c5bdbde45e8e316cf10ee22ed53cd62ca030f20ca415b94fe155049d9481a93f

Sharing

Copy URL

Twitter E-mail

General

Target

c5bdbde45e8e316cf10ee22ed53cd62ca030f20ca415b94fe155049d9481a93f
Size

4.0MB
MD5

8257aed2ebc64b92be02edd3fd5c3b6d
SHA1

cafdcd2a15f203fbc91c22bf63b2d083cf7638fb
SHA256

c5bdbde45e8e316cf10ee22ed53cd62ca030f20ca415b94fe155049d9481a93f
SHA512

0cecab1e8e1bf05b6dd335995846802d1a2602aaea5a2f4a5bd505a78d48b3a5fa06f20e8bd445786b7b528481b1e24ceb1e83cda1c866f6440b18c1dca26673
SSDEEP

98304:0LpNJEvRvyZ2MMnUyVUw0n89De0s72Weir9X0n0l:EpNWBd9De0XWR9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5bdbde45e8e316cf10ee22ed53cd62ca030f20ca415b94fe155049d9481a93f

Files

c5bdbde45e8e316cf10ee22ed53cd62ca030f20ca415b94fe155049d9481a93f
.exe windows:6 windows x86 arch:x86

23204746054cf953d514ca83944c5a9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Tools\launch\no1yx_launch_202310\bin\zsj_fusion360.pdb

Imports

ws2_32

setsockopt
socket
gethostname
ioctlsocket
sendto
recvfrom
freeaddrinfo
getaddrinfo
listen
htonl
accept
select
__WSAFDIsSet
WSACleanup
WSAStartup
ntohs
htons
getsockopt
getsockname
getpeername
send
WSAIoctl
connect
bind
recv
WSAGetLastError
closesocket
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSASetLastError

wldap32

ord27
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord46
ord26
ord22
ord41
ord50
ord45
ord143
ord217
ord60
ord211

crypt32

CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore

kernel32

FlushFileBuffers
GetFullPathNameW
GetVolumeInformationW
LockFile
UnlockFile
DuplicateHandle
lstrcmpiW
CreateEventW
GetThreadLocale
GlobalGetAtomNameW
GetFileTime
GetTempFileNameW
GetUserDefaultLCID
FileTimeToSystemTime
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
FileTimeToLocalFileTime
GetFileAttributesExW
SystemTimeToTzSpecificLocalTime
SetErrorMode
FindResourceExW
SearchPathW
GetProfileIntW
ResetEvent
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
SetEvent
lstrcmpA
GetVersionExW
GetCurrentThread
InitializeCriticalSectionAndSpinCount
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
EncodePointer
MulDiv
LocalFree
GlobalSize
CompareStringW
VirtualFree
VirtualAlloc
FindNextFileW
FindFirstFileW
FindClose
GetModuleHandleW
GetWindowsDirectoryW
GetSystemDirectoryW
GetTempPathW
SetFileAttributesW
DeleteFileW
WritePrivateProfileStringW
GetFileInformationByHandle
SetFileTime
SetFilePointer
SetEndOfFile
GetFileSize
LoadLibraryW
GetFileSizeEx
CreateFileA
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetFileType
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetSystemDirectoryA
QueryPerformanceFrequency
SleepEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetLastError
OutputDebugStringA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
GetCurrentThreadId
GetSystemTimeAsFileTime
ReleaseSemaphore
WaitForSingleObject
lstrcpyW
CreateSemaphoreW
InitializeCriticalSection
GetModuleFileNameA
GetCurrentProcessId
CreateDirectoryA
VerifyVersionInfoW
VerSetConditionMask
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
CloseHandle
HeapReAlloc
FormatMessageW
HeapSize
GetFileAttributesW
CreateFileW
WriteFile
GetCurrentProcess
HeapFree
ExitProcess
SetCurrentDirectoryW
GetCurrentDirectoryW
CopyFileW
Sleep
CreateThread
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
InitializeCriticalSectionEx
GetLastError
EnterCriticalSection
LeaveCriticalSection
CreateProcessA
MultiByteToWideChar
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
ResumeThread
CreateDirectoryW
SetThreadPriority
OutputDebugStringW
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwind
InterlockedPushEntrySList
GetSystemInfo
VirtualQuery
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetDriveTypeW
SetFilePointerEx
GetCommandLineA
GetCommandLineW
HeapQueryInformation
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW

