d90c452d3bcdaf602f99e5aa3d00f7fc49eda48c1670b4e29504b02b23eb7c2a

Sharing

Copy URL Twitter E-mail

General

Target

d90c452d3bcdaf602f99e5aa3d00f7fc49eda48c1670b4e29504b02b23eb7c2a
Size

4.8MB
MD5

afbf938b7626b2133e3c8ad3e02806c1
SHA1

093ab18a4a07d9ada4c1f225061e5df481f92240
SHA256

d90c452d3bcdaf602f99e5aa3d00f7fc49eda48c1670b4e29504b02b23eb7c2a
SHA512

716a6db1520316a097d4e49b3b7e71136295a36d049cde32a41f403c3d76cb140e6cc8ec794b603ccb3174d3cd20f25c66aa17039744e4cca75f54fd939c76e5
SSDEEP

98304:8YxnN5X/cR0dGODR0PdxvfOIreEMI/aNK4a1XF:8WIdxvGYeEMoaNkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d90c452d3bcdaf602f99e5aa3d00f7fc49eda48c1670b4e29504b02b23eb7c2a

Files

d90c452d3bcdaf602f99e5aa3d00f7fc49eda48c1670b4e29504b02b23eb7c2a
.exe windows:5 windows x86 arch:x86

3845118fda27af04b98bd75eed240861

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\合集包\2345pack\2345pack.jifen.2345custom_collection_miniui\bin\Win32\release_static\p5_kUserID.pdb

Imports

wininet

InternetCrackUrlW
InternetReadFile
InternetConnectW
InternetWriteFile
HttpSendRequestExW
HttpOpenRequestW
HttpEndRequestW
InternetCloseHandle
InternetSetOptionW
InternetQueryOptionW
HttpQueryInfoW
InternetGetConnectedState

