b660f1dc30578ab5ae154025806532e20931aa7c307d9c2d10a2b2a87c154c63

Sharing

Copy URL Twitter E-mail

General

Target

b660f1dc30578ab5ae154025806532e20931aa7c307d9c2d10a2b2a87c154c63
Size

2.0MB
MD5

67a32fed9db9ce5270e7a2e3b309916b
SHA1

cbee32da9cf692db0e1dbdef482b6755701c2669
SHA256

b660f1dc30578ab5ae154025806532e20931aa7c307d9c2d10a2b2a87c154c63
SHA512

a82c4d20539e904e99d8072ed123c565eafc3fbd714eb5c9990b65b623b75a83cedd73bb3073e55f24dda7a677825449796cac47cd50aa0d0c4065e7b2283164
SSDEEP

49152:9k6IPNRzgaRsKRx5JoEqgfG1fyFCa/h36k2QQl4UxcXNI0U+jVTcKPSktfzM:9qTnFh+gfqFk1Ql4c6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b660f1dc30578ab5ae154025806532e20931aa7c307d9c2d10a2b2a87c154c63

Files

b660f1dc30578ab5ae154025806532e20931aa7c307d9c2d10a2b2a87c154c63
.exe windows:6 windows x86 arch:x86

f9a6d2fcbab657cba1076c5d66dc9aa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\biubiu\AppData\Local\Jenkins\.jenkins\workspace\electronBuildNew\build\update.pdb

Imports

libssl-1_1

OPENSSL_init_ssl
SSL_free
SSL_CTX_get_cert_store
SSL_get_peer_certificate
SSL_new
SSL_CTX_free
SSL_CTX_set_cert_store
SSL_get_error
SSL_shutdown
SSL_CTX_load_verify_locations
SSL_set_verify
SSL_read
SSL_pending
SSL_set_bio
SSL_ctrl
TLS_client_method
SSL_get_verify_result
SSL_write
SSL_CTX_new
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_certificate_file
SSL_connect

libcrypto-1_1

BIO_new_mem_buf
RSA_public_encrypt
RSA_size
BIO_free
PEM_read_bio_RSA_PUBKEY
BIO_s_file
OPENSSL_LH_strhash
X509_STORE_free
X509_NAME_get_text_by_NID
EVP_MD_CTX_new
d2i_X509
X509_STORE_add_cert
OPENSSL_sk_num
X509_get_subject_name
EVP_md5
EVP_sha256
EVP_DigestUpdate
GENERAL_NAMES_free
EVP_MD_CTX_free
EVP_DigestInit_ex
OPENSSL_sk_value
ASN1_STRING_get0_data
EVP_sha512
BIO_new_socket
X509_free
ASN1_STRING_length
X509_get_ext_d2i
EVP_DigestFinal_ex
BIO_new
BIO_ctrl
RSA_free

kernel32

GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
Sleep
GetLastError
SetEvent
CloseHandle
DeleteCriticalSection
CreateEventA
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
CreateDirectoryW
ReadFile
GetFileSizeEx
SetLastError
WriteFile
SetEndOfFile
CreateFileW
MultiByteToWideChar
SetFilePointerEx
WideCharToMultiByte
GetFileTime
GetPrivateProfileIntW
GetPrivateProfileStringW
FindClose
MoveFileExA
GetSystemDirectoryW
GetCurrentProcess
TerminateProcess
GetModuleHandleA
DeleteFileA
GetNativeSystemInfo
GetCurrentProcessId
GetModuleHandleW
GetStdHandle
InitializeCriticalSectionEx
RaiseException
DecodePointer
SetFilePointer
SetFileAttributesW
CreateFileA
DeleteFileW
MoveFileExW
GetFileSize
CopyFileW
GetTempFileNameW
MoveFileW
LoadLibraryExW
GetTickCount
LocalFree
GetFileType
GetFileAttributesW
GetLongPathNameW
GetACP
PostQueuedCompletionStatus
LoadResource
FindResourceW
VirtualQuery
TlsSetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
RtlUnwind
OutputDebugStringW
IsProcessorFeaturePresent
TlsGetValue
TlsFree
CreateEventW
ResetEvent
CreateIoCompletionPort
LocalFileTimeToFileTime
QueryPerformanceFrequency
SystemTimeToFileTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentDirectoryW
VerifyVersionInfoW
VerSetConditionMask
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GlobalSize
InitializeSListHead
GetEnvironmentVariableW
GetStartupInfoW
InitOnceComplete
InitOnceBeginInitialize
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
CreateThread
SizeofResource
LCMapStringEx
ExitThread
SetThreadPriority
GetCurrentThreadId
TerminateThread
TryEnterCriticalSection
IsWow64Process
EncodePointer
CompareStringEx
GetCPInfo
GetLocaleInfoEx
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteConsoleW
HeapSize
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetFileAttributesExW
SetStdHandle
FlushFileBuffers
HeapAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapReAlloc
HeapFree
ExitProcess
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetModuleHandleExW
FreeLibraryAndExitThread
IsDebuggerPresent

