a7941e1a4a06a2ca40bd13f95372dcb11069158eac85c322589b536b83b50273

Sharing

Copy URL Twitter E-mail

General

Target

a7941e1a4a06a2ca40bd13f95372dcb11069158eac85c322589b536b83b50273
Size

2.4MB
MD5

5b77cc25d9697d1aac24c8a9b50d2b47
SHA1

1baab29d530225bc2976a74714206951bd9b06ed
SHA256

a7941e1a4a06a2ca40bd13f95372dcb11069158eac85c322589b536b83b50273
SHA512

7026fe2321126884b17d3970636aae390b090c1bf7ffc86d4eeb82a5655857b27075e7babb94293d93b3d226d07be15476424ee32169d003c0e1ae8133558fae
SSDEEP

24576:873NRnLDxJ0oxhSn5I7LxZBvqzTTnnjF9Hu/uRtxXLuPb+u5Dlfz1mk+6hL/AilX:7o7Sn5I7hyz3PUWLuyCn+m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7941e1a4a06a2ca40bd13f95372dcb11069158eac85c322589b536b83b50273

Files

a7941e1a4a06a2ca40bd13f95372dcb11069158eac85c322589b536b83b50273
.exe windows:4 windows x86 arch:x86

084e98536a524e12de6e73e1ed528416

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime
mixerClose
mixerSetControlDetails
mixerOpen
mixerGetNumDevs
waveOutGetNumDevs
waveInGetNumDevs

kernel32

CreateThread
GetFileType
SetStdHandle
HeapReAlloc
RaiseException
GetLocalTime
GetSystemTime
RtlUnwind
ExitProcess
GetTimeZoneInformation
ResumeThread
ExitThread
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
SetFilePointer
GetStartupInfoA
TlsAlloc
TlsGetValue
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
HeapSize
FlushFileBuffers
ReadFile
IsBadReadPtr
IsBadCodePtr
GetACP
OutputDebugStringA
GetStdHandle
SetEndOfFile
GlobalReAlloc
LocalFree
CreateFileW
WriteFile
SetLastError
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleHandleA
InterlockedExchange
CompareStringA
HeapDestroy
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
TerminateProcess
GetVersion
IsBadWritePtr
GetCurrentProcessId
GetModuleFileNameA
lstrcpynA
SetEvent
CloseHandle
WaitForSingleObject
GlobalDeleteAtom
LoadLibraryA
GetLastError
LoadResource
LockResource
SizeofResource
GlobalFree
FreeResource
GetTickCount
IsBadStringPtrA
FreeLibrary
InitializeCriticalSection
MulDiv
DeleteCriticalSection
GlobalAlloc
GlobalLock
lstrcpyA
GlobalUnlock
GetCurrentProcess
FlushInstructionCache
lstrlenA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
InterlockedIncrement
InterlockedDecrement
GetStringTypeA
LCMapStringA
CreateFileA
GetOEMCP
SetEnvironmentVariableA
TlsSetValue

user32

AdjustWindowRect
EnumClipboardFormats
GetClipboardData
DestroyCursor
DeleteMenu
CheckMenuRadioItem
GetForegroundWindow
CheckMenuItem
EnableMenuItem
TrackPopupMenuEx
DrawIconEx
CallNextHookEx
DrawFrameControl
UnhookWindowsHookEx
MessageBeep
GetWindowThreadProcessId
IsIconic
EnumDesktopWindows
SetMenu
SetMenuDefaultItem
PostQuitMessage
LoadStringA
IsZoomed
GetMenuItemRect
TranslateMessage
MsgWaitForMultipleObjects
SetForegroundWindow
BringWindowToTop
SendMessageA
DestroyIcon
CheckRadioButton
GetKeyState
GetScrollInfo
GetDlgItemInt
SetDlgItemInt
CheckDlgButton
IsDlgButtonChecked
GetDialogBaseUnits
GetDesktopWindow
GetFocus
IsChild
SetWindowRgn
SystemParametersInfoA
DestroyWindow
GetSysColorBrush
GetSystemMenu
IsMenu
FillRect
GetMessagePos
SetFocus
SetRectEmpty
IsWindowEnabled
DrawEdge
GetSystemMetrics
InflateRect
DrawFocusRect
SetCapture
GetCapture
UpdateWindow
GetDlgCtrlID
ReleaseCapture
GetMenu
AdjustWindowRectEx
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetParent
EqualRect
GetSysColor
GetDlgItem
EndPaint
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
WindowFromPoint
SetRect
MoveWindow
SetTimer
KillTimer
IsWindowVisible
BeginPaint
FrameRect
GetSubMenu
InvalidateRect
GetCursorPos
ScreenToClient
SetCursor
GetDC
RemoveMenu
GetMenuItemCount
ShowWindow
GetActiveWindow
RedrawWindow
ReleaseDC
PtInRect
OffsetRect
ClientToScreen
TrackPopupMenu
DestroyMenu
CopyRect
GetWindowDC
IsWindow
EndDialog
GetParent
GetWindow
GetWindowRect
GetClientRect
MapWindowPoints
SetWindowPos
InvalidateRgn

