a29e693445cb696525ea590f552a89a3f0057f71deb1c59f56858b18333be916

Sharing

Copy URL Twitter E-mail

General

Target

a29e693445cb696525ea590f552a89a3f0057f71deb1c59f56858b18333be916
Size

2.1MB
MD5

79458cf4645b38198e88151679c7aa78
SHA1

ce0e29105c663a304b0bfa665655708eeb369bd6
SHA256

a29e693445cb696525ea590f552a89a3f0057f71deb1c59f56858b18333be916
SHA512

c243c8397b8336889e7dbd1453848bb2e7004420612178fb43567f2c0ae9dfb3acbe1b4fd344cfbed602e39ae6c08c115da5618bc9a7a54510201861c68b37f8
SSDEEP

24576:wf2xM7lRUG/1SkN0bPNPgPtaNsg0TC5WD10zt9iEw5rRtzez3088r5cZ:o/15gPVHBkDe6tzez30PraZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a29e693445cb696525ea590f552a89a3f0057f71deb1c59f56858b18333be916

Files

a29e693445cb696525ea590f552a89a3f0057f71deb1c59f56858b18333be916
.dll windows:4 windows x86 arch:x86

99bb95afb97eaf847d1ccd8932c4d43e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleacc

ObjectFromLresult
AccessibleObjectFromWindow

imm32

ImmDisableIME
ImmGetContext
ImmGetCompositionStringA

kernel32

SuspendThread
GetCurrentThread
lstrcmpiA
GlobalAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
MulDiv
GlobalFlags
SizeofResource
GetProcessVersion
GetPrivateProfileIntW
WritePrivateProfileStringW
RtlUnwind
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
ExitThread
ExitProcess
GetTimeZoneInformation
GetSystemTime
HeapSize
HeapReAlloc
FatalAppExitA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
CreateEventW
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
QueryDosDeviceA
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
PulseEvent
InterlockedExchange
SleepEx
OpenSemaphoreW
OpenMutexW
ResetEvent
CancelIo
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
WaitNamedPipeW
SetNamedPipeHandleState
QueryPerformanceCounter
VirtualProtect
GetWindowsDirectoryA
CreateFileMappingA
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
EnumResourceLanguagesW
EnumResourceTypesW
EnumResourceNamesW
VirtualQuery
LoadLibraryExW
AllocConsole
WriteConsoleW
FreeConsole
MoveFileExW
MoveFileExA
RemoveDirectoryA
CopyFileA
CreateDirectoryA
MoveFileA
DeleteFileA
GetFileAttributesA
SetFileAttributesA
GetTempPathA
GetCurrentDirectoryA
GetSystemDirectoryA
GetVersionExW
FindResourceExW
SetThreadPriority
GetDiskFreeSpaceExW
DefineDosDeviceW
GetExitCodeThread
ReleaseMutex
CreateMutexW
ReleaseSemaphore
CreateSemaphoreW
SetLastError
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GlobalFree
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
lstrcpynW
GetVolumeInformationW
lstrcpyW
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
InterlockedIncrement
OpenEventW
SetEvent
GetLocalTime
GlobalSize
GetLocaleInfoW
IsBadWritePtr
GlobalLock
GlobalUnlock
IsDBCSLeadByte
CompareFileTime
GetWindowsDirectoryW
InterlockedDecrement
GetPrivateProfileStringW
GetProfileStringW
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
lstrlenW
lstrlenA
TerminateProcess
GetPriorityClass
SetPriorityClass
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
CreateDirectoryW
CreateFileW
SetFilePointer
SetEndOfFile
WriteFile
OutputDebugStringW
GetEnvironmentVariableW
GetTempPathW
CreateFileMappingW
GetLogicalDriveStringsW
QueryDosDeviceW
MoveFileW
CopyFileW
GetFileAttributesW
SetFileAttributesW
lstrcmpW
RemoveDirectoryW
DeleteFileW
GetSystemInfo
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
LocalFree
OpenProcess
GetCurrentProcess
CreateThread
GetModuleHandleA
GetFileInformationByHandle
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
GetFileTime
GetFileSize
ReadFile
WaitForSingleObject
TerminateThread
HeapDestroy
GetCurrentThreadId
GetTickCount
LoadLibraryA
Sleep
FindResourceW
LoadResource
LockResource
FormatMessageW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
GetModuleFileNameA
FreeLibrary
LoadLibraryW
GetLastError
GetProcAddress
GetCurrentDirectoryW
GetModuleFileNameW
GetSystemDirectoryW
ResumeThread
lstrcmpA
FormatMessageA
WaitForMultipleObjects
IsValidLocale
SetVolumeLabelW

