49a4a6c2a8a56b8a1c761ffdf1f55ee0e66200f4a3d426652b0ec41fbbb52beb

Sharing

Copy URL Twitter E-mail

General

Target

49a4a6c2a8a56b8a1c761ffdf1f55ee0e66200f4a3d426652b0ec41fbbb52beb
Size

3.0MB
MD5

f8451481fb4faba3a705eca61ab699d9
SHA1

e3af009b28fae9a26a495ad2a12432c8c79601c5
SHA256

49a4a6c2a8a56b8a1c761ffdf1f55ee0e66200f4a3d426652b0ec41fbbb52beb
SHA512

616fb33d44a2205f63160ea73e84ad795ef457ab0c9a9f2871457870084d9a4215fda2217091647606782556c4f6a102ee4fe042512131f8749f759d3aeb464e
SSDEEP

49152:2TD34DadloMmIH9Jo0ghhzbEBoaS59k41NRxkQt985MA3bsDEUkPiVoIf3mySLrX:q34Da3JzghhzRxkQX83LsDj3mySLr3sR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49a4a6c2a8a56b8a1c761ffdf1f55ee0e66200f4a3d426652b0ec41fbbb52beb

Files

49a4a6c2a8a56b8a1c761ffdf1f55ee0e66200f4a3d426652b0ec41fbbb52beb
.exe windows:5 windows x86 arch:x86

23cbc1a777797ae5c5887d819d0f0a0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

soundlib

CreateSoundLib

winmm

timeGetTime

ss3dgfunc

_SetInverseMatrix@8
_TransformV3TOV4@16
_MatrixMultiply2@12
_COLORtoDWORD@16
_VECTOR3Length@4
_RotatePositionWithPivot@24
_WriteTGA@24
_Normalize@8
_SetRotationYMatrix@8
_SetRotationXMatrix@8
_TransformVector3_VPTR2@16
_CrossProduct@12
_CalcDistance@8

wsock32

WSACleanup
inet_addr
gethostbyname
ioctlsocket
WSAStartup

dinput8

DirectInput8Create

kernel32

GetConsoleMode
GetConsoleCP
IsValidCodePage
GetFileSize
CloseHandle
GetLocalTime
OpenFile
IsDBCSLeadByte
CreateDirectoryA
GetTickCount
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcmpA
lstrcpyA
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
ReadFile
CreateFileA
GetLastError
WriteFile
SetFilePointer
InterlockedCompareExchange
GetModuleHandleA
MulDiv
OpenProcess
GetCurrentProcess
GetCurrentProcessId
ExitProcess
CreateThread
WriteProcessMemory
WaitForSingleObject
InterlockedExchange
VirtualQuery
TerminateProcess
GetCurrentThread
TerminateThread
ReadConsoleW
CreateFileW
GetCurrentThreadId
GetModuleFileNameA
GetVersionExA
GetSystemTime
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
UnhandledExceptionFilter
GetCPInfo
WriteConsoleW
GetModuleFileNameW
GetFileType
GetStdHandle
GetCommandLineA
LoadLibraryExW
AreFileApisANSI
GetModuleHandleExW
HeapReAlloc
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
RaiseException
GetStringTypeW
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetACP
SetFilePointerEx
GetOEMCP
GetProcessHeap
FlushFileBuffers
GetFileAttributesExW
LocalFree
SetEndOfFile
QueryPerformanceCounter
GetEnvironmentStringsW
SetEnvironmentVariableA
FreeEnvironmentStringsW
OutputDebugStringW
SetStdHandle
GetExitCodeProcess
CreateProcessA
SetUnhandledExceptionFilter

user32

CreateWindowExA
RegisterClassExA
DefWindowProcA
RegisterHotKey
ShowCursor
FindWindowA
PeekMessageA
DispatchMessageA
TranslateMessage
ReleaseDC
GetDC
ScreenToClient
GetCursorPos
ReleaseCapture
SetCapture
IsClipboardFormatAvailable
GetClipboardData
IsDialogMessageA
GetWindowRect
GetClientRect
SetWindowTextA
GetSystemMetrics
EnableWindow
SetFocus
SendDlgItemMessageA
CheckRadioButton
CheckDlgButton
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
GetDlgItem
CreateDialogParamA
SetWindowPos
AnimateWindow
ShowWindow
DestroyWindow
IsWindow
SendMessageA
OffsetRect
PostMessageA
CopyRect
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
CharPrevA
CharNextA
MessageBoxA
SetRect
wsprintfA
LoadIconA
PostQuitMessage
GetWindowThreadProcessId
SetCursor
LoadCursorFromFileA
GetDlgItemTextA
UpdateWindow
GetWindowTextA
ClientToScreen

gdi32

CreateFontIndirectA
DeleteObject
GetTextExtentPoint32A
SelectObject
RemoveFontResourceExA
GetDeviceCaps
GetStockObject

comdlg32

GetOpenFileNameA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoInitialize

oleaut32

VariantClear

freeimage

_FreeImage_GetInfo@4
_FreeImage_GetBits@4
_FreeImage_ConvertTo16Bits565@4
_FreeImage_SaveJPEG@12
_FreeImage_Load@12
_FreeImage_Unload@4

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 712KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23cbc1a777797ae5c5887d819d0f0a0e

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

soundlib

winmm

ss3dgfunc

wsock32

dinput8

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

freeimage

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 237KB - Virtual size: 236KB

.data Size: 712KB - Virtual size: 1.0MB

.rsrc Size: 141KB - Virtual size: 140KB

.reloc Size: 122KB - Virtual size: 122KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 237KB - Virtual size: 236KB

.data
Size: 712KB - Virtual size: 1.0MB

.rsrc
Size: 141KB - Virtual size: 140KB

.reloc
Size: 122KB - Virtual size: 122KB