3db0461e9ca4580ae196ba6ef7726aeb037ca7dcacfca7ac7b6e5f5c34aa99fa

Sharing

Copy URL Twitter E-mail

General

Target

3db0461e9ca4580ae196ba6ef7726aeb037ca7dcacfca7ac7b6e5f5c34aa99fa
Size

5.3MB
MD5

0ed099b1d46992aa884c0c78f59a91a5
SHA1

9b01a63312d0e1cdc78abf208667de15177aeaf8
SHA256

3db0461e9ca4580ae196ba6ef7726aeb037ca7dcacfca7ac7b6e5f5c34aa99fa
SHA512

c19ef00b3d70003a2bc58d74de3b989cdef534cb81e502a01ed8229f416e4436a55cc89146c831ac9c1225ad385c24625c57fb8628704bdf9b3c431119dc4494
SSDEEP

98304:s8T740GtLReq8NDLp8dSWYu8kR0aUdxKDLkjgM1lAwsnFPiFBS:7Ts0L9LhWYuLR0aUdxKDLkjgM1lAwsn8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db0461e9ca4580ae196ba6ef7726aeb037ca7dcacfca7ac7b6e5f5c34aa99fa

Files

3db0461e9ca4580ae196ba6ef7726aeb037ca7dcacfca7ac7b6e5f5c34aa99fa
.exe windows:4 windows x86 arch:x86

134269a0597513fe533c29fded45b303

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

DeregisterEventSource
GetUserNameA
OpenProcessToken
RegOpenKeyExA
RegQueryValueExA
RegisterEventSourceA
ReportEventA

libegl

eglChooseConfig
eglCreateContext
eglCreateWindowSurface
eglDestroyContext
eglDestroySurface
eglGetConfigs
eglGetDisplay
eglGetError
eglInitialize
eglMakeCurrent
eglSwapBuffers
eglSwapInterval
eglTerminate

gdi32

BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
DeleteDC
DeleteObject
GetBitmapBits
GetDeviceCaps
GetObjectA
GetStockObject
SelectObject

libglesv2

glActiveTexture
glAttachShader
glBindAttribLocation
glBindBuffer
glBindFramebuffer
glBindTexture
glBlendEquation
glBlendFunc
glBlendFuncSeparate
glBufferData
glCheckFramebufferStatus
glClear
glClearColor
glColorMask
glCompileShader
glCopyTexSubImage2D
glCreateProgram
glCreateShader
glDeleteBuffers
glDeleteFramebuffers
glDeleteProgram
glDeleteShader
glDeleteTextures
glDetachShader
glDisable
glDisableVertexAttribArray
glDrawArrays
glEnable
glEnableVertexAttribArray
glFramebufferTexture2D
glGenBuffers
glGenFramebuffers
glGenTextures
glGenerateMipmap
glGetAttribLocation
glGetIntegerv
glGetProgramiv
glGetShaderInfoLog
glGetShaderiv
glGetString
glGetUniformLocation
glLinkProgram
glScissor
glShaderSource
glTexImage2D
glTexParameteri
glUniform1f
glUniform1i
glUniform2f
glUniform4f
glUniformMatrix3fv
glUseProgram
glVertexAttribPointer
glViewport

imagehlp

StackWalk
SymCleanup
SymFunctionTableAccess
SymGetModuleBase
SymGetSymFromAddr
SymInitialize

kernel32

AreFileApisANSI
CloseHandle
CopyFileW
CreateDirectoryA
CreateDirectoryExW
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateIoCompletionPort
CreateMutexA
CreateSemaphoreA
CreateThread
CreateWaitableTimerA
DebugBreak
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeLibrary
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetDriveTypeA
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessId
GetQueuedCompletionStatus
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalMemoryStatusEx
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsBadWritePtr
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LocalFree
MoveFileExW
MultiByteToWideChar
OpenEventA
OpenProcess
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveDirectoryA
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VerifyVersionInfoA
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile

msvcrt

_fdopen
_lseek
_read
_strdup
_stricoll
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_controlfp
_errno
_exit
_filbuf
_flsbuf
_fstat64
_fullpath
_getch
_iob
_isctype
_onexit
_pclose
_pctype
_popen
_setmode
_snprintf
_stricmp
_strnicmp
_vsnprintf
_wfopen
abort
acos
asin
atan
atan2
atexit
atof
atoi
atol
bsearch
calloc
ceil
clearerr
clock
cos
cosh
difftime
exit
exp
fclose
fflush
fgetc
fgets
floor
fmod
fopen
fprintf
fputc
fputs
fread
free
freopen
frexp
fscanf
fseek
ftell
fwrite
getenv
getwc
gmtime
isspace
iswctype
ldexp
localeconv
localtime
log
log10
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
mktime
modf
pow
putwc
qsort
raise
rand
realloc
remove
rename
setlocale
setvbuf
signal
sin
sinh
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strstr
strtod
strtol
strtoul
strxfrm
system
tan
tanh
time
tmpfile
tmpnam
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
vsprintf
wcscoll
wcsftime
wcslen
wcsstr
wcstombs
wcsxfrm

