818c972d8bd95de0d91f9197fd359fe53140407cf484a0443f2b747198e668c1

Sharing

Copy URL

Twitter E-mail

General

Target

818c972d8bd95de0d91f9197fd359fe53140407cf484a0443f2b747198e668c1
Size

6.9MB
MD5

2800989a9bd4907257dda8b927971e9a
SHA1

7f3a6d324bb427591e84848275badbff63400004
SHA256

818c972d8bd95de0d91f9197fd359fe53140407cf484a0443f2b747198e668c1
SHA512

5acdbc8316638caceaf847463fe73aaf7209b5e551ebf1a59c3106a0765fdbc94d1a62094550137b084bb3ec033d3c5eed471a921fee85355fbd241a41a45cb6
SSDEEP

196608:R1F47ANGJvUVURyXOOAVtcaQw2z9FcyLidOPwdH2cnfMVgRYAhS:R1FfAVS9FcNH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
818c972d8bd95de0d91f9197fd359fe53140407cf484a0443f2b747198e668c1

Files

818c972d8bd95de0d91f9197fd359fe53140407cf484a0443f2b747198e668c1
.exe windows:6 windows x86 arch:x86

42fcd6c30383461c42e8c327c44626a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\VG Source\VG Source\VG Source\VG Source\Gunz\Runtime\EGunz.pdb

Imports

fmod

_FSOUND_SetOutput@4
_FSOUND_SetDriver@4
_FSOUND_SetHWND@4
_FSOUND_SetMinHardwareChannels@4
_FSOUND_SetMaxHardwareChannels@4
_FSOUND_Init@12
_FSOUND_Close@0
_FSOUND_Update@0
_FSOUND_GetError@0
_FSOUND_GetVersion@0
_FSOUND_GetNumDrivers@0
_FSOUND_Sample_SetMinMaxDistance@12
_FSOUND_GetDriverName@4
_FSOUND_GetDriverCaps@8
_FSOUND_GetMaxChannels@0
_FSOUND_Sample_Load@20
_FSOUND_Sample_GetMode@4
_FSOUND_StopSound@4
_FSOUND_SetVolume@8
_FSOUND_SetMute@8
_FSOUND_SetPriority@8
_FSOUND_SetPaused@8
_FSOUND_3D_SetAttributes@12
_FSOUND_3D_SetMinMaxDistance@12
_FSOUND_GetVolume@4
_FSOUND_3D_Listener_SetAttributes@32
_FSOUND_3D_SetDopplerFactor@4
_FSOUND_3D_SetDistanceFactor@4
_FSOUND_3D_SetRolloffFactor@4
_FSOUND_Stream_SetBufferSize@4
_FSOUND_Stream_Open@16
_FSOUND_Stream_Close@4
_FSOUND_Stream_PlayEx@16
_FSOUND_Stream_Stop@4
_FSOUND_Stream_SetMode@8
_FSOUND_Stream_GetMode@4
_FSOUND_Sample_Free@4
_FSOUND_PlaySoundEx@16
_FSOUND_Stream_SetEndCallback@12

