2024-07-23_5f2f954a9f20af754632af49defa8dec_hijackloader_icedid_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-23_5f2f954a9f20af754632af49defa8dec_hijackloader_icedid_magniber
Size

7.7MB
MD5

5f2f954a9f20af754632af49defa8dec
SHA1

f6ae7b67a5f564244602f874f5895b24c0dea58c
SHA256

c78724cb928b9403455ee0c21d5907d34745aaf30a641c8b0ba216c8a7d53ee0
SHA512

e8b52f9fa320f8c5ece8c2368351752beb3e5ed555f51062d0760b84c89fc12708e04735d2af0420c48ca923013a4d0a3d88b0020e856abadfdce7eb70eb8afa
SSDEEP

98304:RrmDGKhPeSQNCfNTipQeMXa147YCEcfpmbz15dAnAF6lAYAI:hmDGmlVTN7YCELztAnAF6lAYAI

Score

1^/10

Malware Config

Signatures

Files

2024-07-23_5f2f954a9f20af754632af49defa8dec_hijackloader_icedid_magniber
.exe windows:6 windows x86 arch:x86

f3e92421f791a68294cc4c5573ac63d4

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:b8:f4:6f:96:33:80:b5:27:c3:3b:62:8a:9b:4f:28
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

02/04/2021, 00:00

Not After

12/06/2024, 23:59

Subject

CN=AK Interactive Co.\, Ltd.,O=AK Interactive Co.\, Ltd.,L=Seocho-gu,ST=Seoul,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3a:ed:3e:cb:29:12:07:2c:7c:6e:6a:4e:53:7d:41:07:dc:2c:af:af:bd:07:f4:4a:7a:c5:6c:0e:53:71:3f:e8
Signer

Actual PE Digest

3a:ed:3e:cb:29:12:07:2c:7c:6e:6a:4e:53:7d:41:07:dc:2c:af:af:bd:07:f4:4a:7a:c5:6c:0e:53:71:3f:e8

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\data\Tool\Release_Taiwan\AutoPatch_Gersang.pdb

Imports

zlib

ord26
ord21
ord3
ord20
ord19
ord2

winmm

timeGetTime
PlaySoundA

kernel32

GetSystemTimeAsFileTime
InitializeSListHead
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetStringTypeW
GetDriveTypeW
GetTimeZoneInformation
ReadConsoleW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStartupInfoW
QueryPerformanceFrequency
HeapQueryInformation
GetFullPathNameW
GetFileType
SetStdHandle
VirtualAlloc
GetSystemInfo
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
LocalUnlock
LocalLock
SearchPathA
GetProfileIntA
VerifyVersionInfoA
VerSetConditionMask
FindResourceExW
SetErrorMode
lstrcpyA
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
TlsAlloc
GetAtomNameA
GlobalFlags
LocalAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
GetStringTypeExA
GetThreadLocale
GetVolumeInformationA
GetShortPathNameA
DuplicateHandle
SetEndOfFile
FlushFileBuffers
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
InitializeCriticalSectionAndSpinCount
MulDiv
GlobalUnlock
GlobalSize
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GlobalLock
GlobalAlloc
GetCurrentThread
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
GetModuleHandleW
GetModuleFileNameW
FreeResource
GetSystemDirectoryW
SetLastError
EncodePointer
MoveFileA
FreeLibrary
DosDateTimeToFileTime
UnlockFile
SetFilePointer
RemoveDirectoryA
LockFile
LocalFileTimeToFileTime
GetSystemDirectoryA
GetTempPathA
WriteFile
SetFileTime
SetFileAttributesA
ReadFile
GetFileTime
GetFileSize
GetFileAttributesA
CreateDirectoryA
MultiByteToWideChar
GetWindowsDirectoryA
K32GetProcessMemoryInfo
GetLocalTime
GetCurrentThreadId
SetUnhandledExceptionFilter
CreateFileA
CreateEventA
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetFullPathNameA
FindNextFileA
FindFirstFileA
FindClose
Module32Next
Module32First
CreateToolhelp32Snapshot
lstrcmpiA
LoadLibraryW
LoadLibraryA
LoadLibraryExW
LoadLibraryExA
WriteProcessMemory
VirtualQuery
VirtualProtect
OutputDebugStringA
WideCharToMultiByte
CopyFileA
FormatMessageA
LocalFree
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
GetTickCount
CreateProcessA
ResumeThread
SuspendThread
GetCurrentProcessId
GetCurrentProcess
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
WriteConsoleW
GetDiskFreeSpaceExA
DeleteFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateDirectoryW
CreateFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetStdHandle

user32

GetSysColorBrush
RealChildWindowFromPoint
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
IsRectEmpty
SetWindowRgn
SetCapture
WindowFromPoint
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
LoadImageA
DestroyIcon
InsertMenuItemA
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
SetRectEmpty
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
IntersectRect
InflateRect
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
RemoveMenu
InsertMenuA
GetMenuState
GetMenuStringA
MapDialogRect
SetWindowContextHelpId
GetWindowThreadProcessId
ShowOwnedPopups
PostQuitMessage
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
LoadCursorA
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
NotifyWinEvent
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
GetWindowRect
FindWindowA
SendMessageA
PostMessageA
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
CopyImage
GetAsyncKeyState
DeleteMenu
WaitMessage
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
TrackMouseEvent
LoadImageW
GetDialogBaseUnits
UnionRect
SetParent
GetMessageTime
GetMessagePos
LoadAcceleratorsW
LoadMenuW
RegisterClipboardFormatA
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
CallNextHookEx
SetTimer
KillTimer
EnableWindow
GetSystemMetrics
GetSystemMenu
AppendMenuA
DrawIcon
InvalidateRect
GetClientRect
SetRect
OffsetRect
wvsprintfA
LoadIconW
MessageBoxA
GetDC
ReleaseDC
RedrawWindow
CopyRect
LoadBitmapW
SetCursor
LoadCursorW
GetSysColor
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetParent
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
SetClassLongA
OpenClipboard
CloseClipboard
UnregisterClassA
GetTabbedTextExtentW
InvertRect
GetTabbedTextExtentA
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
PostThreadMessageA
LockWindowUpdate
GetDCEx
FrameRect
CopyIcon
SetCursorPos
IsZoomed
DrawFrameControl
DrawEdge
DrawStateA
EmptyClipboard
AdjustWindowRectEx
SetClipboardData

gdi32

DeleteDC
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
CreateSolidBrush
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetBkColor
GetTextColor
GetRgnBox
GetTextMetricsA
GetCharWidthA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
Rectangle
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreatePen
CreateDIBPatternBrushPt
GetDeviceCaps
CopyMetaFileA
SetTextColor
SetBkColor
CreateBitmap
DeleteObject
GetObjectA
StretchDIBits
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
StretchBlt
GetTextExtentPoint32A
SelectObject
GetStockObject
CreateFontA
CreateRectRgnIndirect
Escape
BitBlt

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

winspool.drv

ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA

advapi32

RegQueryValueA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA
IsTextUnicode
RegSetValueA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteExA
DragQueryFileA
DragFinish
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathRemoveExtensionA
PathIsUNCA
PathFindExtensionA
UrlUnescapeA
PathRemoveFileSpecW
StrFormatKBSizeA
PathStripToRootA
PathFindFileNameA

uxtheme

GetThemeSysColor
GetWindowTheme
IsAppThemed
GetThemePartSize
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
DrawThemeParentBackground
CloseThemeData

ole32

CoDisconnectObject
PropVariantCopy
OleDraw
CreateStreamOnHGlobal
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StringFromGUID2
CoInitializeEx
OleRun
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleSetMenuDescriptor
OleLockRunning
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
WriteClassStm
GetHGlobalFromILockBytes
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
CreateGenericComposite
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
VariantChangeType
OleCreateFontIndirect
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
SafeArrayCreateVector
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetLBound
SysFreeString
SafeArrayGetUBound
SysAllocStringLen
VariantInit

oledlg

ord8

imagehlp

ImageDirectoryEntryToData

ws2_32

htons
inet_addr
connect
closesocket
send
socket
gethostbyname
WSAStartup
WSACleanup
WSAGetLastError
__WSAFDIsSet
select
recv

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipDrawImageRectI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode

wininet

InternetQueryDataAvailable
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetErrorDlg
InternetGetCookieA
InternetSetCookieA
HttpEndRequestA
HttpSendRequestExA
HttpAddRequestHeadersA
HttpOpenRequestA
GopherGetAttributeA
GopherOpenFileA
GopherFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpOpenFileA
FtpRenameFileA
FtpDeleteFileA
FtpPutFileA
FtpGetFileA
FtpFindFirstFileA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetSetOptionA
InternetQueryOptionA
InternetFindNextFileA
InternetWriteFile
InternetSetFilePointer
InternetConnectA
InternetOpenA

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f3e92421f791a68294cc4c5573ac63d4

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

09:b8:f4:6f:96:33:80:b5:27:c3:3b:62:8a:9b:4f:28Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

3a:ed:3e:cb:29:12:07:2c:7c:6e:6a:4e:53:7d:41:07:dc:2c:af:af:bd:07:f4:4a:7a:c5:6c:0e:53:71:3f:e8Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

zlib

winmm

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

imagehlp

ws2_32

oleacc

gdiplus

wininet

imm32

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 577KB - Virtual size: 576KB

.data Size: 33KB - Virtual size: 431KB

.rsrc Size: 4.5MB - Virtual size: 4.5MB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

09:b8:f4:6f:96:33:80:b5:27:c3:3b:62:8a:9b:4f:28
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

3a:ed:3e:cb:29:12:07:2c:7c:6e:6a:4e:53:7d:41:07:dc:2c:af:af:bd:07:f4:4a:7a:c5:6c:0e:53:71:3f:e8
Signer

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 577KB - Virtual size: 576KB

.data
Size: 33KB - Virtual size: 431KB

.rsrc
Size: 4.5MB - Virtual size: 4.5MB