c34d022fcccf772189e868823fbef06629629e9752c6fbd1b500e36a0a884dd387ac1d3ef2b9c9ee4343bcb0ac82465b3ec6fa6500b
SSDEEP

98304:KwoDZ2snstO5Bn/IJpIoj9ghi1RebM390bYVJikt:BUEOojD390bYVxt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c648ab4389cf5afade09f366c82ef29c7d6639f92db7b74f228cbf5a3f24d68

Files

9c648ab4389cf5afade09f366c82ef29c7d6639f92db7b74f228cbf5a3f24d68
.exe windows:5 windows x86 arch:x86

2da425f805edfc4c279b6d87b88744c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\TECH64\work\COMTransmit\COMTransmit_230302\Release\COMTransmit.pdb

Imports

kernel32

GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetCPInfo
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
GetFileType
SetStdHandle
HeapReAlloc
RaiseException
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
HeapAlloc
HeapFree
GetStartupInfoW
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
SetErrorMode
SystemTimeToFileTime
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GlobalFlags
GetCurrentDirectoryW
GlobalReAlloc
ReleaseMutex
CreateMutexW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
GetModuleHandleA
lstrlenA
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
lstrcpyW
GetPrivateProfileIntW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
CopyFileW
MulDiv
InterlockedDecrement
GetCurrentProcessId
GlobalGetAtomNameW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
SetLastError
FreeLibrary
lstrcmpW
GetProcAddress
GetVersionExA
GlobalFree
FreeResource
GetCommModemStatus
ClearCommError
WaitCommEvent
SetCommMask
GetCommProperties
DeleteCriticalSection
InitializeCriticalSection
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
QueryPerformanceCounter
QueryPerformanceFrequency
SetFilePointer
OutputDebugStringW
GetModuleHandleW
WritePrivateProfileStringW
GetPrivateProfileStringW
ResetEvent
WaitForMultipleObjects
GetCommTimeouts
ReadFile
PurgeComm
SetCommState
GetCommState
SetupComm
SetCommTimeouts
CreateFileW
ExitProcess
GetUserDefaultUILanguage
EscapeCommFunction
GetOverlappedResult
WriteFile
Sleep
CreateEventW
LocalFree
FormatMessageW
GetTickCount
SetEvent
SetThreadPriority
GetLocalTime
lstrlenW
GetLastError
GetModuleFileNameW
TerminateThread
WaitForSingleObject
SuspendThread
ResumeThread
LoadLibraryA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
SetThreadUILanguage
SetThreadLocale
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
GetSystemDefaultLangID

user32

TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetWindowThreadProcessId
SetCursor
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
SetParent
SetWindowRgn
IsZoomed
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemInt
GetDlgItemInt
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
IsWindowVisible
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
GetKeyboardLayout
CopyRect
GetKeyNameTextW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
LoadMenuW
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetDlgItemTextW
GetDlgItemTextW
GetDlgItem
IsDlgButtonChecked
MessageBoxW
BringWindowToTop
OffsetRect
SetRectEmpty
ReleaseDC
GetDC
SetScrollPos
GetParent
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
EqualRect
IntersectRect
GetFocus
GetWindow
MessageBeep
ReleaseCapture
ShowScrollBar
EnableScrollBar
PtInRect
CreateCaret
ShowCaret
SetCapture
ToUnicodeEx
CopyAcceleratorTableW
UnregisterClassW
DragDetect
RedrawWindow
EnableWindow
DrawFrameControl
SendMessageW
GetClientRect
GetDoubleClickTime
SetCaretPos
SetWindowPos
GetScrollInfo
DestroyCaret
DrawTextW
GetScrollPos
FillRect
GetSysColor
RegisterClipboardFormatW
SendDlgItemMessageW
FindWindowW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetKeyState
InvalidateRect
SetTimer
MapVirtualKeyW
RemoveMenu
InsertMenuW
AppendMenuW
GetMenuStringW
PostQuitMessage
SystemParametersInfoW
CharUpperW
MapDialogRect
SetWindowContextHelpId
InflateRect
GetCursorPos
UnregisterDeviceNotification
KillTimer
DestroyIcon
ClientToScreen
IsWindow
RegisterDeviceNotificationW
LoadImageW
GetWindowRect
PostMessageW
UpdateWindow
wsprintfW
GetWindowRgn
CreateMenu
MapVirtualKeyExW
IsCharLowerW
SubtractRect
GetUpdateRect
GetMenuDefaultItem
SetMenuDefaultItem
GetNextDlgGroupItem
InvalidateRgn
CharNextW
EnumChildWindows
CreateAcceleratorTableW
GetMenu
GetKeyboardState
DestroyCursor
SetRect
CharUpperBuffW
LockWindowUpdate
UpdateLayeredWindow
UnionRect
DrawFocusRect
DrawEdge
DrawIconEx
FrameRect
SetCursorPos
CopyIcon
DrawStateW
IsMenu
GetMenuItemInfoW
GetSysColorBrush
GetSystemMenu
DeleteMenu
DestroyAcceleratorTable
SetClassLongW
GetAsyncKeyState
NotifyWinEvent
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
DrawIcon
IsRectEmpty
CopyImage
GetIconInfo
WindowFromPoint
ShowOwnedPopups
GetMessageW
ValidateRect
TranslateMessage
WaitMessage
CallWindowProcW
PostThreadMessageW

gdi32

SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
GetObjectType
Ellipse
CreateHatchBrush
SetRectRgn
CombineRgn
GetMapMode
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
SetPixel
CreateDIBSection
CreatePolygonRgn
GetBkColor
GetTextColor
Polyline
Polygon
RoundRect
OffsetRgn
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
Rectangle
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
DPtoLP
LPtoDP
CreateEllipticRgn
CreateRoundRectRgn
CopyMetaFileW
GetDeviceCaps
PatBlt
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetStockObject
TextOutW
GetTextExtentPoint32W
GetCharWidthW
SetBoundsRect
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
CreateFontW
BitBlt
CreateCompatibleDC
DeleteObject
GetTextMetricsW
CreateFontIndirectW
CreatePen
GetObjectW

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

GetFileSecurityW
RegCloseKey
RegOpenKeyExW
RegEnumValueW
RegSetValueW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegEnumKeyExW
RegCreateKeyW
RegQueryValueExW
SetFileSecurityW
RegDeleteValueW
RegSetValueExW

shell32

SHGetPathFromIDListW
ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAppBarMessage
ExtractIconW
SHBrowseForFolderW
DragAcceptFiles

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Destroy
ImageList_DrawEx

shlwapi

PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleLockRunning
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDuplicateData
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoGetClassObject
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

SysStringLen
SysFreeString
SysAllocString
VariantCopy
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
VariantChangeType
SysAllocStringLen
VariantClear

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassImageIndex
SetupDiGetClassDescriptionW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiDestroyClassImageList
CM_Get_Parent
CM_Get_Device_IDW
SetupDiOpenDevRegKey
SetupDiGetClassImageList

winmm

PlaySoundW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 345KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 1024.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 933KB - Virtual size: 932KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2da425f805edfc4c279b6d87b88744c2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

setupapi

winmm

imm32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 345KB - Virtual size: 345KB

.data Size: 26KB - Virtual size: 1024.4MB

.rsrc Size: 2.7MB - Virtual size: 2.7MB

.reloc Size: 933KB - Virtual size: 932KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 345KB - Virtual size: 345KB

.data
Size: 26KB - Virtual size: 1024.4MB

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

.reloc
Size: 933KB - Virtual size: 932KB