48d6541c521fda45c93c730fad000c0e93836a14f077396cfbacf354e57daac5

Sharing

Copy URL Twitter E-mail

General

Target

48d6541c521fda45c93c730fad000c0e93836a14f077396cfbacf354e57daac5
Size

1.5MB
MD5

e0fd757e4e2e24ccb8e2e0208b3bb225
SHA1

acaa77ce019d0827015829feb4a6723a16ab2552
SHA256

48d6541c521fda45c93c730fad000c0e93836a14f077396cfbacf354e57daac5
SHA512

48ac1324717c4cb02d70208b691fb1e870f242add5c78b23d0e48266d7f433accd9c2beee71eba68fdc8828232cd615de7d512edc19a066a84d0b54381220b8c
SSDEEP

24576:x9Lh5QcsLKbaVWYk88yYN/qBsPO/PNiVbI1dMsHg7evms:LhycUKb3HVPO/l46PH4oms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d6541c521fda45c93c730fad000c0e93836a14f077396cfbacf354e57daac5

Files

48d6541c521fda45c93c730fad000c0e93836a14f077396cfbacf354e57daac5
.exe windows:5 windows x86 arch:x86

44d4ea1cce339f0aab9276abd83eec24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Project\dtl_dep\PC\driverthelife8\trunk\ManualUpdate\DtlManualUpdate\Release\DtlManualUpdate.pdb

Imports

kernel32

GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
RtlUnwind
FindFirstFileExW
ExitThread
GetModuleHandleExW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetStdHandle
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetConsoleMode
HeapSize
GetProcessHeap
IsValidCodePage
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
GetConsoleCP
SetFilePointerEx
WriteConsoleW
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
InterlockedIncrement
IsProcessorFeaturePresent
GetFileType
SystemTimeToFileTime
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
GetACP
ReadFile
IsBadReadPtr
MulDiv
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
EncodePointer
GetCurrentThread
WaitForSingleObjectEx
DuplicateHandle
QueryPerformanceCounter
IsDebuggerPresent
GetOEMCP
InterlockedDecrement
WaitForMultipleObjects
ReleaseSemaphore
SetEvent
SetThreadPriority
CreateThread
CreateSemaphoreW
CreateEventW
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TerminateThread
MoveFileExW
CreateFileW
GetTempFileNameW
Sleep
OutputDebugStringW
LocalFree
GetCommandLineW
CreateMutexW
WinExec
lstrcpyW
GetTempPathW
GetCurrentDirectoryW
DeleteFileW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
FreeLibrary
LoadLibraryW
GetModuleHandleW
GetProcAddress
CreateProcessW
WaitForSingleObject
GetCurrentProcess
TerminateProcess
FormatMessageA
GetLastError
WriteFile
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
CloseHandle
GetFileSize
DeleteFileA
GetModuleFileNameA
InterlockedExchange
LeaveCriticalSection
SetFilePointer
CreateFileA
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
FindNextFileW
FindClose
GetUserDefaultLangID
DosDateTimeToFileTime
GetModuleFileNameW

user32

RegisterClassW
DefWindowProcW
EnableWindow
SetWindowRgn
IsWindowVisible
MonitorFromWindow
GetMonitorInfoW
IsZoomed
CharNextW
LoadCursorW
SetCursor
SetRectEmpty
SetRect
CopyRect
OffsetRect
FillRect
DrawIconEx
DrawTextW
IntersectRect
InflateRect
CreateCaret
SetCaretPos
HideCaret
ShowCaret
GetClassInfoExW
PtInRect
ReleaseCapture
IsWindow
GetFocus
DispatchMessageW
TranslateMessage
GetMessageW
GetCursorPos
ScreenToClient
CreateWindowExW
MapWindowPoints
InvalidateRect
UpdateLayeredWindow
GetWindowRect
UnionRect
IsRectEmpty
GetUpdateRect
SetFocus
GetWindow
SetWindowLongW
GetWindowLongW
SetWindowPos
GetClientRect
DestroyWindow
GetKeyState
EndPaint
BeginPaint
ReleaseDC
GetDC
SendMessageW
RegisterClassExW
CallWindowProcW
SetPropW
GetPropW
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
ShowWindow
SetCapture
ClientToScreen
GetSysColor
GetCaretPos
SetForegroundWindow
FindWindowW
PostMessageW
SetTimer
PostQuitMessage
KillTimer
IsIconic
BringWindowToTop
CharPrevW
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
RedrawWindow
GetDesktopWindow
GetWindowDC
InvalidateRgn
CreateAcceleratorTableW
MoveWindow
GetParent
DestroyIcon

advapi32

RegCloseKey
RegQueryValueW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW

shell32

CommandLineToArgvW
ShellExecuteExW
ShellExecuteW

ole32

OleUninitialize
CoUninitialize
OleInitialize
CoInitialize
CLSIDFromString
CoCreateInstance
CLSIDFromProgID
OleLockRunning
CreateStreamOnHGlobal

shlwapi

PathRemoveFileSpecW
PathAppendW
PathIsRelativeW
PathCombineW
PathRemoveFileSpecA
PathFileExistsW

winhttp

WinHttpCrackUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData
WinHttpSetOption
WinHttpOpen
WinHttpConnect

gdiplus

GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipImageSelectActiveFrame
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromFile
GdipReleaseDC
GdipDrawImageRectI
GdipSetInterpolationMode
GdipLoadImageFromStream
GdipDrawImageRectRect
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFillRectangleI
GdipSetTextRenderingHint
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipSetStringFormatTrimming
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipMeasureString
GdipDrawString
GdipCreateStringFormat
GdipCreateLineBrushI
GdipGetImageWidth
GdipGetImageHeight

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msimg32

AlphaBlend

comctl32

_TrackMouseEvent
ord17

gdi32

GetDeviceCaps
CreateFontIndirectW
GetObjectW
SetBkColor
GetCharABCWidthsW
EnumFontFamiliesW
GetObjectA
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CombineRgn
GetStockObject
CreatePen
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
SaveDC
RestoreDC
CreateCompatibleBitmap
BitBlt
Rectangle
SetWindowOrgEx
GetTextMetricsW
CreatePenIndirect
SetBkMode
SetStretchBltMode
SetTextColor
GetTextExtentPointW
GetTextExtentPoint32W
TextOutW
StretchBlt
PatBlt
RoundRect
LineTo
MoveToEx
ExtSelectClipRgn
SelectClipRgn
GetClipBox

oleaut32

VariantClear
SysAllocString
VariantInit
SysFreeString

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 684KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44d4ea1cce339f0aab9276abd83eec24

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shell32

ole32

shlwapi

winhttp

gdiplus

version

msimg32

comctl32

gdi32

oleaut32

imm32

Sections

.text Size: 565KB - Virtual size: 564KB

.rdata Size: 147KB - Virtual size: 146KB

.data Size: 8KB - Virtual size: 13KB

.gfids Size: 1024B - Virtual size: 724B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 684KB - Virtual size: 683KB

.reloc Size: 103KB - Virtual size: 104KB

.text
Size: 565KB - Virtual size: 564KB

.rdata
Size: 147KB - Virtual size: 146KB

.data
Size: 8KB - Virtual size: 13KB

.gfids
Size: 1024B - Virtual size: 724B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 684KB - Virtual size: 683KB

.reloc
Size: 103KB - Virtual size: 104KB