ff1d9b96f9447f459fc5cb8457ac6cfda42c2f3db92628630feab222b1fb1371

Sharing

Copy URL Twitter E-mail

General

Target

ff1d9b96f9447f459fc5cb8457ac6cfda42c2f3db92628630feab222b1fb1371
Size

2.9MB
MD5

ec1c37b99573147c19eb309399a49019
SHA1

af08c9f9c0fcd93715f28e81b07fdc33fc14a034
SHA256

ff1d9b96f9447f459fc5cb8457ac6cfda42c2f3db92628630feab222b1fb1371
SHA512

55e08938ae37ed01d1d7766b6a9a131ca2bdb2a05aa73880bffc9d48b1606f1086a4e1719cda9f38d9dcfcded477d8745f02859b6d9720881789e815b25a5a6a
SSDEEP

49152:OpcWO/MLUBnMoQGInbs1XJ8aBGEhH3hqzs907i5c2HouEnH4k0XOk5ix:S7IBnMoeEXJTBZh458jOWPO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1d9b96f9447f459fc5cb8457ac6cfda42c2f3db92628630feab222b1fb1371

Files

ff1d9b96f9447f459fc5cb8457ac6cfda42c2f3db92628630feab222b1fb1371
.dll windows:6 windows x86 arch:x86

9be80f36437c2cdd04ffbd79b5aae99b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount64
GetCurrentThreadId
GetCurrentDirectoryA
CreateFileA
CreateProcessA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetFileSize
LoadLibraryA
GetProcAddress
FindFirstFileA
FindNextFileA
SetProcessWorkingSetSize
SizeofResource
VirtualProtect
FindResourceA
FreeResource
LockResource
GetTickCount
WriteConsoleW
HeapSize
SetStdHandle
DeleteFileW
CreatePipe
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
GetConsoleOutputCP
FlushFileBuffers
ExitProcess
CreateThread
GetSystemInfo
RaiseException
TerminateThread
Sleep
GetVolumeInformationA
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
GetModuleFileNameW
lstrlenW
WaitNamedPipeW
GetCurrentProcessId
CloseHandle
GetLastError
CreateFileW
PeekNamedPipe
GetFileSizeEx
GetExitCodeProcess
WriteFile
LoadResource
ReadFile
WaitForSingleObject
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
ReadConsoleW
GetConsoleMode
HeapFree
CreateProcessW
DuplicateHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetModuleHandleExA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
WaitForSingleObjectEx
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageA
GetCurrentDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetEndOfFile
SetFileInformationByHandle
SetFilePointerEx
GetTempPathW
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
WideCharToMultiByte
LocalFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
SetLastError
VirtualAlloc
VirtualFree
VirtualQuery
FreeLibrary
GetModuleFileNameA
GetModuleHandleA

user32

MessageBoxA
GetForegroundWindow
SetWindowsHookExA
CallWindowProcA
GetKeyState
wsprintfA
SetWindowLongA
CallNextHookEx
LoadImageA
IsWindowVisible
ShowWindow
UpdateWindow
keybd_event
FindWindowA
SetWindowPos
GetSystemMetrics
AdjustWindowRect

gdi32

DeleteObject
GetTextExtentPoint32A
CreateFontA
SelectObject

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExW

shell32

Shell_NotifyIconA

iphlpapi

IcmpCreateFile
IcmpSendEcho

ws2_32

ntohs
getpeername
closesocket
inet_addr

rpcrt4

UuidCreateSequential

opengl32

glColor4f
glPopMatrix
glMatrixMode
glDisable
glEnable
glGetFloatv
glTexParameteri
glBegin
glEnd
glColor3fv
glPushMatrix
glLoadIdentity
glColor3f

winmm

timeGetTime

Exports

Exports

EntryProc
Init
__swprintf_l
__vswprintf_l
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fscanf_l
_fscanf_s_l
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwscanf_l
_fwscanf_s_l
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfscanf_l
_vfscanf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vfwscanf_l
_vfwscanf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscanf_l
_vscanf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsnwscanf_l
_vsnwscanf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vsscanf_l
_vsscanf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vswscanf_l
_vswscanf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_vwscanf_l
_vwscanf_s_l
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wscanf_l
_wscanf_s_l
fprintf
fprintf_s
fscanf
fscanf_s
fwprintf
fwprintf_s
fwscanf
fwscanf_s
printf
printf_s
scanf
scanf_s
snprintf
sprintf
sprintf_s
sscanf
sscanf_s
swprintf
swprintf_s
swscanf
swscanf_s
vfprintf
vfprintf_s
vfscanf
vfscanf_s
vfwprintf
vfwprintf_s
vfwscanf
vfwscanf_s
vprintf
vprintf_s
vscanf
vscanf_s
vsnprintf
vsnprintf_s
vsprintf
vsprintf_s
vsscanf
vsscanf_s
vswprintf
vswprintf_s
vswscanf
vswscanf_s
vwprintf
vwprintf_s
vwscanf
vwscanf_s
wprintf
wprintf_s
wscanf
wscanf_s

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gY$
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9be80f36437c2cdd04ffbd79b5aae99b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

iphlpapi

ws2_32

rpcrt4

opengl32

winmm

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 125KB - Virtual size: 125KB

.data Size: 67KB - Virtual size: 2.0MB

.gY$ Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 42KB - Virtual size: 42KB

.rsrc Size: 51KB - Virtual size: 51KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 125KB - Virtual size: 125KB

.data
Size: 67KB - Virtual size: 2.0MB

.gY$
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 42KB - Virtual size: 42KB

.rsrc
Size: 51KB - Virtual size: 51KB