5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554

Sharing

Copy URL Twitter E-mail

General

Target

5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554
Size

2.1MB
MD5

3402b7438961d412b67fabe43ed115a7
SHA1

f3f0f827aad2ebdc83dc3587cc155df688decaa0
SHA256

5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554
SHA512

746c7a2884bc44d3d75f3a5e4c9e6188d2f87fe770476d62d4fb9087ec619a7a9fb3f23c410c38a1640021606e1eebc1cfd774b37497e23ab76b9057aedc2b53
SSDEEP

49152:6p55BODmO08xR/CTQY8Zmhjjbtm6BFlR+Mzaos0yL0IyqgUC1ufINE6/:YnODmOb/CTQPmhjj5m6BFPpaoszL0IyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554

Files

5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554
.exe windows:5 windows x86 arch:x86

e63f92a07367edc488b311b130753c6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\工作事务\闪字风扇\LedFan(48灯全彩)\bin\EditLed48.pdb

Imports

kernel32

IsProcessorFeaturePresent
GetTimeZoneInformation
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
ExitProcess
GetVersion
CreateThread
ExitThread
HeapReAlloc
RaiseException
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
HeapAlloc
GetStringTypeW
GetConsoleCP
GetConsoleMode
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
SearchPathW
Sleep
GetProfileIntW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
GetCurrentDirectoryW
SetEnvironmentVariableA
WriteConsoleW
GetSystemTimeAsFileTime
InterlockedIncrement
FileTimeToSystemTime
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DeleteFileW
GetThreadLocale
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
SuspendThread
SetEvent
GetCurrentThreadId
ResumeThread
SetThreadPriority
FreeLibrary
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
CopyFileW
FormatMessageW
LocalFree
lstrcmpA
WideCharToMultiByte
GlobalFree
MulDiv
CancelIo
ReadFile
FlushFileBuffers
lstrcpyW
CreateMutexW
WaitForSingleObject
CreateEventW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetSystemDefaultLCID
GetLocaleInfoW
WritePrivateProfileStringW
GetModuleFileNameW
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
CreateFileW
lstrcmpiW
lstrlenW
FreeResource
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
DeactivateActCtx
SetLastError
GetCPInfo
MultiByteToWideChar
lstrlenA
GetVersionExW

user32

CreateAcceleratorTableW
DestroyAcceleratorTable
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
PostThreadMessageW
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
SetParent
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
UnregisterClassW
RealChildWindowFromPoint
CopyImage
GetNextDlgGroupItem
SetLayeredWindowAttributes
EnumDisplayMonitors
ShowOwnedPopups
CharUpperW
SetWindowContextHelpId
MapDialogRect
MessageBeep
IsZoomed
PostQuitMessage
CreateDialogIndirectParamW
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
SetClassLongW
TrackPopupMenu
DrawMenuBar
GetScrollRange
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
RegisterClassW
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
PeekMessageW
GetCursorPos
ValidateRect
UnhookWindowsHookEx
IntersectRect
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxW
EndPaint
BeginPaint
GetWindowDC
DestroyMenu
GetMenuStringW
MapVirtualKeyW
GetKeyNameTextW
GetScrollPos
SetScrollRange
IsRectEmpty
UpdateWindow
AdjustWindowRectEx
wvsprintfW
IsWindowVisible
SetScrollPos
LoadMenuW
DragDetect
RedrawWindow
ShowCaret
SetCaretPos
CreateCaret
DestroyCaret
DefWindowProcW
GetClassInfoW
IsWindow
KillTimer
DispatchMessageW
TranslateMessage
DrawIcon
IsIconic
SetTimer
LoadIconW
wsprintfW
RegisterClipboardFormatW
LoadCursorW
EnableMenuItem
ScreenToClient
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
SetClipboardData
LockWindowUpdate
EnumChildWindows
CharNextW
InvalidateRgn
DrawFrameControl
SetCursorPos
InvertRect
HideCaret
CopyIcon
CharUpperBuffW
IsCharLowerW
MapVirtualKeyExW
EmptyClipboard
OpenClipboard
GetKeyState
GetCursor
EqualRect
ReleaseCapture
SetRectEmpty
PtInRect
SetCapture
GetFocus
LoadImageW
GetWindowRgn
GetDoubleClickTime
SubtractRect
GetUpdateRect
TranslateMDISysAccel
GetIconInfo
DrawStateW
GetClientRect
DefMDIChildProcW
DefFrameProcW
SetMenu
DrawFocusRect
OffsetRect
InflateRect
FrameRect
PostMessageW
GetWindowRect
GetActiveWindow
WindowFromPoint
ClientToScreen
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
IsMenu
SendMessageW
GetWindowLongW
DestroyCursor
GetSubMenu
DeleteMenu
RemoveMenu
LoadBitmapW
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
EnableWindow
ModifyMenuW
InsertMenuW
GetMenuItemCount
AppendMenuW
ReleaseDC
GetDC
GetDesktopWindow
GetSystemMetrics
DestroyIcon
DrawIconEx
SystemParametersInfoW
TabbedTextOutW
DrawTextExW
GrayStringW
DrawTextW
GetMenuItemInfoW
SetRect
DrawEdge
FillRect
CopyRect
GetSysColor
GetDlgItemInt

