066db045806031cb1216dac03296393ab9094fae80f1c66fcff7793ed59292a2

Sharing

Copy URL Twitter E-mail

General

Target

066db045806031cb1216dac03296393ab9094fae80f1c66fcff7793ed59292a2
Size

8.5MB
MD5

6a85bfd7075f833eed6feae8e4b4eafb
SHA1

efb19f6b2b53fef043537b2ee3f1802cd66c6396
SHA256

066db045806031cb1216dac03296393ab9094fae80f1c66fcff7793ed59292a2
SHA512

3915f8598b061250ac8c0d78a663f5386decfb3a59ce1bf6e8b41e2a76e8d407851de20d655a1454bc0d1fc2ea495ced606f9ffa866ec0cf9f581a0fced35c36
SSDEEP

24576:ekTdHVZbf41Latfp5l8dfRyJqVz+CKM087sZ6c9AM0lNuk2lGsw4vYq+wsZaWghO:XVVxyH08UAM0lNukuG8Yq+ZaWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066db045806031cb1216dac03296393ab9094fae80f1c66fcff7793ed59292a2

Files

066db045806031cb1216dac03296393ab9094fae80f1c66fcff7793ed59292a2
.exe windows:4 windows x86 arch:x86

730a7c8c1d1804a1cc4f0e9d75f1a718

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

EnumProcesses
GetModuleBaseNameA

iimagesevaluate_200v

iImagesEvaluate_200V
MagAnalysis_5MagLine_Batch_CM200V
MagAnalysis_Yellow_Batch_CM200V

iimagesevaluatedll_cm100v

?MagAnalysis_Yellow_Batch_CM100V@@YAHVCString@@PAMHH@Z
?UVAnalysis_White_Batch@@YAHVCString@@PAMH@Z
?UVAnalysis_Yellow_Batch@@YAHVCString@@PAMH@Z
?iImagesEvaluate_100V@@YAHVCString@@PAMPAH2@Z
?MagAnalysis_5MagLine_Batch_CM100V@@YAHVCString@@PAMHHHHHHH@Z

thksignalanalysis_200v

ThkSignalAnalysis_200V

md5_dll

?Safety_MD5Encode@@YAXPAD0@Z

autosortpara

?MainSortPara@@YAEVCString@@EHHPAHPAE2@Z

minizipdll

CreateZipFromDir2
ExtractFileFromZip2

readimagedll

?ReadImage@@YAHPADPAEAAG2_N@Z

authlicukey

??0OExtAuthLic@@QAE@XZ
?iGetUKeyStatus@OExtAuthLic@@QAEHXZ
??1OExtAuthLic@@QAE@XZ

etool_nv_dll

?EvaluateInterface@@YAEEVCString@@EPAE@Z

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

kernel32

RtlUnwind
HeapFree
HeapAlloc
SetEnvironmentVariableA
GetDriveTypeA
RaiseException
GetStartupInfoA
ExitProcess
ExitThread
GetTimeZoneInformation
GetSystemTime
GetACP
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetErrorMode
GetFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
lstrlenW
MulDiv
lstrcmpA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
SuspendThread
SetThreadPriority
SetEvent
FindNextFileA
FindFirstFileA
SetLastError
FindClose
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
LockResource
FindResourceA
LoadResource
FormatMessageA
lstrlenA
InterlockedIncrement
WaitForSingleObject
GetOverlappedResult
CreateEventA
DeviceIoControl
CreateFileA
GetLastError
WritePrivateProfileSectionA
ResumeThread
GetExitCodeThread
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
GlobalAlloc
GlobalFree
lstrcpyA
GetFileAttributesA
SetFileAttributesA
SetCurrentDirectoryA
GetModuleFileNameA
WinExec
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
OpenProcess
TerminateProcess
GetPrivateProfileSectionA
Sleep
CreateThread
CloseHandle
DeleteFileA
RemoveDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
InterlockedDecrement
LocalFree
GetProfileStringA
GetCommandLineA