gdiplus

GdipFree
GdipSetLineTransform
GdipSetTextureTransform
GdipGetBrushType
GdipAlloc
GdipCombineRegionPath
GdipCreateRegionPath
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathBezierI
GdipAddPathArcI
GdipAddPathLineI
GdipSetStringFormatTrimming
GdipGetStringFormatLineAlign
GdipSetStringFormatLineAlign
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetStringFormatAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipGetFontSize
GdiplusStartup
GdipCombineRegionRegion
GdipGetFontStyle
GdipGetFamily
GdipSetCompositingMode
GdipCreateHBITMAPFromBitmap
GdipDeleteFont
GdipCreateFont
GdipGetLineSpacing
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipGetFamilyName
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipEndContainer
GdipBeginContainer2
GdipRestoreGraphics
GdipSaveGraphics
GdipGetClipBoundsI
GdipSetClipRegion
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDrawImageRectRect
GdipFillPath
GdipFillEllipse
GdipFillRectangleI
GdipGraphicsClear
GdipDrawPath
GdipDrawRectangle
GdipDrawArcI
GdipDrawLine
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipMultiplyWorldTransform
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipSetCompositingQuality
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetImageAttributesWrapMode
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneBitmapArea
GdipGetImageGraphicsContext
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipGetLineTransform
GdipSetLineWrapMode
GdipSetLinePresetBlend
GdipCreateLineBrushI
GdipCreateSolidFill
GdipGetTextureTransform
GdipCreateTexture
GdipDeleteBrush
GdipCloneBrush
GdipTransformRegion
GdipDeleteRegion
GdipCloneRegion
GdipGetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix2
GdipCreateMatrix
GdipGetPathWorldBounds
GdipAddPathString
ord1
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipCloneBitmapAreaI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GetTimeFormatW
GetDateFormatW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
WaitForSingleObjectEx
RtlCaptureStackBackTrace
CreateTimerQueue
CreateSemaphoreW
GetStartupInfoW
TlsFree
UnhandledExceptionFilter
CompareStringW
RtlUnwind
ExitThread
GetCommandLineW
GetCPInfo
WriteConsoleW
GetFileType
GetStdHandle
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
GetSystemTimeAsFileTime
DuplicateHandle
EncodePointer
GetStringTypeW
AreFileApisANSI
SetConsoleCtrlHandler
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FatalAppExitA
ExitProcess
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetThreadTimes
FreeLibraryAndExitThread
SetProcessAffinityMask
ReleaseSemaphore
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
ReadConsoleW
SetStdHandle
WaitForMultipleObjectsEx
SetEnvironmentVariableA
GetThreadContext
HeapReAlloc
CreateMutexW
SetErrorMode
HeapAlloc
SetUnhandledExceptionFilter
HeapFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
HeapDestroy
RaiseException
GetLastError
SetLastError
HeapSize
DecodePointer
DeleteCriticalSection
ReleaseMutex
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GetModuleHandleW
SetThreadContext
GetModuleFileNameW
GetProcAddress
MulDiv
LocalAlloc
LocalFree
GetCurrentProcess
GlobalLock
GlobalAlloc
LeaveCriticalSection
lstrcmpW
GlobalUnlock
FlushInstructionCache
EnterCriticalSection
GetCurrentThreadId
GetFileSize
FindResourceW
LoadResource
CreateProcessW
CreateDirectoryW
WaitForSingleObject
SizeofResource
ReadFile
CreateFileW
LockResource
CloseHandle
Sleep
FormatMessageW
GetLocalTime
CreateEventW
GetTickCount
DeleteFileW
SetEvent
ResetEvent
InitializeCriticalSection
GetDriveTypeW
EndUpdateResourceW
GetLogicalDrives
TerminateThread
CopyFileW
BeginUpdateResourceW
GetExitCodeThread
UpdateResourceW
GetDiskFreeSpaceExW
CreateThread
GetFullPathNameW
GetFileAttributesW
lstrlenW
GetTempPathW
GetLongPathNameW
RemoveDirectoryW
SetFileAttributesW
GetSystemDirectoryW
ExpandEnvironmentStringsW
OpenProcess
GetVersionExW
TerminateProcess
Process32FirstW
WaitForMultipleObjects
Process32NextW
CreateToolhelp32Snapshot
GetCurrentProcessId
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GetSystemInfo
GetACP
lstrcatW
lstrcpyW
SearchPathW
FindFirstFileW
GetFileAttributesExW
GetShortPathNameW
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
GetFileTime
ResumeThread
FreeLibrary
GetExitCodeProcess
GetTempFileNameW
MoveFileExW
GetCurrentDirectoryW
MoveFileW
SetCurrentDirectoryW
GetWindowsDirectoryW
FindClose
FindNextFileW
SwitchToThread
TryEnterCriticalSection
OpenEventW
InterlockedExchangeAdd
GetComputerNameExW
SystemTimeToFileTime
InterlockedExchange
QueryDosDeviceW
OpenMutexW
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
GetLogicalDriveStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetFileSizeEx
GetVersion
GetCurrentThread
GlobalMemoryStatusEx
LoadLibraryExW
CreateWaitableTimerW
SetWaitableTimer
InterlockedCompareExchange
MapViewOfFileEx
VirtualProtect
GetModuleHandleExW
OutputDebugStringA
DisableThreadLibraryCalls
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleHandleA
HeapCreate
Thread32First
Thread32Next
OpenThread
SuspendThread
VirtualQuery
GetFullPathNameA
CreateFileA
HeapCompact
UnlockFile
FlushViewOfFile
LockFile
UnlockFileEx
FormatMessageA
GetFileAttributesA
HeapValidate
LockFileEx
CreateFileMappingA
GetDiskFreeSpaceA
GetVersionExA
GetTempPathA
GetSystemTime
DeleteFileA
DeviceIoControl
GetEnvironmentVariableW
FileTimeToDosDateTime
DosDateTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
LoadLibraryW
FreeResource