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
SetRectRgn
CombineRgn
GetMapMode
GetCharWidthW
StretchDIBits
CreateDIBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
OffsetRgn
GetRgnBox
GetViewportExtEx
RealizePalette
CreateEllipticRgn
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
SetPaletteEntries
GetWindowOrgEx
PtInRegion
FrameRgn
GetBoundsRect
GetViewportOrgEx
GetTextFaceW
SetPixelV
CreateDCW
CopyMetaFileW
CreateRectRgnIndirect
GetTextColor
GetWindowExtEx
SetBitmapBits
CreateRectRgn
SelectClipRgn
SetLayout
SaveDC
GetLayout
SetTextAlign
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
GetDIBits
GetDeviceCaps
GetBitmapBits
LPtoDP
DPtoLP
LineTo
MoveToEx
GetBkColor
EnumFontFamiliesExW
SetDIBColorTable
ExtFloodFill
LineDDA
GetDIBColorTable
StretchBlt
FillRgn
CreatePolygonRgn
GetCurrentObject
CreateFontW
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
Rectangle
CreateHatchBrush
PatBlt
SetPixel
GetPixel
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
Ellipse
GetTextExtentPoint32W
BitBlt
CreateFontIndirectW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateCompatibleDC
CreateCompatibleBitmap
GetBkMode
CreatePen
CreateSolidBrush
RestoreDC

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW

shell32

SHBrowseForFolderW
ShellExecuteW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteExW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
StrCmpIW
PathRemoveFileSpecW

ole32

OleLockRunning
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleUninitialize
CoGetClassObject
CoInitialize
CoInitializeEx
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleGetClipboard
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
StgOpenStorageOnILockBytes
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance

oleaut32

SysFreeString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
VariantTimeToSystemTime

oledlg

OleUIBusyW

gdiplus

GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipImageSelectActiveFrame
GdipCreateFromHDC
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromFile
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipSetInterpolationMode

hid

HidD_GetAttributes
HidD_GetPreparsedData
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetHidGuid

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e63f92a07367edc488b311b130753c6e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

hid

setupapi

oleacc

imm32

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 314KB - Virtual size: 314KB

.data Size: 54KB - Virtual size: 111KB

.rsrc Size: 252KB - Virtual size: 251KB

.reloc Size: 179KB - Virtual size: 178KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 314KB - Virtual size: 314KB

.data
Size: 54KB - Virtual size: 111KB

.rsrc
Size: 252KB - Virtual size: 251KB

.reloc
Size: 179KB - Virtual size: 178KB