a72c892d7816898592bb49c02d1ab49c651163079a515c307fa5db19431a101e

Sharing

Copy URL Twitter E-mail

General

Target

a72c892d7816898592bb49c02d1ab49c651163079a515c307fa5db19431a101e
Size

10.0MB
MD5

3ec607a3ac061aca39050c8f362c221d
SHA1

d5279cc274697d737c16ecbe5761b4cb1319bae8
SHA256

a72c892d7816898592bb49c02d1ab49c651163079a515c307fa5db19431a101e
SHA512

8e0170dc248380a3000f1cc82f92c388a44d13583add55bde8d08d41d95da372f6d8ac81ae29011bf834c604276f69134cba6b5a201eeb010aafe7ba75ab9e13
SSDEEP

98304:ya+FBfHykQ6bUtpOQwfAIDz4+BVxn917RBQo1RznK3J6rFf0uocdtyFLOAkGkzdw:ypv/5bUtpOCAvt5boDFLOyomFHKnPBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a72c892d7816898592bb49c02d1ab49c651163079a515c307fa5db19431a101e

Files

a72c892d7816898592bb49c02d1ab49c651163079a515c307fa5db19431a101e
.exe windows:5 windows x86 arch:x86

804d4487134fdb542e6e1b69c9769094

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\svn2\kk_cloud_speed\trunk\code\cpp_code\CloudProxy\Release\CloudProxy.pdb

Imports

gdiplus

GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipLoadImageFromStream
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipDrawPath
GdipAddPathArcI
GdipAddPathLineI
GdipDeletePath
GdipCreatePath
GdipDrawRectangleI
GdipSetPenMode
GdipDrawLineI
GdipSetPenDashStyle
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipSetStringFormatTrimming
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipMeasureString
GdipDrawString
GdipFillRectangleI
GdipCreatePen1
GdipDeletePen
GdiplusShutdown

user32

CharPrevW
CharNextW
DestroyCursor
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
GetDoubleClickTime
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
CopyIcon
SetCursorPos
EmptyClipboard
SetClipboardData
CloseClipboard
SetClassLongW
EnumDisplayMonitors
SetLayeredWindowAttributes
MessageBeep
GetIconInfo
DrawIconEx
TrackMouseEvent
UnionRect
IsRectEmpty
SendDlgItemMessageA
CopyImage
GetClipboardFormatNameW
GetClipboardFormatNameA
CharUpperW
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
IntersectRect
TranslateAcceleratorW
LoadAcceleratorsW
DestroyMenu
MapVirtualKeyW
GetKeyNameTextW
RealChildWindowFromPoint
GetAsyncKeyState
InflateRect
SetCursor
ReleaseCapture
SetRectEmpty
OffsetRect
SetRect
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
NotifyWinEvent
SetParent
WindowFromPoint
GetCaretPos
SetCaretPos
RegisterClassExW
HideCaret
CreateCaret
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
InvalidateRgn
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRect
GetForegroundWindow
UpdateWindow
GetSystemMenu
DrawMenuBar
SetCapture
GetActiveWindow
GetCaretBlinkTime
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
ShowOwnedPopups
PostThreadMessageW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetClientRect
RemovePropW
GetPropW
SetPropW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetMenuCheckMarkDimensions
GetFocus
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetKeyState
DispatchMessageW
TranslateMessage
GetMessageW
CopyRect
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
LoadCursorW
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongW
MessageBoxW
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
LoadBitmapW
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
SetMenuItemBitmaps
DeleteMenu
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuW
DrawFrameControl
DrawEdge
GetWindowTextLengthW
GetWindowTextW
MapDialogRect
TabbedTextOutW
IsWindow
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
IsMenu
PostQuitMessage
FindWindowW
wsprintfW
ShowCaret
SendMessageW
PostMessageW
GetCursorPos
KillTimer
PeekMessageW
GetWindowRect
SetWindowPos
GetDesktopWindow
SystemParametersInfoW
SetForegroundWindow
ShowWindow
SetTimer
LoadIconW

ole32

OleLockRunning
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitialize
CLSIDFromProgID
CoInitializeEx
CoUninitialize
CoDisconnectObject
CLSIDFromString
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator

oleaut32

VariantChangeType
VariantCopy
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysFreeString
LoadTypeLi
VarBstrFromDate
VariantInit
SysAllocString

