f61b7ce036e8b27e175c72cd0baacca474086a58672a0e80c76ea6c8126dd024

Sharing

Copy URL Twitter E-mail

General

Target

f61b7ce036e8b27e175c72cd0baacca474086a58672a0e80c76ea6c8126dd024
Size

2.6MB
MD5

38320e07755111993dfcc759d598a8d6
SHA1

21b789df02bf1add501c2ffdeb1acc756d422248
SHA256

f61b7ce036e8b27e175c72cd0baacca474086a58672a0e80c76ea6c8126dd024
SHA512

d285150a1ae9d6d7c421628ce5760067ff7f3b7c25935c396504e620236e588ec96e60c1946c0a8cbbdd2fa9e1475cb1272ebd4f6b32c7776925c0eba259974b
SSDEEP

49152:JuLbLMjJpySBJ/cvfwEMzCIAA+Td/86WI65B8q3ch6QGH4aV:w4jqKJkvfwEMzCIADt86WI65Rf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f61b7ce036e8b27e175c72cd0baacca474086a58672a0e80c76ea6c8126dd024

Files

f61b7ce036e8b27e175c72cd0baacca474086a58672a0e80c76ea6c8126dd024
.exe windows:5 windows x86 arch:x86

46232c5b85403e3e594771b8d824ff89

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\ads\code\fs\FeisuTruck\MFC\src\Helper_ADS\Release\MiniNews.pdb

Imports

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wininet

InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
HttpAddRequestHeadersW
GetUrlCacheEntryInfoW
DeleteUrlCacheEntryW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetOpenUrlW
InternetCanonicalizeUrlW
InternetCrackUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetACP
ExitProcess
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
WaitForSingleObjectEx
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
RtlUnwind
OutputDebugStringW
GetCPInfo
GetStringTypeW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExW
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProfileIntW
GetCommandLineW
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetConsoleCP
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetSystemDirectoryW
WaitForSingleObject
HeapFree
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
HeapSize
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
GetStartupInfoW
ReadFile
SizeofResource
GetCurrentProcess
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
LoadResource
FindResourceW
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameW
lstrcmpiW
DuplicateHandle
UnlockFile
LockFile
GetVolumeInformationW
FlushFileBuffers
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
GetPrivateProfileIntW
SetThreadPriority
CompareStringA
GetCurrentThread
GetThreadLocale
GetProcAddress
GetTickCount
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
GlobalDeleteAtom
GetModuleHandleA
EncodePointer
OutputDebugStringA
lstrcmpA
FormatMessageW
GlobalSize
MulDiv
CreateSemaphoreW
ReleaseSemaphore
FileTimeToSystemTime
FindNextFileW
SetEndOfFile
GetWindowsDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
SearchPathW
LoadLibraryExW
GetStdHandle
TerminateProcess
ResumeThread
GetCurrentThreadId
ExitThread
WaitForMultipleObjects
GetSystemTimeAsFileTime
CopyFileW
GetVersionExW
GetFileAttributesW
FindClose
WritePrivateProfileStringW
FindFirstFileW
InitializeCriticalSection
SetLastError
GetLocalTime
CreateMutexW
lstrcmpW
ReleaseMutex
WriteFile
SetFilePointer
GetFileSize
CreateFileW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
DeleteFileW
FreeLibrary
InterlockedIncrement
IsBadWritePtr
GetTempFileNameW
GetTempPathW
GetPrivateProfileStringW
GetModuleFileNameW
CreateThread
CreateEventW
Sleep
ResetEvent
SetEvent
FreeResource
GlobalLock
LocalFree
LocalAlloc
GlobalUnlock
GetModuleHandleW
FindResourceExW