user32

GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
LoadStringA
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
DestroyMenu
PostQuitMessage
CharUpperA
GetMessageA
ValidateRect
GetCursorPos
wvsprintfA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckRadioButton
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
ScreenToClient
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
CharNextA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
SendMessageA
SetTimer
KillTimer
GetSystemMetrics
IsWindowVisible
EnableWindow
LoadIconA
GetClientRect
GetParent
SetMenu
LoadMenuA
AppendMenuA
GetSystemMenu
DrawIcon
IsIconic
PostMessageA
UpdateWindow
DispatchMessageA
TranslateMessage
PeekMessageA
GetSysColor
FillRect
SetRect
InvalidateRect
IsWindow
LockWindowUpdate
TabbedTextOutA
RegisterDeviceNotificationA
UnregisterDeviceNotification
SetCursor
RedrawWindow
LoadBitmapA
InflateRect
GetDC
ReleaseDC
GetWindowRect
PostThreadMessageA
GrayStringA
DrawTextA
SendDlgItemMessageA

gdi32

GetViewportExtEx
GetWindowExtEx
CreatePen
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
LineTo
MoveToEx
IntersectClipRect
ScaleWindowExtEx
RectVisible
PtVisible
GetTextExtentPointA
CreateDIBitmap
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteObject
GetStockObject
CreateFontIndirectA
Ellipse
SelectPalette
RealizePalette
CreateDIBSection
SelectObject
StretchBlt
GetDeviceCaps
GetSystemPaletteEntries
SetSystemPaletteUse
CreatePalette
GetObjectA
GetDIBits
Escape
ExtTextOutA
TextOutA
CreateSolidBrush
SetWindowExtEx

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

comctl32

ImageList_Destroy
ord17

oledlg

ord8

ole32

CoGetClassObject
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
OleInitialize
CoCreateInstance
OleFlushClipboard
OleRun
OleIsCurrentClipboard
CoRevokeClassObject
OleUninitialize
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoDisconnectObject
CoFreeUnusedLibraries

olepro32

ord253

oleaut32

GetErrorInfo
VariantChangeType
VariantCopy
VariantClear
SysAllocStringByteLen
SysStringByteLen
VariantInit
SysFreeString
SysAllocStringLen
SysAllocString
VariantTimeToSystemTime
SysStringLen
LoadTypeLi

devbasedll

?iGetVersion@ODevBase@@UAEHPAD@Z
?iGetDevVersion@ODevBase@@UAEHPAD@Z
?iGetStatus@ODevBase@@UAEHPAUtDevReturn@@@Z
?bGetBreakAsynRecvFlag@ODevBase@@UAE_NXZ
?iTest@ODevBase@@UAEHPAUtDevReturn@@@Z
?vOnDataReceived@ODevBase@@UAEXPADH@Z
?iInitComm2@ODevBase@@QAEHUtCommCfg2@@_N@Z
?iGetDefaultCommConfig2@ODevBase@@QAEHAAUtCommCfg2@@@Z
?iGetErrorFlag@ODevBase@@QAEHXZ
?iPreInitDev@ODevBase@@QAEHXZ
?vSetLogicalDevName@ODevBase@@QAEXPBD@Z
?vSetErrorFlag@ODevBase@@QAEXUtDevReturn@@@Z
?vSetBreakAsynRecvFlag@ODevBase@@UAEX_N@Z
?vCallProcFun@ODevBase@@UAEXHPADHPBX@Z
??0ODevBase@@QAE@XZ
??1ODevBase@@UAE@XZ
?iCloseComm2@ODevBase@@QAEHXZ
?iInit@ODevBase@@UAEHPAUtDevReturn@@@Z
?iSendCommand2@ODevBase@@QAEHPBEIF_N1@Z
?iWaitResult2@ODevBase@@QAEHPAEAAIIF_N@Z

Sections

.text
Size: 820KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.5MB - Virtual size: 131.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

730a7c8c1d1804a1cc4f0e9d75f1a718

Headers

File Characteristics

Imports

psapi

iimagesevaluate_200v

iimagesevaluatedll_cm100v

thksignalanalysis_200v

md5_dll

autosortpara

minizipdll

readimagedll

authlicukey

etool_nv_dll

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

devbasedll

Sections

.text Size: 820KB - Virtual size: 816KB

.rdata Size: 104KB - Virtual size: 101KB

.data Size: 2.5MB - Virtual size: 131.6MB

.rsrc Size: 5.1MB - Virtual size: 5.1MB

.text
Size: 820KB - Virtual size: 816KB

.rdata
Size: 104KB - Virtual size: 101KB

.data
Size: 2.5MB - Virtual size: 131.6MB

.rsrc
Size: 5.1MB - Virtual size: 5.1MB