user32

GetWindowRgn
CloseClipboard
OpenClipboard
SetClassLongW
LockWindowUpdate
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
SetParent
GetNextDlgGroupItem
PostThreadMessageW
WaitMessage
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
NotifyWinEvent
WindowFromPoint
MessageBeep
DeleteMenu
GetSystemMenu
IsZoomed
TrackMouseEvent
EnumDisplayMonitors
SetLayeredWindowAttributes
GetAsyncKeyState
RealChildWindowFromPoint
CopyImage
InflateRect
GetMenuItemInfoW
GetSysColorBrush
InvalidateRgn
CopyAcceleratorTableW
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
IntersectRect
InsertMenuItemW
DestroyMenu
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
CharNextW
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
TranslateMessage
GetMessageW
RegisterClipboardFormatW
PostQuitMessage
SetRectEmpty
SendDlgItemMessageA
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DrawStateW
GetWindowThreadProcessId
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadMenuW
SystemParametersInfoW
LoadCursorW
IsRectEmpty
OffsetRect
ClientToScreen
GetCursorPos
SetCursor
GetComboBoxInfo
KillTimer
SetTimer
ReleaseCapture
SetCapture
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
GetWindow
GetParent
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
GetDlgItem
InvertRect
HideCaret
GetIconInfo
FrameRect
CopyIcon
ModifyMenuW
CharUpperBuffW
EmptyClipboard
DrawIcon
MoveWindow
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
AdjustWindowRectEx
IsWindow
CharUpperW
UnregisterClassW
FindWindowW
InvalidateRect
SetWindowRgn
GetSystemMetrics
GetWindowRect
LoadIconW
FillRect
SendMessageW
GetClientRect
EnableWindow
MessageBoxW
SetForegroundWindow
SetWindowPos
ShowWindow
SetRect
LoadStringW
SetClipboardData
SetMenuItemInfoW

gdi32

GetTextCharsetInfo
GetObjectW
CreateDIBSection
EnumFontFamiliesW
GetStockObject
CreateRectRgn
CombineRgn
CreateCompatibleDC
SetDIBColorTable
SelectObject
DeleteDC
SetLayout
CreateDIBitmap
SetRectRgn
GetMapMode
GetTextExtentPoint32W
GetRgnBox
CreateFontIndirectW
CreateCompatibleBitmap
GetTextColor
GetBkColor
PatBlt
CreateSolidBrush
CreateRectRgnIndirect
GetTextMetricsW
CreateRoundRectRgn
ScaleWindowExtEx
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
StretchBlt
OffsetRgn
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
EnumFontFamiliesExW
DeleteObject
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreatePen
CreateHatchBrush
LPtoDP
DPtoLP
Ellipse
CreateEllipticRgn
BitBlt
CreateBitmap
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetLayout

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

CryptImportKey
RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
OpenProcessToken
RegOpenKeyExW

shell32

Shell_NotifyIconW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathIsUNCW
PathIsDirectoryA

uxtheme

GetWindowTheme
GetThemeSysColor
GetThemePartSize
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeText
DrawThemeBackground

ole32

OleInitialize
ReleaseStgMedium
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
OleDraw
CoCreateGuid
CoCreateInstance
CreateStreamOnHGlobal
OleDuplicateData
CoInitialize
CoUninitialize
RevokeDragDrop
RegisterDragDrop
OleUninitialize
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoInitializeEx
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CoFreeUnusedLibraries

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysStringLen
SysAllocStringLen
LoadTypeLi
SysAllocString
VarBstrFromDate
SysFreeString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipReleaseDC
GdipDrawImagePointsI
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown

iphlpapi

GetAdaptersInfo

bcrypt

BCryptGenRandom

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23204746054cf953d514ca83944c5a9f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

wldap32

crypt32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

iphlpapi

bcrypt

oleacc

imm32

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 443KB - Virtual size: 442KB

.data Size: 27KB - Virtual size: 50KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 167KB - Virtual size: 167KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 443KB - Virtual size: 442KB

.data
Size: 27KB - Virtual size: 50KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 167KB - Virtual size: 167KB