mswsock

AcceptEx
GetAcceptExSockaddrs

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
StringFromCLSID

shell32

CommandLineToArgvW
SHGetSpecialFolderPathA
ShellExecuteW

user32

AdjustWindowRectEx
CloseClipboard
CreateCursor
CreateIconIndirect
CreateWindowExA
DefWindowProcA
DestroyCursor
DestroyWindow
DispatchMessageA
EmptyClipboard
FindWindowA
GetClientRect
GetClipboardData
GetDC
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetMessageA
GetProcessWindowStation
GetSystemMetrics
GetUserObjectInformationW
GetWindowLongA
GetWindowPlacement
GetWindowRect
LoadCursorA
LoadIconA
MessageBoxA
MessageBoxW
MoveWindow
OpenClipboard
PeekMessageA
PostThreadMessageA
RegisterClassA
ReleaseDC
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
TranslateMessage
UnregisterClassA

winmm

timeGetTime
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSAAddressToStringA
WSACleanup
WSAGetLastError
WSARecv
WSASend
WSASetLastError
WSASocketA
WSAStartup
WSAStringToAddressA
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
htonl
htons
inet_addr
ioctlsocket
listen
ntohl
select
setsockopt
shutdown

Exports

Exports

alAuxiliaryEffectSlotf
alAuxiliaryEffectSlotfv
alAuxiliaryEffectSloti
alAuxiliaryEffectSlotiv
alBuffer3f
alBuffer3i
alBufferData
alBufferSamplesSOFT
alBufferSubDataSOFT
alBufferSubSamplesSOFT
alBufferf
alBufferfv
alBufferi
alBufferiv
alDeferUpdatesSOFT
alDeleteAuxiliaryEffectSlots
alDeleteBuffers
alDeleteEffects
alDeleteFilters
alDeleteSources
alDisable
alDistanceModel
alDopplerFactor
alDopplerVelocity
alEffectf
alEffectfv
alEffecti
alEffectiv
alEnable
alFilterf
alFilterfv
alFilteri
alFilteriv
alGenAuxiliaryEffectSlots
alGenBuffers
alGenEffects
alGenFilters
alGenSources
alGetAuxiliaryEffectSlotf
alGetAuxiliaryEffectSlotfv
alGetAuxiliaryEffectSloti
alGetAuxiliaryEffectSlotiv
alGetBoolean
alGetBooleanv
alGetBuffer3f
alGetBuffer3i
alGetBufferSamplesSOFT
alGetBufferf
alGetBufferfv
alGetBufferi
alGetBufferiv
alGetDouble
alGetDoublev
alGetEffectf
alGetEffectfv
alGetEffecti
alGetEffectiv
alGetEnumValue
alGetError
alGetFilterf
alGetFilterfv
alGetFilteri
alGetFilteriv
alGetFloat
alGetFloatv
alGetInteger
alGetIntegerv
alGetListener3f
alGetListener3i
alGetListenerf
alGetListenerfv
alGetListeneri
alGetListeneriv
alGetProcAddress
alGetSource3f
alGetSource3i
alGetSourcef
alGetSourcefv
alGetSourcei
alGetSourceiv
alGetString
alIsAuxiliaryEffectSlot
alIsBuffer
alIsBufferFormatSupportedSOFT
alIsEffect
alIsEnabled
alIsExtensionPresent
alIsFilter
alIsSource
alListener3f
alListener3i
alListenerf
alListenerfv
alListeneri
alListeneriv
alProcessUpdatesSOFT
alSource3f
alSource3i
alSourcePause
alSourcePausev
alSourcePlay
alSourcePlayv
alSourceQueueBuffers
alSourceRewind
alSourceRewindv
alSourceStop
alSourceStopv
alSourceUnqueueBuffers
alSourcef
alSourcefv
alSourcei
alSourceiv
alSpeedOfSound
alcCaptureCloseDevice
alcCaptureOpenDevice
alcCaptureSamples
alcCaptureStart
alcCaptureStop
alcCloseDevice
alcCreateContext
alcDestroyContext
alcGetContextsDevice
alcGetCurrentContext
alcGetEnumValue
alcGetError
alcGetIntegerv
alcGetProcAddress
alcGetString
alcGetThreadContext
alcIsExtensionPresent
alcIsRenderFormatSupportedSOFT
alcLoopbackOpenDeviceSOFT
alcMakeContextCurrent
alcOpenDevice
alcProcessContext
alcRenderSamplesSOFT
alcSetThreadContext
alcSuspendContext

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 712KB - Virtual size: 711KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

134269a0597513fe533c29fded45b303

Headers

File Characteristics

Imports

advapi32

libegl

gdi32

libglesv2

imagehlp

kernel32

msvcrt

mswsock

ole32

shell32

user32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.data Size: 46KB - Virtual size: 45KB

.rdata Size: 712KB - Virtual size: 711KB

.eh_fram Size: 1.0MB - Virtual size: 1.0MB

.bss Size: - Virtual size: 33KB

.edata Size: 4KB - Virtual size: 3KB

.idata Size: 13KB - Virtual size: 13KB

.CRT Size: 512B - Virtual size: 28B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 141KB - Virtual size: 140KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 46KB - Virtual size: 45KB

.rdata
Size: 712KB - Virtual size: 711KB

.eh_fram
Size: 1.0MB - Virtual size: 1.0MB

.bss
Size: - Virtual size: 33KB

.edata
Size: 4KB - Virtual size: 3KB

.idata
Size: 13KB - Virtual size: 13KB

.CRT
Size: 512B - Virtual size: 28B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 141KB - Virtual size: 140KB