0dffd9f535595efdb1d1340d0971b1f7394f777324c003166250c58057d426e5

Sharing

Copy URL

Twitter E-mail

General

Target

0dffd9f535595efdb1d1340d0971b1f7394f777324c003166250c58057d426e5
Size

4.5MB
MD5

8057c71723a0652722db2d1016e56841
SHA1

3bd80573bd35c78dbb1a8b9ac117ee3e5d67a032
SHA256

0dffd9f535595efdb1d1340d0971b1f7394f777324c003166250c58057d426e5
SHA512

9be223ae2315ab54ac14c09d50d92e6c8590fd72912918e1867e9a6c2848d8677cd4dd5152aa4dedd0accdb5d13e956dce5ff895541961b0fd6bee6b3d1f9cc5
SSDEEP

98304:oh1UtjmXoyd1ZoTttJBZw4zq0FLOAkGkzdnEVomFHKnPBo8D527BWG:M6jmYtt7FLOyomFHKnPzVQBWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dffd9f535595efdb1d1340d0971b1f7394f777324c003166250c58057d426e5

Files

0dffd9f535595efdb1d1340d0971b1f7394f777324c003166250c58057d426e5
.exe windows:6 windows x86 arch:x86

063fb90df18ee24505d14fc8a0f54a8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\GaoMan\Apps\GMV15\src\TabletDriver\Out\release\TabletDriver.pdb

Imports

kernel32

IsValidLocale
GetTimeZoneInformation
GetACP
GetStdHandle
SetStdHandle
VirtualAlloc
QueryPerformanceFrequency
HeapQueryInformation
EnumSystemLocalesW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineA
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringW
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetDriveTypeW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
FindResourceExW
SearchPathW
GetProfileIntW
VirtualProtect
GetTempFileNameW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
SetErrorMode
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameW
GlobalFindAtomW
EncodePointer
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
VerifyVersionInfoW
lstrcpyW
InitializeCriticalSectionAndSpinCount
VerSetConditionMask
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GetCurrentThreadId
GetThreadLocale
LoadLibraryExW
GetModuleHandleA
OutputDebugStringA
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetLastError
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
CancelIo
GetTickCount
FileTimeToSystemTime
DosDateTimeToFileTime
GetFileType
GetProcessHeap
DecodePointer
GetCurrentDirectoryW
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
DuplicateHandle
InitializeCriticalSectionEx
SetFilePointer
HeapFree
Sleep
ResetEvent
SetEvent
ReleaseSemaphore
WaitForMultipleObjects
ResumeThread
CreateSemaphoreW
CreateEventW
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
LoadLibraryA
GetTickCount64
CreateProcessW
SetCurrentDirectoryW
LocalAlloc
lstrcmpiW
GetSystemInfo
QueryFullProcessImageNameW
K32GetProcessImageFileNameW
K32GetModuleFileNameExW
K32EnumProcessModules
GetVersionExW
TerminateProcess
OpenProcess
GetCurrentProcessId
ExitProcess
GetCurrentThread
SetThreadPriority
GetCurrentProcess
GetTempPathW
GetWindowsDirectoryW
GetSystemDirectoryW
GetCommandLineW
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
CreateMutexW
ReleaseMutex
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
FlushFileBuffers
WriteFile
ReadFile
GetFileSize
DeleteCriticalSection
InitializeCriticalSection
VirtualQuery
GetModuleHandleW
GetFileAttributesW
LocalFree
FormatMessageW
FindClose
FindNextFileW
FindFirstFileW
CloseHandle
CreateFileW
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
CreateDirectoryW
DeleteFileW
CopyFileW
GetSystemTime
GetProcAddress
LoadLibraryW
GetLastError
FreeResource
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
SystemTimeToFileTime
QueryPerformanceCounter
GetModuleHandleExW
WriteConsoleW