user32

IsIconic
SetWindowPos
SendMessageW
CallWindowProcW
SetPropW
GetPropW
GetDC
SetWindowTextW
InvalidateRect
IsWindowVisible
ScreenToClient
IntersectRect
IsRectEmpty
GetKeyState
GetCursorPos
GetFocus
SetCapture
ReleaseCapture
MonitorFromWindow
GetWindowLongW
BeginPaint
EndPaint
MoveWindow
IsWindow
SetWindowLongW
GetMonitorInfoW
RegisterClassW
LoadCursorW
ReleaseDC
DefWindowProcW
PtInRect
CharNextW
IsZoomed
MonitorFromPoint
GetWindowPlacement
MonitorFromRect
PostMessageW
DestroyWindow
CreateWindowExW
WaitMessage
RegisterClassExW
DispatchMessageW
SetTimer
PeekMessageW
UpdateLayeredWindow
GetUpdateRect
PostQuitMessage
UnregisterClassW
MsgWaitForMultipleObjectsEx
CallMsgFilterW
GetQueueStatus
TranslateMessage
GetWindowRect
ShowWindow
SetFocus
EnableWindow
GetClassInfoExW
GetWindow
GetSystemMetrics
OffsetRect
SetWindowRgn
MessageBoxW
SetForegroundWindow
InflateRect
ClientToScreen
UnionRect
SetCursor
GetSysColor
GetAsyncKeyState
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
FindWindowW
GetDesktopWindow
MapWindowPoints
GetParent
DrawTextW
KillTimer
GetClientRect
LoadImageW

advapi32

RegQueryValueExW
GetSecurityInfo
RegCloseKey
RegOpenKeyExW

shell32

SHGetFolderPathW
SHFileOperationW
ShellExecuteW

ole32

CoCreateInstance
CoCreateGuid
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

SafeArrayCreateVector
SafeArrayPutElement
SysAllocString
SafeArrayGetElemsize
SafeArrayGetElement
SafeArrayDestroy

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathFileExistsA
StrStrIW
PathIsRelativeW

winmm

timeKillEvent
timeGetTime
timeSetEvent

comctl32

ord17
_TrackMouseEvent

gdiplus

GdipCreateEffect
GdipSetClipRegion
GdipDeleteRegion
GdipCreateRegionPath
GdipSetPathGradientPresetBlend
GdipSetPathGradientWrapMode
GdipCreatePathGradientFromPath
GdipAddPathLine
GdipAddPathArc
GdipDrawPath
GdipFillEllipseI
GdipDrawEllipseI
GdipDrawString
GdipFillPath
GdipGetFontStyle
GdipGetFontSize
GdipAddPathString
GdipGetFamily
GdipDeleteFontFamily
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipGetFontCollectionFamilyCount
GdipNewInstalledFontCollection
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipFillRectangle
GdipTransformPath
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathArcI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipDeleteEffect
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathFillMode
GdipSetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipGetPenLineJoin
GdipSetPenLineJoin
GdipGetPenDashCap197819
GdipGetPenEndCap
GdipGetPenStartCap
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipSetPenColor
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipLoadImageFromFile
GdipImageRotateFlip
GdipDrawImageRect
GdipCreatePen2
GdipSetLineBlend
GdipCreateLineBrushFromRect
GdipDrawArc
GdipDeletePen
GdipCreatePen1
GdipSetSmoothingMode
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSetEffectParameters
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipDrawImageRectRect
GdipCreateFromHDC
GdipDrawImage
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipGetWorldTransform
GdipDeleteMatrix
GdipCreateMatrix
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipCloneBrush
GdipAlloc
GdipFree
GdipDeleteBrush
GdipCreateSolidFill
GdipBitmapApplyEffect
GdipMeasureString
GdiplusShutdown
GdiplusStartup
GdipScaleMatrix
GdipAddPathLine2I
GdipDeletePath

imm32

ImmSetOpenStatus
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
ImmSetCompositionWindow

msimg32

AlphaBlend

ws2_32

WSACleanup
__WSAFDIsSet
closesocket
select
shutdown
WSASocketW
inet_pton
getaddrinfo
WSAStartup
getpeername
send
socket
ntohs
connect
recv
getsockopt
freeaddrinfo
ioctlsocket
getnameinfo
setsockopt
WSAGetLastError
inet_addr
getsockname

crypt32

CertEnumCertificatesInStore
CertOpenSystemStoreW
CertFreeCertificateContext
CertCloseStore

iphlpapi

GetAdaptersInfo
GetIpForwardTable

uiautomationcore

UiaRaiseAutomationPropertyChangedEvent
UiaClientsAreListening
UiaReturnRawElementProvider
UiaHostProviderFromHwnd
UiaRaiseAutomationEvent

gdi32

AddFontResourceExW
AddFontMemResourceEx
CreateDIBSection
DeleteDC
GetDIBits
CreateDCW
GetDeviceCaps
CreateRoundRectRgn
BitBlt
StretchBlt
SelectObject
DeleteObject
CreateFontIndirectW
GetStockObject
GetObjectW
SetStretchBltMode
SetBkMode
SetTextColor
GetObjectA
CreateCompatibleDC
SaveDC
RestoreDC
GetWindowOrgEx
GetTextExtentPoint32W
ExtSelectClipRgn
CreateRectRgnIndirect
SetWindowOrgEx

Exports

Exports

OPENSSL_Applink

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f9a6d2fcbab657cba1076c5d66dc9aa4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libssl-1_1

libcrypto-1_1

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

winmm

comctl32

gdiplus

imm32

msimg32

ws2_32

crypt32

iphlpapi

uiautomationcore

gdi32

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 320KB - Virtual size: 320KB

.data Size: 27KB - Virtual size: 105KB

.rsrc Size: 268KB - Virtual size: 268KB

.reloc Size: 124KB - Virtual size: 128KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 320KB - Virtual size: 320KB

.data
Size: 27KB - Virtual size: 105KB

.rsrc
Size: 268KB - Virtual size: 268KB

.reloc
Size: 124KB - Virtual size: 128KB