gdi32

DeleteMetaFile
PlayMetaFile
SetViewportExtEx
SetWindowExtEx
CreatePalette
GetSystemPaletteEntries
GetDIBits
RealizePalette
SelectPalette
Polygon
GetPixel
GetMapMode
SetMapMode
DeleteObject
SelectObject
SetTextColor
SetBkMode
DeleteDC
SetBkColor
StretchBlt
CreateCompatibleDC
GetCurrentObject
CreateSolidBrush
SetStretchBltMode
DPtoLP
GetDeviceCaps
FillRgn
CreatePolygonRgn
PatBlt
CreatePatternBrush
CreateBitmap
CreateRectRgnIndirect
RestoreDC
SaveDC
CreateFontW
Ellipse
SetWindowOrgEx
CreateDIBSection
SetBrushOrgEx
Rectangle
GetStockObject
FloodFill
CreateCompatibleBitmap
BitBlt
CreateRectRgn
MoveToEx
SetPixel
RoundRect
LineTo
CreatePen
CreateRoundRectRgn
CombineRgn

shell32

SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

CoInitializeEx
OleSetContainedObject
CoInitialize
CoUninitialize
OleLockRunning
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CreateILockBytesOnHGlobal
CoCreateGuid
StgCreateDocfileOnILockBytes

oleaut32

OleCreateFontIndirect
SysFreeString
VariantClear
DispCallFunc
VariantCopy
SysAllocString
SysStringLen
LoadRegTypeLi
SysAllocStringLen
OleLoadPicture
OleLoadPicturePath

ws2_32

closesocket
inet_addr
gethostbyname
inet_ntoa
send

camcontrol

UpStep
DownStep
LeftStep
RightStep
BrightIncrease
BrightDecrease
AWB
Near
Stop
Wide

comctl32

ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_AddMasked
CreateStatusWindowW
ImageList_Create
ImageList_Add
_TrackMouseEvent
ImageList_Destroy
ImageList_GetIconSize