kernel32

SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
GetCurrentThread
SignalObjectAndWait
FormatMessageA
WaitForMultipleObjects
LocalFree
SetThreadPriority
CreateEventA
WaitForSingleObject
ResetEvent
SetEvent
GetEnvironmentVariableA
GlobalFree
InitializeCriticalSectionEx
GetProcessHeap
GetThreadPriority
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
SetPriorityClass
lstrlenA
GlobalMemoryStatus
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
Sleep
lstrcmpiA
GetPriorityClass
lstrcmpW
WideCharToMultiByte
DeviceIoControl
IsBadReadPtr
CreateProcessA
DeleteFileA
GetFileSize
CreateFileA
HeapSize
SetFilePointer
GetModuleHandleW
GetModuleFileNameA
GetCurrentThreadId
CreateMutexA
CreateDirectoryA
SetCurrentDirectoryA
GlobalLock
GlobalUnlock
GlobalAlloc
GetVolumeInformationA
GetFullPathNameA
FindClose
GetFileAttributesA
SleepConditionVariableSRW
FindFirstFileA
OutputDebugStringA
GetTickCount
LoadLibraryA
GetProcAddress
SetEnvironmentVariableW
FreeLibrary
GetVersionExA
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
K32GetModuleFileNameExA
K32EnumProcessModules
GetModuleHandleA
GetWindowsDirectoryA
CreateThread
GetCurrentProcess
IsDebuggerPresent
RemoveDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
lstrlenW
GetModuleFileNameW
GetCurrentProcessId
WaitNamedPipeW
PeekNamedPipe
GetLastError
CloseHandle
WriteFile
ReadFile
CreateFileW
LCMapStringEx
GetStringTypeW
OpenProcess
K32EnumProcesses
K32GetModuleBaseNameA
FindNextFileA
WriteConsoleW
InitializeConditionVariable
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
GetFileAttributesExW
GetTimeZoneInformation
SetFilePointerEx
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetCurrentDirectoryW
DeleteFileW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTempPathW
GetCommandLineW
GetCommandLineA
HeapQueryInformation
GetFullPathNameW
FindNextFileW
FindFirstFileExW
GetFileType
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
RtlUnwind
GetStdHandle
SetStdHandle
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
VirtualAlloc
VirtualQuery
ExitProcess
GlobalMemoryStatusEx
GetFileInformationByHandle
SetFileTime
ExitThread
SystemTimeToFileTime
GlobalDeleteAtom
GlobalAddAtomA
IsDBCSLeadByte
SetUnhandledExceptionFilter
LoadResource
LockResource
SizeofResource
FindResourceW
GetSystemInfo
TerminateProcess
FileTimeToSystemTime
GetSystemDirectoryA
MulDiv
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetLastError
GlobalSize
CopyFileA
GlobalReAlloc
lstrcmpA
InitializeCriticalSectionAndSpinCount
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
CompareStringA
GlobalGetAtomNameA
lstrcpyA
ResumeThread
FlushFileBuffers
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
GlobalFlags
EncodePointer
GetSystemDirectoryW
LoadLibraryExW
FindResourceA
GlobalFindAtomA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetLocaleInfoW
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
GetCPInfo
GetACP
FindResourceExW
VerSetConditionMask
VerifyVersionInfoA
GetTempPathA
GetProfileIntA
SearchPathA
GetTempFileNameA
GetUserDefaultLCID
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW

user32

GetSysColor
GetSysColorBrush
LoadCursorA
GetWindowTextLengthA
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetWindowDC
BeginPaint
EndPaint
FillRect
IsWindowVisible
ValidateRect
DestroyIcon
CharUpperA
GetDlgCtrlID
SetWindowTextA
PtInRect
RealChildWindowFromPoint
SetScrollPos
GetScrollPos
IsWindow
MoveWindow
GetDlgItem
CheckDlgButton
SendDlgItemMessageA
IsDialogMessageA
CopyRect
InflateRect
IntersectRect
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
RegisterWindowMessageA
GetMessagePos
GetMessageTime
CallWindowProcA
GetClassInfoA
GetClassInfoExA
IsMenu
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsIconic
GetCapture
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
AdjustWindowRectEx
MapWindowPoints
EqualRect
GetClassLongA
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
DestroyMenu
CreateWindowExA
SystemParametersInfoA
CopyImage
SetRectEmpty
OffsetRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
MapDialogRect
ShowOwnedPopups
SetCursor
DeleteMenu
SetTimer
KillTimer
InvalidateRect
GetSystemMetrics
LoadImageW
GetNextDlgGroupItem
SetCapture
ReleaseCapture
WindowFromPoint
DrawFocusRect
IsRectEmpty
LoadImageA
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
LoadCursorW
GetWindowThreadProcessId
CreatePopupMenu
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateA
SetClassLongA
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
WaitMessage
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
RegisterClassA
PostQuitMessage
PeekMessageA
ReleaseDC
GetDC
SetWindowLongA
GetWindowLongA
AdjustWindowRect
UpdateWindow
OpenClipboard
CloseClipboard
EmptyClipboard
SetCursorPos
GetClientRect
ClientToScreen
ClipCursor
SetRect
GetKeyState
PostMessageA
SetWindowPos
FlashWindowEx
MapVirtualKeyA
GetKeyNameTextA
TrackMouseEvent
GetLastActivePopup
ScreenToClient
GetWindowTextA
GetWindowRect
EnumWindows
wsprintfA
GetAsyncKeyState
SetClipboardData
GetClipboardData
IsClipboardFormatAvailable
MessageBoxA
DefWindowProcA
ShowWindow
SetFocus
ShowCursor
GetFocus
FindWindowExA
GetClassNameA
GetTopWindow
GetWindow
FlashWindow
FindWindowA
SendMessageA
GetCursorPos
UnregisterHotKey
GetParent
GetKeyboardLayout
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
PostThreadMessageA
DispatchMessageA
TranslateMessage
IsWindowEnabled
GetDesktopWindow
EnableWindow
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
LoadIconA
NotifyWinEvent
GetActiveWindow
GetMessageA
GetMenuItemInfoA