user32

ReleaseCapture
SetCapture
WaitMessage
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassLongW
EqualRect
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExW
CallWindowProcW
GetMessageTime
GetMessagePos
GetWindowRect
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
CopyImage
DrawTextW
SetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
GetClassNameW
FillRect
InvalidateRect
SetParent
BringWindowToTop
CreatePopupMenu
UpdateWindow
DrawStateW
EnumDisplayDevicesW
EnumDisplaySettingsW
GetMonitorInfoW
EnumDisplayMonitors
SetWindowsHookExW
SetCursor
ShowOwnedPopups
LoadBitmapW
LockWindowUpdate
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CreateAcceleratorTableW
GetFocus
SystemParametersInfoW
LoadCursorW
CopyRect
SetRectEmpty
GetSysColorBrush
GetSysColor
MapWindowPoints
SetLayeredWindowAttributes
GetClassInfoW
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
SetWindowPos
GetLastActivePopup
GetParent
IsWindowEnabled
CallNextHookEx
ValidateRect
GetActiveWindow
IsWindowVisible
CharUpperW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
DeleteMenu
RealChildWindowFromPoint
CharNextW
OffsetRect
CopyAcceleratorTableW
InvalidateRgn
SetRect
IntersectRect
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
DrawEdge
DrawFrameControl
SetWindowRgn
DrawFocusRect
ChangeWindowMessageFilterEx
SetPropW
InflateRect
DrawIconEx
ToUnicodeEx
GetKeyboardLayout
GetAsyncKeyState
GetKeyboardState
DrawTextExW
LoadAcceleratorsW
UnhookWindowsHookEx
wsprintfW
MessageBoxW
SetWindowLongW
GetWindowLongW
DefWindowProcW
RegisterClassW
CreateWindowExW
GetUpdateRect
GetWindow
ShowWindow
EnableWindow
IsWindow
GetMessageW
SetFocus
TranslateMessage
DispatchMessageW
PostQuitMessage
GetWindowThreadProcessId
PostMessageW
SendMessageW
GetSystemMetrics
GetPropW
FindWindowExW
GetDesktopWindow
GetForegroundWindow
SetTimer
KillTimer
UnregisterClassW
RegisterDeviceNotificationW
PeekMessageW
FindWindowW
RegisterWindowMessageW
ReplyMessage
GetWindowTextW
PtInRect
GetMessageExtraInfo
LockWorkStation
SetClassLongW
DestroyIcon
SendDlgItemMessageA
MapVirtualKeyW
SendInput
SetCursorPos
GetCursorPos
WindowFromPoint
SetForegroundWindow
GetKeyState
LoadIconW
IsIconic
GetClientRect
DrawIcon
DestroyAcceleratorTable
TrackMouseEvent
IsZoomed
LoadMenuW
GetSystemMenu
CheckMenuItem
NotifyWinEvent
GetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
DestroyMenu
EnableScrollBar
UnionRect
MonitorFromPoint
TranslateAcceleratorW
InsertMenuItemW
LoadImageW
UnpackDDElParam
ReuseDDElParam
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetDoubleClickTime
GetIconInfo
CopyIcon
ModifyMenuW
IsCharLowerW
GetKeyNameTextW
MapVirtualKeyExW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
InvertRect
HideCaret
GetWindowRgn
DestroyCursor
GetComboBoxInfo
CreateMenu
SubtractRect
SetMenuItemInfoW

gdi32

SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
GetRgnBox
CombineRgn
CreateEllipticRgn
Ellipse
PatBlt
CreatePolygonRgn
SaveDC
Polyline
CreateRoundRectRgn
CreateDIBSection
GetMapMode
SetRectRgn
DPtoLP
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
SetPixelV
GetTextFaceW
RectVisible
RestoreDC
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreateHatchBrush
CreateBitmap
GetObjectW
GetTextMetricsW
GetTextCharsetInfo
GetStockObject
EnumFontFamiliesW
DeleteObject
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CopyMetaFileW
DeleteDC
GetDeviceCaps
CreateDCW
GetTextExtentPoint32W
SelectObject
Polygon
CreatePatternBrush
SetBkMode

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

SetSecurityDescriptorOwner
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCreateKeyExW
IsTextUnicode
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
FreeSid
RevertToSelf
AccessCheck
IsValidSecurityDescriptor
RegOpenKeyExW
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
OpenThreadToken
ImpersonateSelf
OpenProcessToken
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegCloseKey
RegEnumKeyW

shell32

DragQueryFileW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
SHGetDesktopFolder
SHAppBarMessage
DragFinish
SHGetSpecialFolderLocation
SHGetFileInfoW
ShellExecuteExW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrFormatKBSizeW

uxtheme

GetThemeSysColor
GetThemePartSize
DrawThemeParentBackground
IsAppThemed
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsThemeBackgroundPartiallyTransparent

ole32

CoLockObjectExternal
OleGetClipboard
CoInitializeEx
IsAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
RevokeDragDrop
RegisterDragDrop
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CLSIDFromProgID
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CLSIDFromString
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoCreateGuid
OleTranslateAccelerator

oleaut32

SysStringLen
SysAllocStringLen
SysAllocString
SysFreeString
SafeArrayDestroy
VariantInit
VariantCopy
VarBstrFromDate
LoadTypeLi
OleCreateFontIndirect
VariantClear
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime

oledlg

OleUIBusyW

gdiplus

GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdiplusStartup
GdipAlloc
GdipFree
GdiplusShutdown

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

winmm

PlaySoundW

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
CM_Get_Parent
CM_Get_Device_IDW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces

hid

HidD_GetHidGuid
HidD_GetFeature
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_GetPreparsedData
HidD_GetAttributes
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetIndexedString

winusb

WinUsb_QueryPipe
WinUsb_GetDescriptor
WinUsb_Free
WinUsb_ControlTransfer
WinUsb_Initialize
WinUsb_ReadPipe

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 708KB - Virtual size: 712KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

063fb90df18ee24505d14fc8a0f54a8d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

version

winmm

setupapi

hid

winusb

oleacc

imm32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 405KB - Virtual size: 404KB

.data Size: 25KB - Virtual size: 56KB

.gfids Size: 106KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 708KB - Virtual size: 712KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 405KB - Virtual size: 404KB

.data
Size: 25KB - Virtual size: 56KB

.gfids
Size: 106KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 708KB - Virtual size: 712KB