b8799b6b786230b862956e7a69bee27db4282ec8209658725a39f910eac342a3

Sharing

Copy URL Twitter E-mail

General

Target

b8799b6b786230b862956e7a69bee27db4282ec8209658725a39f910eac342a3
Size

2.7MB
MD5

431e61dcd6f31b05ee1b408b79c3f7ea
SHA1

40762188adde53da3f783d8f02c5395dc2a8d7f0
SHA256

b8799b6b786230b862956e7a69bee27db4282ec8209658725a39f910eac342a3
SHA512

0d212541b140d8a70cbcfb152e094d5e2dae759ca058ec12510837218779915eefe922ff6d3a632f7a62c55176f770fbcc08a55d2ebf758e17a831425c51d260
SSDEEP

49152:jPQ7PQ4km/CbAbABdN8jsL3r+oxGktWUgocCz58fmT8zQHG/UBw2bs/IDeV9y5pl:jPQ7PQ4kECsboN8jsLb+oYkt0oP58fme

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8799b6b786230b862956e7a69bee27db4282ec8209658725a39f910eac342a3

Files

b8799b6b786230b862956e7a69bee27db4282ec8209658725a39f910eac342a3
.dll windows:6 windows x86 arch:x86

6e4b29d5e1302e12f066adb7ec135347

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvfw32

DrawDibDraw
DrawDibClose
DrawDibOpen

winmm

DefDriverProc
PlaySoundA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

AreFileApisANSI
HeapQueryInformation
SetStdHandle
GetFileType
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetConsoleCP
GetConsoleMode
ReadConsoleW
ExitThread
FreeEnvironmentStringsW
GetTimeZoneInformation
GetStringTypeW
SetFilePointerEx
LCMapStringW
WriteConsoleW
OutputDebugStringW
SetEnvironmentVariableA
CreateFileW
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetModuleHandleExW
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTempFileNameA
GetTempPathA
ExitProcess
VerSetConditionMask
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
lstrcpyA
GetVolumeInformationA
lstrcmpiA
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
DeleteFileA
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
FileTimeToSystemTime
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
VirtualQuery
VerifyVersionInfoA
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
GetPrivateProfileStringA
lstrcmpA
GetCurrentThread
ResumeThread
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeResource
GetSystemDirectoryW
EncodePointer
CopyFileA
FormatMessageA
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
ReleaseSemaphore
CreateSemaphoreA
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleTextAttribute
IsDBCSLeadByteEx
GetACP
ResetEvent
WritePrivateProfileStringA
OpenMutexA
GetCurrentThreadId
CreateMutexA
ReleaseMutex
GetModuleHandleA
GetSystemInfo
GetVersion
GetPrivateProfileIntA
MulDiv
WaitForMultipleObjects
GetVersionExA
CreateThread
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
Beep
MultiByteToWideChar
VirtualQueryEx
GetWindowsDirectoryA
GetCurrentProcessId
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcess
GetProcessTimes
InitializeCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameA
FreeLibrary
OutputDebugStringA
GetLastError
VirtualAlloc

user32

GetDoubleClickTime
SetClassLongA
LockWindowUpdate
SetParent
SetRect
SetCursorPos
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
GetSystemMenu
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
CharUpperA
DestroyIcon
IsIconic
InvalidateRect
DeleteMenu
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
MapVirtualKeyA
GetKeyNameTextA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
SetMenuItemInfoA
DrawIcon
GetWindowRgn
DestroyCursor
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
SetMenuDefaultItem
GetWindowThreadProcessId
CopyIcon
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetParent
SendDlgItemMessageA
GetWindow
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
InflateRect
CopyRect
FrameRect
FillRect
ReleaseDC
GetDC
GetSystemMetrics
GetDesktopWindow
KillTimer
SetTimer
LoadBitmapW
PostMessageA
RegisterWindowMessageA
UnregisterClassA
LoadIconA
SetWindowPos
EnableWindow
SendMessageA
IntersectRect

gdi32

IntersectClipRect
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetRectRgn
DPtoLP
GetNearestPaletteIndex
GetPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
SetTextAlign
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
GetPixel
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
CombineRgn
GetObjectA
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
GetTextColor
GetStockObject
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
SetTextColor
SetBkColor
CreateDCA
CopyMetaFileA
CreateDIBSection
PatBlt
CreateSolidBrush
CreateBitmap
BitBlt
GetTextMetricsA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetDIBits
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetCharacterPlacementA
CreateFontA
PtInRegion
GetRegionData
GetBitmapBits
ExtCreateRegion
DeleteObject
LineTo

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderA
SHGetFolderPathA
DragFinish
DragQueryFileA
SHGetDesktopFolder

shlwapi

PathFindFileNameA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathFindExtensionA
PathRemoveFileSpecW

uxtheme

CloseThemeData
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName

ole32

DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
OleLockRunning
CoTaskMemFree
CoTaskMemAlloc
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoUninitialize

oleaut32

SysAllocString
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
LoadTypeLi

dsound

ord1

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePalette
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Exports

Exports

CodecLib
CreateHEVC_Codec
CreateHEVC_Nal
CreateHEVC_Parser
DriverProc
GetHEVC_NalType
GetHEVC_ParserSliceType
GetHEVC_SPS
ReleaseHEVC_Codec
UserProc
UserProcLib

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GvCodecL
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e4b29d5e1302e12f066adb7ec135347

Headers

DLL Characteristics

File Characteristics

Imports

msvfw32

winmm

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

dsound

oleacc

gdiplus

imm32

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 532KB - Virtual size: 531KB

.data Size: 25KB - Virtual size: 150KB

GvCodecL Size: 512B - Virtual size: 8B

.rodata Size: 512B - Virtual size: 240B

.rsrc Size: 22KB - Virtual size: 22KB

.reloc Size: 139KB - Virtual size: 139KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 532KB - Virtual size: 531KB

.data
Size: 25KB - Virtual size: 150KB

GvCodecL
Size: 512B - Virtual size: 8B

.rodata
Size: 512B - Virtual size: 240B

.rsrc
Size: 22KB - Virtual size: 22KB

.reloc
Size: 139KB - Virtual size: 139KB