user32

CheckDlgButton
LoadIconW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
CheckRadioButton
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
GetKeyState
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
ScrollWindowEx
SetPropW
UnhookWindowsHookEx
GetPropW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetSystemMetrics
CharUpperW
wsprintfW
GetDlgItemInt
GetMenu
GetDlgItemTextW
InvalidateRect
BeginPaint
EndPaint
GetClientRect
GetCursorPos
SetCursorPos
keybd_event
GetWindowDC
CreateWindowExW
SetWindowPos
ShowWindow
DestroyWindow
FindWindowW
AttachThreadInput
GetCaretPos
GetFocus
MapVirtualKeyW
SendInput
SetFocus
SetCaretPos
OpenClipboard
IsDialogMessageW
SetWindowTextW
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
LoadBitmapW
GetMenuCheckMarkDimensions
MsgWaitForMultipleObjects
ValidateRect
TranslateMessage
GetMessageW
PostQuitMessage
ShowOwnedPopups
SetCursor
UnregisterClassW
LoadStringW
PtInRect
ClientToScreen
GetDialogBaseUnits
TabbedTextOutW
DrawTextW
GrayStringW
LoadCursorW
GetSysColorBrush
DestroyMenu
InsertMenuW
DeleteMenu
GetMenuStringW
AppendMenuW
RemoveMenu
wvsprintfW
GetClipboardData
CloseClipboard
SendMessageA
CharNextW
GetDlgItem
MessageBoxA
GetProcessWindowStation
IsChild
InternalGetWindowText
GetWindowTextLengthW
GetInputState
GetDC
ReleaseDC
GetDlgCtrlID
EnumChildWindows
SetWindowsHookExW
CallNextHookEx
GetCursorInfo
GetWindowTextW
GetWindowTextA
IsWindowVisible
EnumDesktopWindows
MessageBoxW
OpenWindowStationW
SetProcessWindowStation
CloseWindowStation
GetUserObjectInformationW
OpenInputDesktop
OpenDesktopW
GetThreadDesktop
SetThreadDesktop
CloseDesktop
PostMessageW
SendMessageW
ChangeClipboardChain
KillTimer
SetTimer
SetWindowLongW
SetClipboardViewer
CallWindowProcW
IsWindowEnabled
EnableWindow
GetActiveWindow
SetActiveWindow
IsWindow
RegisterWindowMessageW
GetForegroundWindow
GetDesktopWindow
EnumWindows
GetWindowThreadProcessId
GetWindowLongW
GetWindow
GetWindowRect
GetParent
GetClassNameW
FindWindowExW
SetWindowPlacement

gdi32

GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
SetTextJustification
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
SetMapperFlags
ExtTextOutW
Escape
CopyMetaFileW
CreateDCW
SelectObject
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
TextOutW
SetTextCharacterExtra
SelectPalette
RestoreDC
SaveDC
StartDocW
DeleteDC
GetStockObject
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetPixel
CreateCompatibleDC
BitBlt
DeleteObject
GetViewportExtEx
GetDeviceCaps
CreateDCA
GetObjectA
GetBitmapBits
CreateCompatibleBitmap

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegConnectRegistryW
RegSetValueExA
RegEnumKeyW
RegQueryInfoKeyW
RegEnumValueW
RegCreateKeyA
RegCreateKeyExA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegOpenKeyA
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
LookupAccountNameW
SetSecurityDescriptorDacl
GetAce
AddAccessAllowedAce
InitializeAcl
RegSetValueW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
GetUserNameA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
GetTokenInformation
LookupAccountSidW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegQueryValueExW
RegCloseKey
GetUserNameW
GetLengthSid
InitializeSecurityDescriptor
RegQueryValueExA

shell32

SHGetFileInfoW
DragAcceptFiles

comctl32

ord17

ole32

CoInitializeEx
CoUninitialize
CoCreateGuid
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoDisconnectObject
CoInitialize

oleaut32

GetErrorInfo
SysReAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
VarBstrFromCy
VarCyFromStr
SysStringByteLen
VariantChangeType
SafeArrayRedim
VariantClear
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
VariantCopy
SysFreeString
SysStringLen
VariantInit
SetErrorInfo
CreateErrorInfo
DosDateTimeToVariantTime

ws2_32

inet_ntoa
WSACleanup
WSAGetLastError
sendto
recv
send
getsockopt
getsockname
getpeername
gethostbyname
ntohs
listen
shutdown
closesocket
connect
socket
WSAIoctl
htons
htonl
bind
recvfrom
gethostname
WSAStartup
accept
ntohl
setsockopt

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

?QueryInterface@@YGPAXK@Z
GetDealDlgWnd
GetIMCtrlDataFromCD
SetAgentInfo
SetNotRecordContentFlag
SetNotRecordFlag
SetPhotoWarningInfo
SetUseCtrlAFlag
StartDeal
StopDeal

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 216KB - Virtual size: 773KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99bb95afb97eaf847d1ccd8932c4d43e

Headers

File Characteristics

Imports

oleacc

imm32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

ws2_32

version

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 176KB - Virtual size: 175KB

.data Size: 216KB - Virtual size: 773KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 108KB - Virtual size: 105KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 176KB - Virtual size: 175KB

.data
Size: 216KB - Virtual size: 773KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 108KB - Virtual size: 105KB