fd667e7b53de0da431fe996f3905775cf0d0fbf3b6387920c06fb1657670eac3

Sharing

Copy URL Twitter E-mail

General

Target

fd667e7b53de0da431fe996f3905775cf0d0fbf3b6387920c06fb1657670eac3
Size

11.9MB
MD5

1dc6b315f736265f01226b8d5ef86f3d
SHA1

a9bcb461c8a71d9b6c7a9eddb449f5fb0e355fab
SHA256

fd667e7b53de0da431fe996f3905775cf0d0fbf3b6387920c06fb1657670eac3
SHA512

f0fed9757500010f68d98810f41d08726ce1e0304e9f3d5de8cd6b02b6b685b902415210febf2b6d743db4cfc8cfed20f858437441ed255bb150fa71702e75b1
SSDEEP

196608:3zKwEZ1KT5kSwNlOM7oPzNqeF+IJI5Z8j9PmyWnInCXjzilun9dyxUzogoLOHSqu:3OwEZ1KuYPzNqefIPMPmyRnOilu9d0NG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd667e7b53de0da431fe996f3905775cf0d0fbf3b6387920c06fb1657670eac3

Files

fd667e7b53de0da431fe996f3905775cf0d0fbf3b6387920c06fb1657670eac3
.exe windows:5 windows x86 arch:x86

eee4a9aa98067cd8732c97ee47c3281c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\work\i300\UpdateTools\iScanner-NtInstall\Release\iScanzilla Updater.pdb

Imports

kernel32

HeapReAlloc
ExitThread
CreateThread
Sleep
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
RtlUnwind
HeapAlloc
HeapFree
GetStartupInfoW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetTickCount
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
FileTimeToSystemTime
GetThreadLocale
lstrlenA
InterlockedIncrement
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentProcessId
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
InterlockedDecrement
GetModuleFileNameW
lstrlenW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
GetLastError
SetLastError
lstrcmpW
GetVersionExA
SetFileTime
GetFileAttributesW
WideCharToMultiByte
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
ReadFile
SetFilePointer
MultiByteToWideChar
ExitProcess
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDriveStringsW
FindClose
CreateDirectoryW
FindFirstFileW
WritePrivateProfileStringW
GetCurrentProcess
GetProcAddress
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
WriteFile
CreateFileW
GetModuleHandleW
SizeofResource
LockResource
LoadResource
FindResourceW

user32

RegisterClipboardFormatW
PostThreadMessageW
UnregisterClassW
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
EndPaint
BeginPaint
GetDC
ClientToScreen
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSubMenu
wsprintfW
CharUpperW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
ReleaseDC
FrameRect
GetWindowRect
CopyAcceleratorTableW
CharNextW
IsChild
GetWindowDC
LoadBitmapW
ModifyMenuW
GetSystemMenu
DrawIcon
GetSystemMetrics
IsIconic
TrackMouseEvent
GetWindowLongW
GetFocus
InflateRect
OffsetRect
MessageBoxW
UpdateWindow
KillTimer
SetTimer
PostMessageW
GrayStringW
DrawTextExW
TabbedTextOutW
SetRect
SendMessageW
DrawTextW
FillRect
LoadCursorW
SetCursor
IsWindow
CopyRect
SetWindowRgn
ReleaseCapture
PtInRect
GetClientRect
InvalidateRect
SetCapture
GetCapture
GetParent
GetActiveWindow
EnableWindow
GetWindowTextW

gdi32

ExtSelectClipRgn
GetDeviceCaps
CreatePen
ScaleWindowExtEx
SetWindowExtEx
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetClipBox
GetObjectW
SetTextColor
SetBkColor
CreateBitmap
CreateFontW
DeleteDC
SelectObject
CreateDIBSection
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
RoundRect
CreateSolidBrush
SetBkMode
GetTextExtentPoint32W
CreatePolygonRgn
GetStockObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegDeleteKeyW
RegSetValueExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CLSIDFromProgID
CoTaskMemFree
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
OleLoadPicture

gdiplus

GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipDrawImageRectRect
GdiplusStartup
GdipFree
GdipLoadImageFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipReleaseDC
GdipAlloc
GdiplusShutdown

uxtheme

DrawThemeParentBackground

Sections

.text
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.6MB - Virtual size: 11.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eee4a9aa98067cd8732c97ee47c3281c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

uxtheme

Sections

.text Size: 243KB - Virtual size: 242KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 11KB - Virtual size: 26KB

.rsrc Size: 11.6MB - Virtual size: 11.6MB

.reloc Size: 66KB - Virtual size: 65KB

.text
Size: 243KB - Virtual size: 242KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 11KB - Virtual size: 26KB

.rsrc
Size: 11.6MB - Virtual size: 11.6MB

.reloc
Size: 66KB - Virtual size: 65KB