2dbe082e32040b1c09c89250ad2318cf9db1c4d6f9f3610678e3b5a76ba2ace1

Sharing

Copy URL Twitter E-mail

General

Target

2dbe082e32040b1c09c89250ad2318cf9db1c4d6f9f3610678e3b5a76ba2ace1
Size

1.3MB
MD5

03b9334ba4afe8275c67dab430e5a14e
SHA1

cdf964fcf7fd803024134b18b96e752670f85d4c
SHA256

2dbe082e32040b1c09c89250ad2318cf9db1c4d6f9f3610678e3b5a76ba2ace1
SHA512

2c8397c444f7a9ce66fbf8dcf056ba8329197b5dc97fc748aeeabf5601309e8030e703237b3fee5e442c019c2669fa73e686906662da37dcc6d24a4c72f35af4
SSDEEP

24576:vyxf4MYloLhkMEmiG2lZjm94e6OF7Oyt9W8dJODgVxyP4:vEQEkMEm2vmuR2j9W8dJODgVI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dbe082e32040b1c09c89250ad2318cf9db1c4d6f9f3610678e3b5a76ba2ace1

Files

2dbe082e32040b1c09c89250ad2318cf9db1c4d6f9f3610678e3b5a76ba2ace1
.exe windows:5 windows x86 arch:x86

4287e63580c27be2c4a416e100fc8e9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\代码\SVN\无限项目\功能插件\服务端\插件_新\WXFPlugin\Bin\LoginGate\Release\LoginGate.pdb

Imports

kernel32

GetTickCount
CreateIoCompletionPort
FreeLibrary
GetModuleHandleA
GetQueuedCompletionStatus
GetLastError
FormatMessageW
WideCharToMultiByte
TryEnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
GetACP
GlobalLock
GlobalUnlock
GetFileSize
ReadFile
lstrlenA
GetModuleFileNameA
CreateFileA
MulDiv
IsDBCSLeadByte
lstrcmpiA
lstrcpyA
ExitProcess
WriteFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
GetPrivateProfileStringA
GetFileAttributesA
LocalFree
FormatMessageA
GetCurrentProcessId
GlobalAlloc
lstrcpynA
InterlockedIncrement
InterlockedDecrement
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwind
ExitThread
GetModuleHandleExW
GetStdHandle
HeapAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
HeapReAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
WriteConsoleW
CreateFileW
GetPrivateProfileIntA
IsBadReadPtr
GetLocalTime
OutputDebugStringA
GetProcAddress
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CancelIoEx
PostQueuedCompletionStatus
GetCurrentThreadId
CreateDirectoryA
LoadResource
CloseHandle
LockResource
GetCommandLineA
FreeResource
GetCurrentDirectoryA
FindResourceA
LocalFileTimeToFileTime
SizeofResource

user32

GetWindowLongA
SetWindowLongA
GetParent
GetWindow
LoadImageA
MonitorFromWindow
GetMonitorInfoA
DefWindowProcA
CallWindowProcA
RegisterClassA
RegisterClassExA
RegisterClassExW
GetClassInfoExA
GetClassInfoExW
CreateWindowExW
ShowWindow
EnableWindow
GetSystemMetrics
SetPropA
GetPropA
IsWindowEnabled
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuA
TrackPopupMenu
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
ClientToScreen
MoveWindow
SetForegroundWindow
SetWindowRgn
MessageBoxA
UpdateLayeredWindow
GetWindowRgn
CharPrevA
DrawTextA
DrawTextW
FillRect
SetRect
PtInRect
EqualRect
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
CreateAcceleratorTableA
InvalidateRgn
GetGUIThreadInfo
GetKeyboardLayout
GetKeyNameTextA
MapVirtualKeyExA
GetSysColor
MapWindowPoints
ScreenToClient
GetCursorPos
GetClientRect
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
ReleaseCapture
GetKeyState
GetFocus
GetActiveWindow
SetFocus
IsZoomed
IsIconic
IsWindowVisible
SetWindowPos
IsWindow
CreateWindowExA
PostMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
OffsetRect
UnionRect
InflateRect
SetCursor
CharNextA
wsprintfA
PostQuitMessage
KillTimer
SendMessageA
SetTimer
DestroyWindow
GetWindowRect
IsRectEmpty
UpdateWindow
IntersectRect
SetCapture

ole32

CoInitialize
CoUninitialize
OleUninitialize
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
ReleaseStgMedium
OleDuplicateData
DoDragDrop
CoCreateInstance
OleInitialize

ws2_32

recv
getsockopt
connect
htons
WSAPoll
ioctlsocket
socket
getsockname
accept
bind
closesocket
gethostname
gethostbyname
listen
inet_pton
WSAStartup
WSARecv
inet_ntop
setsockopt
WSASend
send
WSAGetLastError
getpeername

gdi32

SaveDC
SelectObject
CloseEnhMetaFile
CreateEnhMetaFileA
GetEnhMetaFileHeader
PlayEnhMetaFile
GetTextMetricsA
GetObjectA
SetWindowOrgEx
CreateRoundRectRgn
CreateRectRgn
PtInRegion
CreateDIBSection
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
Rectangle
GetCharABCWidthsA
RemoveFontMemResourceEx
GetClipBox
GetTextExtentPoint32A
LineTo
SelectClipRgn
ExtSelectClipRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectA
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
SetTextColor
RestoreDC
AddFontMemResourceEx
CreateSolidBrush
BitBlt
CreatePen
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
MoveToEx
SetBitmapBits
GetBitmapBits
GetTextExtentPointA
CreatePatternBrush
GdiFlush
TextOutA

shell32

DragQueryFileA

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantClear
SysAllocStringLen

comctl32

ord17
InitCommonControlsEx
_TrackMouseEvent

gdiplus

GdipDrawImageRectRect
GdipDrawImageI
GdipDrawLine
GdipCreateBitmapFromScan0
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipCreatePath
GdipDeletePath
GdipAddPathLine
ord1
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipSetPenDashStyle
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCloneImage
GdipDisposeImage
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipReleaseDC
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipDrawRectangleI
GdipDrawPath
GdipFillRectangleI
GdipFillPath
GdipCreateFromHDC
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipSetStringFormatHotkeyPrefix
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipDrawImageRectI
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipCreatePen2
GdipSetPenStartCap
GdipSetPenEndCap

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

Sections

.text
Size: 721KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4287e63580c27be2c4a416e100fc8e9b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

ws2_32

gdi32

shell32

oleaut32

comctl32

gdiplus

imm32

Sections

.text Size: 721KB - Virtual size: 720KB

.rdata Size: 189KB - Virtual size: 188KB

.data Size: 26KB - Virtual size: 34KB

.rsrc Size: 387KB - Virtual size: 386KB

.reloc Size: 50KB - Virtual size: 49KB

.text
Size: 721KB - Virtual size: 720KB

.rdata
Size: 189KB - Virtual size: 188KB

.data
Size: 26KB - Virtual size: 34KB

.rsrc
Size: 387KB - Virtual size: 386KB

.reloc
Size: 50KB - Virtual size: 49KB