sg_vote

ReleaseVoteInterface
GetVoteInterface

ui_chat

GetChatInterface
ReleaseChatInterface

confclient

ccCanISendText
ccVoteGetTopicList
ccSendGetIPAndMacRequest
ccReleaseRemoteFlux
ccGetLocalAdminFlag
ccAddLocalVideoPreview
ccQueryRemoteVideo
ccQueryRemoteFlux
ccSetPresider
ccResetPresider
ccKickOut
ccSendConfAdminRequest2
ccGetLocalID
ccSendFontTextMessage
ccWbdIsFullScreen
ccGetMaxPresiderCount
ccCanIBrowseVideo
ccGetBrowseVideoFlag
ccAddLocalVideoPreviewEx
ccContinueLocalVideoEx
ccQueryRemoteVideoEx
ccGetLocalIndex
ccGetAttendeeByIndex
ccIsAdmin
ccGetCurGroupID
ccExistVideoDevice
ccGetSyncDataOpFlag
ccGetSyncDataOpAttendee
ccMpGetShareUser
ccPutDown
ccLeaveGroup
ccGetConfGroupList
ccRemovGroupMember
ccRaiseHand
ccIsRaiseHand
ccStopAppShare
ccGetDefaultGroupID
ccCreateConfGroup
ccDeleteConfGroup
ccStartConfGroup
ccStopConfGroup
ccModifyGroupName
ccResetGroupMember
ccMpGetVideoFormat
ccMpIsRunning
ccMpIsPaused
ccMpOpen
ccMpSeek
ccMpStop
ccMpPause
ccMpPlay
ccMpGetFullScreen
ccMpSetFullScreen
ccMpGetDuration
ccMpSetVideoHalf
ccMpGetVideoHalf
ccMpGetCurrentPosition
ccMpIsStopped
ccMpResizeVideoWindow
ccSortVoteItem
ccGetVoteRuntimeAllData
ccGetVoteRuntimeData
ccVoteCloseAndClean
ccBroadCastVoteStat
ccReleaseVoteControl
ccSetVoteControl
ccVoteSetItemsStatus
ccVoteSetTopicStatus
ccTakeAVote
ccVoteDeleteItems
ccVoteModifyItems
ccVoteAddItmes
ccGetVoteItems
ccVoteModifyTopic
ccVoteAddTopic
ccUnloadAppShareLib
ccSetProxyInfo
ccSendFontTextMessageW
ccGetPresiderList
ccFsGetCreatorIndex
ccFsRemoveDownload
ccFsAbort
ccFsUpload
ccFsRemove
ccFsAdd
ccRemoteControlRequest
ccStopRemoteControl
ccAccreditRemoteControl
ccSetAppShareWnd
ccSendGroupFontTextMessageW
ccOpenTVTunerDialog
ccOpenSecondCrossbarDialog
ccOpenFirstCrossbarDialog
ccExistFirstCrossbar
ccExistSecondCrossbar
ccExistTVTuner
ccChangeVideoDevice
ccChangeVideoFps
ccChangeVideoFormat
ccGetVideoFps
ccOpenVideoPropertyFrame
ccDestroy
ccInit
ccOpenWebLoginUrl
ccWbdSetFullScreen
ccGetConfScrollTitle
ccSetConfScrollTitle
ccGetAppShare
ccSendCallH323Device
ccSetRenderDataFlag
ccSendConfAdminRequest3
ccMpDestroy
ccSendLockConfRequest2
ccGetCurrentConfID
ccSetRecvSyncDataFlag
ccSetVideoDrawNickName
ccSetVideoFillType
ccCloseAudio
ccGetCurrentConfName
ccGetAttendeeCount
ccGetMaxAttendee
ccGetLockFlag
ccGetCurrentConfBeginTime
ccGetCurrentConfEndTime
ccGetDefaultAttendeeList
ccDisconnectConf
ccConnectConf2
ccConnectConf
ccIsPauseLocalVideo
ccContinueLocalVideo
ccPauseLocalVideo
ccSetRemoteVideoWndEx
ccRemoveLocalVideoPreviewEx
ccReleaseRemoteVideoEx
ccChangeWaveInDevice
ccChangeWaveOutDevice
ccSetVideoFlag
ccGetVideoFlag
ccSetRemoteVideoWnd
ccResetSyncDataOp
ccSetSyncDataOp
ccStartRecord
ccStopRecord
ccQuerySpeak
ccCanIRecordConf
ccMpGetShareFile
ccRemoveLocalVideoPreview
ccReleaseRemoteVideo
ccFsDownload
ccFsGetFilename
ccFsGetFileLength
ccChangeVideoFormatEx
ccChangeVideoFpsEx
ccCloseVideoEx
ccExistTVTunerEx
ccVolumeOperate
ccSetSharpenFlag
ccGetCurrentVideoDeviceEx
ccGetAllowRecordFlag
ccGetDisableTextFlag
ccGetAppShareUser
ccSetBoost
ccGetBoost
ccSyncDataNotice
ccSendAddWeb
ccOpenVideoEx
ccGetVideoFormat
ccOpenVideo
ccGetDeviceList
ccReleaseSpeak
ccOpenAudio
ccGetAttendeeInfoByIndex
ccSetFreeSpeak
ccGetFreeSpeakFlag
ccSetAppShareDepth
ccGetRemoteMaxSendFlux
ccGetLocalMaxSendFlux
ccSetRemoteMaxSendFlux
ccSetLocalMaxSendFlux
ccExistSecondCrossbarEx
ccExistFirstCrossbarEx
ccOpenVideoPropertyFrameEx
ccChangeVideoDeviceEx
ccOpenFirstCrossbarDialogEx
ccOpenSecondCrossbarDialogEx
ccOpenTVTunerDialogEx
ccMpSetVolume
ccMpGetVolume
ccMpEnableWave
ccMpIsWaveEnabled
ccSetRemoteControlStatus
ccSetAppShare
ccStartAppShare
ccRemoteControlResponse
ccGetRemoteControlStatus

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

084e98536a524e12de6e73e1ed528416

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

shell32

ole32

oleaut32

ws2_32

camcontrol

comctl32

sg_vote

ui_chat

confclient

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 56KB - Virtual size: 62KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 56KB - Virtual size: 62KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB