5e720b8de696089504ee6e5feafeccb5683003c05dbc6958d397c32c3cd77ada

Sharing

Copy URL Twitter E-mail

General

Target

5e720b8de696089504ee6e5feafeccb5683003c05dbc6958d397c32c3cd77ada
Size

2.4MB
MD5

a19c6e87bf80c7d7fa683879e369b4e0
SHA1

b268490a2188d231c962236fbea19a5e36725bb6
SHA256

5e720b8de696089504ee6e5feafeccb5683003c05dbc6958d397c32c3cd77ada
SHA512

92f392df2c5acb112e34b5ffa5ad322684cdb8fae01a75e024431e29b715968b769779ebcb860229b5c6935ef4e9f4281efe1d52880007fcb883c8f3bbc50739
SSDEEP

49152:GfEHiaGXJ0g8olcmJ9q2ZqfDUTyCHgCwb/2QL6dFp/wrnLzW:pZUJhfZqfDUTyEq+QL6dFp/wrnLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e720b8de696089504ee6e5feafeccb5683003c05dbc6958d397c32c3cd77ada

Files

5e720b8de696089504ee6e5feafeccb5683003c05dbc6958d397c32c3cd77ada
.exe windows:6 windows x86 arch:x86

28635ea80ed3300fa9f22b7a5a9800ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\办公软件\VC++安装程序\常用程序源代码\MGL-Eone Control System V1.3\Release\MGL-Eone Control System V1.3.pdb

Imports

kernel32

SetFilePointerEx
GetTimeZoneInformation
LCMapStringW
GetStringTypeW
GetStdHandle
ExitProcess
GetFileType
SetStdHandle
QueryPerformanceFrequency
GetConsoleMode
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
RtlUnwind
OutputDebugStringW
ReadConsoleW
GetConsoleCP
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProfileIntA
GetTickCount
SearchPathA
GetWindowsDirectoryA
GetTempFileNameA
GetTempPathA
FindResourceExW
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetACP
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetThreadLocale
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
InitializeCriticalSectionAndSpinCount
lstrcmpA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
ResumeThread
SuspendThread
SetThreadPriority
GetCurrentThreadId
CreateEventA
WaitForSingleObject
SetEvent
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
OutputDebugStringA
SetLastError
CopyFileA
FormatMessageA
LocalFree
GlobalFree
GlobalSize
GlobalAlloc
GetModuleFileNameA
GetCurrentProcessId
MulDiv
GlobalUnlock
GlobalLock
TerminateThread
GetExitCodeThread
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
PurgeComm
Sleep
ClearCommError
SetCommMask
ReadFile
WriteFile
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
SetupComm
CreateFileA
lstrcmpiA
lstrlenA
FreeResource
FindResourceA
FindResourceW
LoadResource
LockResource
SizeofResource
GetCPInfo
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapQueryInformation
WriteConsoleW

user32

LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
RealChildWindowFromPoint
ShowOwnedPopups
IsZoomed
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
CharUpperA
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetFocus
SetFocus
TranslateAcceleratorA
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
UpdateLayeredWindow
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
IntersectRect
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
GetMenuStringA
GetLastActivePopup
EnableScrollBar
UnionRect
MonitorFromPoint
CopyRect
GetSysColor
FillRect
DrawEdge
SetRect
GetWindowThreadProcessId
MessageBoxA
IsWindowEnabled
ScreenToClient
EndPaint
BeginPaint
GetWindowDC
SetWindowLongA
PtInRect
SetRectEmpty
IsWindow
UnregisterClassA
KillTimer
DrawIcon
IsIconic
SetTimer
GetSystemMenu
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
LoadCursorA
CopyImage
GetAsyncKeyState
IsRectEmpty
SetParent
SetLayeredWindowAttributes
LoadCursorW
EnumDisplayMonitors
LoadIconW
LoadImageA
CreateIconIndirect
GetIconInfo
DrawStateA
GetClientRect
DrawFocusRect
OffsetRect
InflateRect
TrackMouseEvent
SetCapture
LoadMenuW
SetWindowRgn
MessageBeep
NotifyWinEvent
GetMenuDefaultItem
GetDlgCtrlID
SetMenuDefaultItem
GetMenuItemInfoA
DrawTextA
SystemParametersInfoA
DrawIconEx
DestroyIcon
GetSystemMetrics
GetDesktopWindow
GetDC
ReleaseDC
AppendMenuA
GetMenuItemCount
InsertMenuA
ModifyMenuA
GetMenuState
GetMenuItemID
CreateMenu
CreatePopupMenu
GetSysColorBrush
LoadBitmapW
RemoveMenu
DeleteMenu
GetSubMenu
EnableWindow
TabbedTextOutA
DrawTextExA
GrayStringA
DestroyCursor
GetWindowLongA
SendMessageA
IsMenu
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
ClientToScreen
WindowFromPoint
GetActiveWindow
GetWindowRect
PostMessageA
FrameRect
LoadImageW
WaitMessage
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
LockWindowUpdate
DrawFrameControl
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
GetWindowRgn
GetComboBoxInfo
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
InvertRect
HideCaret
PostThreadMessageA
CopyIcon
CharUpperBuffA
RegisterClipboardFormatA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongA
SetCursorPos
CallNextHookEx
DestroyAcceleratorTable

gdi32

CreateBitmap
SetBkColor
SetTextColor
CreatePatternBrush
CreateRectRgn
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
GetStockObject
ScaleWindowExtEx
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
GetBkColor
GetTextMetricsA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
GetRgnBox
EnumFontFamiliesExA
CreateEllipticRgn
CreatePolygonRgn
Polygon
Polyline
RealizePalette
StretchBlt
SetDIBColorTable
OffsetRgn
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Rectangle
CreateHatchBrush
PatBlt
SetPixel
GetPixel
GetObjectA
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
Ellipse
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateFontIndirectA
GetBkMode
CreatePen
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
ScaleViewportExtEx
CreateSolidBrush
CreateCompatibleDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA

shell32

SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
DragQueryFileA
SHAppBarMessage
ShellExecuteA
ShellExecuteExA
DragFinish

comctl32

ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathFileExistsA
StrFormatKBSizeA

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeText

ole32

CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantChangeType
VariantClear
SysAllocStringByteLen
VariantInit
SysFreeString
SysAllocStringLen

oledlg

ord8

gdiplus

GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28635ea80ed3300fa9f22b7a5a9800ff

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 337KB - Virtual size: 336KB

.data Size: 23KB - Virtual size: 49KB

.gfids Size: 107KB - Virtual size: 107KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 303KB - Virtual size: 302KB

.reloc Size: 133KB - Virtual size: 132KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 337KB - Virtual size: 336KB

.data
Size: 23KB - Virtual size: 49KB

.gfids
Size: 107KB - Virtual size: 107KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 303KB - Virtual size: 302KB

.reloc
Size: 133KB - Virtual size: 132KB