user32

ShowOwnedPopups
GetWindowPlacement
SetWindowPlacement
DeferWindowPos
BringWindowToTop
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextW
GetDlgItemTextW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
GetNextDlgGroupItem
GetNextDlgTabItem
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
SetTimer
KillTimer
IsWindowUnicode
IsWindowEnabled
GetMenu
SetMenu
HiliteMenuItem
DrawMenuBar
GetSystemMenu
UpdateWindow
SetActiveWindow
GetDCEx
GetWindowDC
GetUpdateRect
GetUpdateRgn
SetWindowRgn
GetWindowRgn
ValidateRect
ValidateRgn
LockWindowUpdate
ScrollWindow
ScrollWindowEx
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
EnableScrollBar
AdjustWindowRectEx
SetWindowContextHelpId
GetWindowContextHelpId
CreateCaret
HideCaret
ShowCaret
ChildWindowFromPoint
ChildWindowFromPointEx
GetWindowWord
SetWindowWord
SetParent
GetTopWindow
IsDialogMessageW
DlgDirListW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirSelectComboBoxExW
SetScrollInfo
GetScrollInfo
ArrangeIconicWindows
WinHelpW
SetCursor
GetCursorPos
IntersectRect
OffsetRect
EqualRect
EnumChildWindows
TrackMouseEvent
GetKeyState
GetClassLongW
FlashWindow
PtInRect
UnionRect
MsgWaitForMultipleObjects
LoadBitmapW
LoadImageW
SetRectEmpty
UpdateLayeredWindow
SetRect
SetCaretPos
GetKeyboardState
ToAscii
GetCaretBlinkTime
GetSystemMetrics
DrawIconEx
GetIconInfo
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
EnumThreadWindows
LoadStringW
GetAncestor
GetAsyncKeyState
GetPropW
SetPropW
RemovePropW
wsprintfW
EndPaint
ClientToScreen
DestroyWindow
GetWindowTextLengthW
DestroyAcceleratorTable
ScreenToClient
GetWindowRect
CharNextW
RegisterWindowMessageW
FillRect
IsChild
SetCapture
PostMessageW
GetFocus
GetParent
InvalidateRgn
LoadCursorW
GetClientRect
CreateAcceleratorTableW
SetFocus
BeginPaint
GetClassInfoExW
RegisterClassExW
InvalidateRect
GetWindowLongW
GetWindowTextW
GetClassNameW
GetDlgItem
SetWindowLongW
RedrawWindow
GetSysColor
SetWindowPos
IsWindow
CreateWindowExW
ReleaseCapture
SendMessageW
SetWindowTextW
CallWindowProcW
DefWindowProcW
CopyRect
GetWindow
MoveWindow
GetDC
ReleaseDC
UnregisterClassW
GetDesktopWindow
MessageBoxW
ShowWindowAsync
SendNotifyMessageW
IsRectEmpty
PostQuitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
IsIconic
IsZoomed
GetLastActivePopup
SetForegroundWindow
AttachThreadInput
GetForegroundWindow
SystemParametersInfoW
MonitorFromWindow
FindWindowExW
IsWindowVisible
MapWindowPoints
EnableWindow
GetDlgCtrlID
GetMonitorInfoW
GetWindowThreadProcessId
GetShellWindow
LoadIconW
EndDialog
ShowWindow
DialogBoxParamW
GetActiveWindow

gdi32

ExtTextOutW
GetDIBits
CreatePolygonRgn
SetBkColor
CreateRectRgnIndirect
SetWorldTransform
SetGraphicsMode
EnumFontsW
SetViewportOrgEx
GetRgnBox
CreateFontIndirectW
CreateDCW
CreateDIBSection
PtInRegion
CreateRoundRectRgn
GetClipBox
SetTextColor
GetObjectW
GetStockObject
CreateSolidBrush
GetDeviceCaps
BitBlt
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap

advapi32

OpenThreadToken
RegQueryValueExW
LookupAccountSidW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
CheckTokenMembership
GetUserNameW
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GetTokenInformation
CreateProcessAsUserW
SetTokenInformation
DuplicateTokenEx
GetLengthSid
RegOpenKeyExW

shell32

SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
DragAcceptFiles
SHGetFileInfoW
SHGetFolderLocation
SHGetMalloc
SHGetFolderPathW
SHChangeNotify
SHFileOperationW
SHGetDesktopFolder
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderPathW

ole32

CoTaskMemRealloc
StringFromGUID2
OleUninitialize
OleInitialize
CoCreateInstance
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
CoCreateGuid
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree

oleaut32

SysAllocStringLen
OleCreateFontIndirect
LoadRegTypeLi
VarUI4FromStr
VariantInit
LoadTypeLi
VariantClear
DispCallFunc
SysAllocString
SysStringLen
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
SysFreeString

shlwapi

PathFindFileNameW
StrDupW
PathAppendW
StrToIntA
ord12
SHAutoComplete

comctl32

_TrackMouseEvent
InitCommonControlsEx

msimg32

AlphaBlend

urlmon

CoInternetCreateZoneManager
CoInternetCreateSecurityManager

sensapi

IsNetworkAlive

imm32

ImmGetContext
ImmAssociateContextEx
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionWindow
ImmReleaseContext

winmm

timeGetTime

psapi

GetMappedFileNameW

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 719KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 390KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3845118fda27af04b98bd75eed240861

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

gdiplus

version

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

urlmon

sensapi

imm32

winmm

psapi

Sections

.text Size: 3.9MB - Virtual size: 3.9MB

.rdata Size: 719KB - Virtual size: 719KB

.data Size: 39KB - Virtual size: 66KB

.rsrc Size: 390KB - Virtual size: 390KB

.reloc Size: 193KB - Virtual size: 193KB

.text
Size: 3.9MB - Virtual size: 3.9MB

.rdata
Size: 719KB - Virtual size: 719KB

.data
Size: 39KB - Virtual size: 66KB

.rsrc
Size: 390KB - Virtual size: 390KB

.reloc
Size: 193KB - Virtual size: 193KB