gdi32

SaveDC
RestoreDC
RectVisible
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
EnumFontFamiliesExA
SelectClipRgn
PtVisible
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
BitBlt
CreateDCA
CopyMetaFileA
GetObjectA
CreateDIBSection
GetTextFaceA
AddFontResourceA
RemoveFontResourceA
GetTextMetricsA
SetMapMode
SelectObject
GetTextExtentPoint32W
GetTextExtentPoint32A
GetDeviceCaps
DeleteObject
DeleteDC
CreateFontA
CreateCompatibleDC

advapi32

RegQueryValueExA
RegOpenKeyExA
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA

shell32

ShellExecuteA
SHChangeNotify
SHGetFileInfoA
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetSpecialFolderPathA
SHAppBarMessage

ole32

IsAccelerator
OleTranslateAccelerator
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoTaskMemFree
PropVariantClear
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoInitializeEx

msimg32

TransparentBlt
AlphaBlend

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFileExistsA
PathSearchAndQualifyA
PathIsDirectoryA
PathStripPathA
PathRemoveFileSpecA
StrStrIA
StrFormatKBSizeA

uxtheme

DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
DrawThemeText
GetThemePartSize
GetCurrentThemeName
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
IsAppThemed

imm32

ImmGetCompositionStringA
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListA
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmGetDefaultIMEWnd

winmm

waveOutGetPosition
waveOutRestart
waveInGetNumDevs
waveInGetDevCapsA
waveInGetErrorTextA
waveInOpen
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInReset
waveInMessage
PlaySoundA
waveOutPause
waveOutWrite
waveOutUnprepareHeader
waveOutReset
waveOutPrepareHeader
timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetErrorTextA
waveOutOpen
waveOutClose
waveOutMessage

ws2_32

WSAGetLastError
WSACleanup
WSAStartup
socket
WSACreateEvent
WSACloseEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAWaitForMultipleEvents
shutdown
send
recv
htons
htonl
ioctlsocket
connect
closesocket
bind
gethostname
gethostbyname
ntohs
sendto
recvfrom
inet_addr
inet_ntoa
setsockopt

rpcrt4

UuidCreateSequential

dbghelp

MiniDumpWriteDump

wininet

HttpSendRequestA
HttpOpenRequestA
InternetSetStatusCallback
InternetReadFileExA
InternetConnectA
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
InternetCrackUrlA

gdiplus

GdipFillPath
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipStringFormatGetGenericTypographic
GdipDrawString
GdipGetFamily
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDeleteFontFamily
GdipAlloc
GdipGraphicsClear
GdipDrawPath
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipAddPathString
GdipDeletePath
GdipCreatePath
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipFree
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

oleaut32

VariantChangeType
GetErrorInfo
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
VarBstrFromDate
SystemTimeToVariantTime
SysAllocStringLen
SysStringLen
LoadTypeLi
VariantTimeToSystemTime
SysFreeString
SysAllocString

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 795KB - Virtual size: 795KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 26.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42fcd6c30383461c42e8c327c44626a3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

fmod

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

shlwapi

uxtheme

imm32

winmm

ws2_32

rpcrt4

dbghelp

wininet

gdiplus

oleacc

version

winspool.drv

oleaut32

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 795KB - Virtual size: 795KB

.data Size: 181KB - Virtual size: 26.4MB

.rsrc Size: 237KB - Virtual size: 236KB

.reloc Size: 290KB - Virtual size: 289KB

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 795KB - Virtual size: 795KB

.data
Size: 181KB - Virtual size: 26.4MB

.rsrc
Size: 237KB - Virtual size: 236KB

.reloc
Size: 290KB - Virtual size: 289KB