2977591d19751661c5df52c3627af8f980ad0ba0d8c38ffc0d8025a048a26f12

Sharing

Copy URL

Twitter E-mail

General

Target

2977591d19751661c5df52c3627af8f980ad0ba0d8c38ffc0d8025a048a26f12
Size

4.8MB
MD5

346e38e70b7747802677672b6876f5af
SHA1

67d8873fe1ed618ca15fe2a3063b6b1fcb850235
SHA256

2977591d19751661c5df52c3627af8f980ad0ba0d8c38ffc0d8025a048a26f12
SHA512

8d05a6c5f3e782c5fd64a2dd868bc3519214ab7700c5d8ed6084dcbe592b3e5a86ba7f9709c0bfb858e8faf2ec38070d9b22d4aaf67613c55b6edf8a91f089fb
SSDEEP

98304:HdF9q5VDKgAcnoPH5OJndJfe2a73LYL80gaHW:9FqtAcoPZf2a73LuHW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2977591d19751661c5df52c3627af8f980ad0ba0d8c38ffc0d8025a048a26f12

Files

2977591d19751661c5df52c3627af8f980ad0ba0d8c38ffc0d8025a048a26f12
.exe windows:5 windows x86 arch:x86

31cdb79d3d7cad9856ab352719660e0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

E:\无忧加速器\PC客户端\5.x（nfsdk）正式版本\Release\WYJSQ.pdb

Imports

hpsocket4c_u

_HP_Client_GetLastError@4
_SYS_GZipUncompress@16
_SYS_GZipCompress@16
_SYS_GuessCompressBound@8
_SYS_WSAGetLastError@0
_SYS_GetLastError@0
_HP_TcpPackClient_SetPackHeaderFlag@8
_HP_TcpPackAgent_SetMaxPackSize@8
_HP_Client_Send@12
_SYS_GZipGuessUncompressBound@8
_HP_Client_Start@16
_HP_Set_FN_Client_OnClose@8
_HP_Set_FN_Client_OnReceive@8
_HP_Set_FN_Client_OnSend@8
_HP_Set_FN_Client_OnConnect@8
_HP_Set_FN_Client_OnPrepareConnect@8
_Create_HP_TcpPackClientListener@0
_Create_HP_TcpPackClient@4
_HP_Client_GetLastErrorDesc@4

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetDriveTypeW
GetTimeZoneInformation
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetStdHandle
VirtualQuery
VirtualAlloc
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineA
GetFileType
SetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
GetStringTypeW
LCMapStringW
GetCPInfo
VerSetConditionMask
GetCurrentDirectoryW
VerifyVersionInfoW
SetErrorMode
FindResourceExW
GetWindowsDirectoryW
SetEnvironmentVariableA
GetCommandLineW
WriteConsoleW
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
GetUserDefaultLCID
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThread
LocalAlloc
lstrcmpiW
WaitForSingleObject
LockResource
LoadResource
SizeofResource
lstrlenW
FindResourceW
EnterCriticalSection
LeaveCriticalSection
GetTickCount
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
GetLastError
Sleep
WriteFile
ReadFile
CloseHandle
WinExec
SleepEx
LoadLibraryW
OutputDebugStringA
OutputDebugStringW
CreateFileA
CreateFileW
WideCharToMultiByte
DuplicateHandle
UnlockFile
SetFilePointer
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
DeleteFileW
GetProcessTimes
OpenProcess
TerminateProcess
ReadProcessMemory
GetNativeSystemInfo
GetModuleHandleA
IsWow64Process
DecodePointer
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLocalTime
lstrcpyW
FormatMessageW
GetACP
GetExitCodeProcess
SetEndOfFile
GetSystemInfo
CreatePipe
GetModuleFileNameW
GetModuleHandleW
CreateProcessW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
GetComputerNameW
GetVersionExW
SetProcessWorkingSetSize
InitializeCriticalSection
VirtualProtect
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
CreateMutexW
SetLastError
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
CopyFileW
lstrcmpA
LoadLibraryA
EncodePointer
GetSystemDirectoryW
FreeResource
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEvent
CreateEventW
SetThreadPriority
SuspendThread
ResumeThread
GetThreadLocale
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile

user32

TranslateAcceleratorW
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CharUpperBuffW
RegisterClipboardFormatW
GetUpdateRect
SetClassLongW
DestroyAcceleratorTable
ModifyMenuW
CopyIcon
GetIconInfo
GetDoubleClickTime
BringWindowToTop
SetCursorPos
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetParent
GetNextDlgGroupItem
WaitMessage
InvalidateRgn
CopyAcceleratorTableW
LoadImageW
DestroyIcon
EnumDisplayMonitors
MonitorFromPoint
UnionRect
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
MessageBeep
DeleteMenu
ReleaseCapture
SetCapture
IsZoomed
TrackMouseEvent
GetAsyncKeyState
CopyImage
RealChildWindowFromPoint
LoadCursorW
DrawIconEx
IsRectEmpty
DrawFocusRect
GetSysColorBrush
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
WindowFromPoint
CharUpperW
InsertMenuItemW
GetMenuItemInfoW
DestroyMenu
SetRectEmpty
SendDlgItemMessageA
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetWindowThreadProcessId
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
MapWindowPoints
ReleaseDC
RemovePropW
GetClientRect
GetWindowRect
OffsetRect
GetWindowLongW
SetWindowLongW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
UnpackDDElParam
ReuseDDElParam
FrameRect
PostThreadMessageW
HideCaret
InvertRect
SubtractRect
IsClipboardFormatAvailable
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
TranslateMDISysAccel
GetComboBoxInfo
DestroyCursor
CreateMenu
GetWindowRgn
CharNextW
GetParent
wsprintfA
MessageBoxW
UnregisterClassW
FillRect
PostMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetTimer
KillTimer
GetSystemMetrics
SetLayeredWindowAttributes
LoadMenuW
GetSubMenu
SetActiveWindow
SetWindowRgn
AnimateWindow
SetWindowPos
SystemParametersInfoW
EnableScrollBar
GetDesktopWindow
LoadIconW
ExitWindowsEx
InvalidateRect
FindWindowW
FindWindowExW
SetForegroundWindow
GetCursorPos
LoadBitmapW
CheckMenuItem
EnableMenuItem
RemoveMenu
LockWindowUpdate
UpdateWindow
wsprintfW
IsIconic
GetSystemMenu
AppendMenuW
DrawIcon
DrawStateW
GetWindowTextW
CopyRect
SetRect
GetMenuStringW
GetMenuState
DrawTextW
GetMenuItemID
GetMenuItemCount
InsertMenuW
EnableWindow
AdjustWindowRectEx
DrawTextExW
GrayStringW
TabbedTextOutW
SendMessageW
GetDC
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
InflateRect
IntersectRect
IsWindow
GetKeyNameTextW
MapVirtualKeyW
GetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
ShowWindow
MoveWindow
GetDlgItem
CheckDlgButton
GetDlgCtrlID
SetFocus
IsWindowEnabled
SetWindowTextW
GetWindowTextLengthW
GetWindow
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
RegisterWindowMessageW
IsDialogMessageW

gdi32

DeleteObject
CreatePen
CreateHatchBrush
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetTextExtentPoint32W
CreatePatternBrush
CreateRoundRectRgn
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetTextMetricsW
SelectObject
GetStockObject
CreateRectRgn
Escape
GetTextFaceW
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetSystemPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
GetPaletteEntries
CreatePalette
RoundRect
OffsetRgn
Rectangle
SetDIBColorTable
StretchBlt
SetPixel
RealizePalette
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateDIBSection
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
CreateFontW

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
StartServiceW
RegCloseKey
RegCreateKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegEnumValueW
RegEnumKeyExW
OpenProcessToken

shell32

ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathIsDirectoryW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathFileExistsW
PathFindFileNameW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindExtensionW

uxtheme

IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
GetWindowTheme
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor

ole32

OleInitialize
CoInitializeEx
OleGetClipboard
CoLockObjectExternal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
CoRegisterMessageFilter
RegisterDragDrop
RevokeDragDrop
CoFreeUnusedLibraries
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleLockRunning
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoUninitialize
CoInitialize
OleUninitialize

oleaut32

VariantClear
VariantCopy
SysAllocStringLen
VariantChangeType
OleCreateFontIndirect
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
SafeArrayDestroy
SysAllocStringByteLen
VarBstrFromDate
SysStringLen
SysFreeString
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageI
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdipAlloc
GdipFree
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdiplusStartup
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage

iphlpapi

GetExtendedTcpTable
GetAdaptersInfo

psapi

EmptyWorkingSet
GetProcessImageFileNameW

ws2_32

inet_addr
inet_ntoa
gethostbyname

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetWriteFile
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetQueryDataAvailable
InternetSetFilePointer
InternetReadFile
InternetConnectW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetOpenUrlW
InternetCloseHandle
InternetOpenW

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 502KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31cdb79d3d7cad9856ab352719660e0b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

hpsocket4c_u

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

iphlpapi

psapi

ws2_32

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 502KB - Virtual size: 502KB

.data Size: 26KB - Virtual size: 45KB

.rsrc Size: 5.4MB - Virtual size: 5.4MB

.reloc Size: 161KB - Virtual size: 161KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 502KB - Virtual size: 502KB

.data
Size: 26KB - Virtual size: 45KB

.rsrc
Size: 5.4MB - Virtual size: 5.4MB

.reloc
Size: 161KB - Virtual size: 161KB