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
ImmSetCompositionWindow

kernel32

GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
FindFirstFileExW
IsValidCodePage
GetOEMCP
DosDateTimeToFileTime
GetFileType
GetACP
VirtualQuery
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
SearchPathW
GetTickCount
ResetEvent
GetTempPathW
GetUserDefaultLCID
GetTempFileNameW
GetWindowsDirectoryW
GetCurrentDirectoryW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
FindResourceExW
GetUserDefaultUILanguage
GetLocaleInfoW
EnumSystemLocalesW
lstrcmpiW
LCMapStringW
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
GetStdHandle
VirtualAlloc
GetCommandLineW
GetCommandLineA
HeapQueryInformation
HeapValidate
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
InterlockedPushEntrySList
FindNextFileW
GetVersionExA
SetEnvironmentVariableA
MoveFileExW
CreateWaitableTimerA
GetSystemInfo
OpenEventA
OutputDebugStringW
GetCPInfo
GetHandleInformation
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
CompareStringW
IsValidLocale
FindClose
GlobalFlags
VirtualProtect
GetProfileIntW
ResumeThread
SetThreadPriority
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
GetSystemDirectoryW
EncodePointer
LocalReAlloc
GlobalHandle
GlobalReAlloc
LoadLibraryA
SystemTimeToFileTime
FileTimeToSystemTime
GetAtomNameW
lstrcmpA
GetModuleHandleA
SetErrorMode
CopyFileW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
Sleep
CreateIoCompletionPort
GetSystemTimeAsFileTime
TlsGetValue
VerifyVersionInfoW
SleepEx
VerSetConditionMask
WaitForSingleObjectEx
WaitForMultipleObjectsEx
GetQueuedCompletionStatus
InterlockedCompareExchange
CreateWaitableTimerW
SetLastError
TlsSetValue
SetWaitableTimer
CreateSemaphoreA
GetVersionExW
ReleaseSemaphore
GetPrivateProfileIntA
InitializeCriticalSection
CreateDirectoryW
GetPrivateProfileStringA
CreateProcessW
GetLocalTime
WritePrivateProfileStringA
MultiByteToWideChar
GetModuleFileNameA
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
ReleaseMutex
LocalAlloc
lstrcpyW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GlobalGetAtomNameW
SizeofResource
InterlockedExchange
HeapFree
EnterCriticalSection
GetCurrentProcess
WriteFile
OutputDebugStringA
InterlockedDecrement
GetModuleFileNameW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
CreateMutexW
WaitForSingleObject
CreateFileW
GetCurrentThreadId
HeapSize
PostQueuedCompletionStatus
CreateEventW
FormatMessageW
GetLastError
SetEvent
TerminateThread
TlsAlloc
LockResource
QueryPerformanceFrequency
DeleteFileW
InterlockedExchangeAdd
HeapReAlloc
CloseHandle
RaiseException
LoadLibraryW
LoadResource
FindResourceW
HeapAlloc
QueueUserAPC
DecodePointer
GetProcAddress
LocalFree
DeleteCriticalSection
ExitProcess
GetCurrentProcessId
GetProcessHeap
FreeLibrary
WideCharToMultiByte
InterlockedIncrement
TlsFree
FormatMessageA
CreateEventA
QueryPerformanceCounter
MoveFileW
SetUnhandledExceptionFilter
GetModuleHandleW

gdi32

BitBlt
GetDeviceCaps
CopyMetaFileW
DeleteDC
CreateBitmap
CombineRgn
CreateDCW
ExtTextOutW
GetObjectA
SetDIBColorTable
CreateDIBSection
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetSystemPaletteEntries
EnumFontFamiliesExW
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetClipBox
ExcludeClipRect
DeleteObject
GetTextFaceW
Polyline
Polygon
LPtoDP
DPtoLP
CreatePolygonRgn
TextOutW
GetObjectW
GetTextMetricsW
SetRectRgn
StretchBlt
SetPixelV
SetPixel
SetPaletteEntries
SelectObject
RoundRect
RealizePalette
Rectangle
RectVisible
PtVisible
PtInRegion
PatBlt
OffsetRgn
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextExtentPoint32W
GetTextColor
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectType
GetNearestPaletteIndex
GetCharABCWidthsW
GetBoundsRect
GetBkColor
FrameRgn
FillRgn
ExtFloodFill
CreateCompatibleBitmap
Escape
Ellipse
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreatePen
CreatePalette
CreateHatchBrush
CreateFontIndirectW
CreateEllipticRgn
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

InitializeSecurityDescriptor
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegSetValueExW
SystemFunction036
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
SetSecurityDescriptorDacl
RegEnumKeyExW

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
DragFinish
DragQueryFileW
Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW
SHAppBarMessage

comctl32

ord17
_TrackMouseEvent

shlwapi

PathFindExtensionW
StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW

uxtheme

CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
OpenThemeData

dbghelp

MiniDumpWriteDump

ws2_32

WSASend
select
ntohl
WSASetLastError
WSAStringToAddressW
WSASocketW
listen
WSARecv
recvfrom
send
sendto
getsockopt
ioctlsocket
setsockopt
bind
closesocket
shutdown
gethostbyname
socket
freeaddrinfo
getsockname
getaddrinfo
WSAIoctl
accept
__WSAFDIsSet
recv
getpeername
inet_addr
connect
inet_ntoa
gethostname
htonl
htons
WSAGetLastError
ntohs
WSACleanup
WSAStartup

mswsock

GetAcceptExSockaddrs
AcceptEx

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

winmm

PlaySoundW

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

804d4487134fdb542e6e1b69c9769094

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

user32

ole32

oleaut32

imm32

kernel32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

dbghelp

ws2_32

mswsock

oleacc

winmm

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 677KB - Virtual size: 677KB

.data Size: 36KB - Virtual size: 74KB

.gfids Size: 108KB - Virtual size: 107KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 5.3MB - Virtual size: 5.3MB

.reloc Size: 210KB - Virtual size: 209KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 677KB - Virtual size: 677KB

.data
Size: 36KB - Virtual size: 74KB

.gfids
Size: 108KB - Virtual size: 107KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 5.3MB - Virtual size: 5.3MB

.reloc
Size: 210KB - Virtual size: 209KB