d2228a5c3586e4dff46cc140bcfecbe71a91f82b076ed0fc18131e72bc047f64

Sharing

Copy URL Twitter E-mail

General

Target

d2228a5c3586e4dff46cc140bcfecbe71a91f82b076ed0fc18131e72bc047f64
Size

9.5MB
MD5

513f6dac4bb9ed0e6621cfc33a5e6787
SHA1

ce9a097bb0131ad32033ef9b58e13a134bf2436e
SHA256

d2228a5c3586e4dff46cc140bcfecbe71a91f82b076ed0fc18131e72bc047f64
SHA512

d5c5c7f6f8ba2e9d6e4732899f0fdf4c4fff9b6856b78439629fddcfc60b51d3d8ed2867fab704a1635352e01cabcb30eb88c6c22ea2c07dc6032da50cb63c01
SSDEEP

98304:PvMDQ+euP7Zc6LjMKuaETFm4U3pnUTjBd2/VGrqlf3urhrc:MDQtBTrNLSVGuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2228a5c3586e4dff46cc140bcfecbe71a91f82b076ed0fc18131e72bc047f64

Files

d2228a5c3586e4dff46cc140bcfecbe71a91f82b076ed0fc18131e72bc047f64
.exe windows:6 windows x64 arch:x64

01439cf3aa3bfcdc486a523ef935c22e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject

kernel32

AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
FreeLibrary
GetConsoleMode
GetCurrentThreadId
GetEnvironmentStringsW
GetErrorMode
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetThreadContext
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
PostQueuedCompletionStatus
RaiseFailFastException
ResumeThread
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsAlloc
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WerGetFlags
WerSetFlags
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_assert
_beginthread
_cexit
_commode
_errno
_fmode
_initterm
_lock
_onexit
_time64
_unlock
abort
atoi
calloc
clock
exit
fprintf
fputc
free
fwrite
isupper
localeconv
malloc
memcpy
memset
realloc
signal
strcmp
strcpy
strerror
strlen
strncmp
vfprintf
wcslen

user32

ActivateKeyboardLayout
CallNextHookEx
ClientToScreen
DispatchMessageA
EnumDisplayMonitors
EnumWindows
GetAsyncKeyState
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDoubleClickTime
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetMessageA
GetMessageTime
GetSystemMetrics
GetWindowLongPtrA
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IsWindow
MapVirtualKeyA
MessageBoxA
PostMessageA
PostMessageW
PostThreadMessageA
ReleaseDC
SendInput
SetForegroundWindow
SetWinEventHook
SetWindowPos
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TranslateMessage
UnhookWinEvent
UnhookWindowsHookEx
VkKeyScanA

Exports

Exports

_cgo_dummy_export
go_send
hook_create_screen_info
hook_get_auto_repeat_delay
hook_get_auto_repeat_rate
hook_get_multi_click_time
hook_get_pointer_acceleration_multiplier
hook_get_pointer_acceleration_threshold
hook_get_pointer_sensitivity
hook_post_event
hook_run
hook_set_dispatch_proc
hook_set_logger
hook_stop

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 563KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 609KB - Virtual size: 609KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 1007B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 625KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/106
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/125
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/141
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/157
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01439cf3aa3bfcdc486a523ef935c22e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.data Size: 227KB - Virtual size: 226KB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.pdata Size: 41KB - Virtual size: 40KB

.xdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 563KB

.edata Size: 512B - Virtual size: 503B

.idata Size: 6KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 32KB - Virtual size: 32KB

/4 Size: 1024B - Virtual size: 704B

/19 Size: 2.3MB - Virtual size: 2.3MB

/31 Size: 9KB - Virtual size: 8KB

/45 Size: 609KB - Virtual size: 609KB

/57 Size: 197KB - Virtual size: 197KB

/70 Size: 1024B - Virtual size: 1007B

/81 Size: 1.9MB - Virtual size: 1.9MB

/92 Size: 625KB - Virtual size: 624KB

/106 Size: 512B - Virtual size: 38B

/125 Size: 4KB - Virtual size: 4KB

/141 Size: 35KB - Virtual size: 34KB

/157 Size: 5KB - Virtual size: 4KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 227KB - Virtual size: 226KB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.pdata
Size: 41KB - Virtual size: 40KB

.xdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 563KB

.edata
Size: 512B - Virtual size: 503B

.idata
Size: 6KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 32KB - Virtual size: 32KB

/4
Size: 1024B - Virtual size: 704B

/19
Size: 2.3MB - Virtual size: 2.3MB

/31
Size: 9KB - Virtual size: 8KB

/45
Size: 609KB - Virtual size: 609KB

/57
Size: 197KB - Virtual size: 197KB

/70
Size: 1024B - Virtual size: 1007B

/81
Size: 1.9MB - Virtual size: 1.9MB

/92
Size: 625KB - Virtual size: 624KB

/106
Size: 512B - Virtual size: 38B

/125
Size: 4KB - Virtual size: 4KB

/141
Size: 35KB - Virtual size: 34KB

/157
Size: 5KB - Virtual size: 4KB