user32

GetKeyNameTextW
GetMenuDefaultItem
GetNextDlgGroupItem
SetClassLongW
LockWindowUpdate
EnumChildWindows
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
PostThreadMessageW
ModifyMenuW
NotifyWinEvent
SetWindowRgn
GetSystemMenu
TrackMouseEvent
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MonitorFromPoint
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
WindowFromPoint
WaitMessage
IsRectEmpty
SetRect
CopyAcceleratorTableW
GetAsyncKeyState
RealChildWindowFromPoint
SendDlgItemMessageA
CopyImage
GetSysColorBrush
CharUpperW
InflateRect
GetMenuItemInfoW
DestroyMenu
ShowOwnedPopups
TranslateMessage
GetMessageW
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
SystemParametersInfoW
MessageBeep
IsZoomed
PostQuitMessage
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
CharNextW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
GetClassInfoW
UnionRect
DrawIconEx
IsMenu
DrawEdge
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
EqualRect
GetSysColor
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
DrawFrameControl
DrawFocusRect
SetCursorPos
CharUpperBuffW
EnableScrollBar
SetMenuDefaultItem
CopyIcon
FrameRect
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SetActiveWindow
UpdateWindow
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetIconInfo
HideCaret
InvertRect
GetDoubleClickTime
CreateMenu
IsChild
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
GetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
DestroyCursor
GetComboBoxInfo
GetWindowRgn
UnregisterClassW
LoadCursorW
PostMessageW
GetClientRect
GetWindowLongW
SetWindowLongW
KillTimer
IsWindowVisible
SetWindowPos
SetTimer
CallWindowProcW
EnableWindow
GetWindowRect
GetDC
UpdateLayeredWindow
ReleaseDC
LoadMenuW
GetSubMenu
SetMenuItemInfoW
DeleteMenu
TrackPopupMenu
SendMessageW
SetParent
GetCursorPos
ScreenToClient
LoadIconW
GetDesktopWindow
IsIconic
GetSystemMetrics
DrawIcon
CloseWindow
MoveWindow
CheckMenuItem
SetForegroundWindow
wsprintfW
IsWindow
GetWindowThreadProcessId
PtInRect
SetRectEmpty
SetCursor
CopyRect
InvalidateRect
ReleaseCapture
SetCapture
GetClassInfoExW
SetFocus
DefWindowProcW
EndPaint
GetMessageTime
BeginPaint
IntersectRect
CreateAcceleratorTableW
DestroyAcceleratorTable
RedrawWindow
OffsetRect
InvalidateRgn
ShowWindow
CreateWindowExW
FillRect
DestroyWindow
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
RegisterClassW

gdi32

ExtSelectClipRgn
SelectPalette
SetBkMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetRgnBox
GetTextMetricsW
CreateDIBitmap
SelectClipRgn
GetTextCharsetInfo
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateRoundRectRgn
OffsetRgn
EnumFontFamiliesExW
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetTextFaceW
SetPixelV
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateDIBSection
SelectObject
DeleteObject
GetDeviceCaps
CopyMetaFileW
CreateDCW
SetBkColor
SetTextColor
GetObjectW
CreateBitmap
CreateHatchBrush
SetMapMode
CreatePen
CreatePatternBrush
EnumFontFamiliesW
CreateRectRgn

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
GetTokenInformation
ConvertSidToStringSidW
OpenProcessToken
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExW
RegDeleteKeyW

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetMalloc
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteExW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathStripPathW
PathCombineW
PathFileExistsW
PathRenameExtensionW
PathFindExtensionW
PathFindFileNameW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW

uxtheme

GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
IsAppThemed
GetThemePartSize
CloseThemeData
OpenThemeData
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeParentBackground
DrawThemeText

ole32

CoRevokeClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleGetClipboard
CoInitializeEx
CoLockObjectExternal
RegisterDragDrop
CoGetClassObject
CoDisconnectObject
OleUninitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
OleLockRunning
CLSIDFromString
CoTaskMemFree
CoGetMalloc
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitialize
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop

oleaut32

VariantChangeType
OleCreateFontIndirect
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VarBstrFromDate
LoadTypeLi
VariantCopy
SysAllocStringLen
SysFreeString
SysAllocString
VariantInit
VariantClear

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDrawRectangleI
GdipSetImageAttributesColorMatrix
GdipDeleteFontFamily
GdipCreateStringFormat
GdipGetFontSize
GdipGetPathWorldBounds
GdipGetFontStyle
GdipCreatePath
GdipDeletePath
GdipAddPathString
GdipGetFamily
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipDeleteBrush
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDisposeImageAttributes
GdipCreateFont
GdipCreateSolidFill
GdipSetSolidFillColor
GdipCreateImageAttributes
GdipDrawString
GdipSetImageAttributesWrapMode
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipFree
GdipAlloc
GdipCloneImage
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipSetTextRenderingHint
GdipCloneBrush
GdipFillRectangleI
GdipDeleteStringFormat
GdipDeleteFont
GdipDeletePen
GdipCreatePen1
GdipSetStringFormatAlign
GdiplusStartup
GdipDrawImageRectI
GdipCreateBitmapFromScan0

iphlpapi

IcmpCloseHandle
IcmpSendEcho
GetAdaptersInfo
IcmpCreateFile
GetAdaptersAddresses

netapi32

Netbios

snmpapi

SnmpUtilOidCpy
SnmpUtilOidNCmp
SnmpUtilVarBindFree

ws2_32

send
socket
connect
select
htons
WSAGetLastError
WSAStartup
gethostbyname
closesocket
inet_ntoa
inet_addr
recv
__WSAFDIsSet
WSACleanup

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 203KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

46232c5b85403e3e594771b8d824ff89

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

wininet

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

iphlpapi

netapi32

snmpapi

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 424KB - Virtual size: 423KB

.data Size: 24KB - Virtual size: 50KB

.gfids Size: 107KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 185KB - Virtual size: 185KB

.reloc Size: 203KB - Virtual size: 204KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 424KB - Virtual size: 423KB

.data
Size: 24KB - Virtual size: 50KB

.gfids
Size: 107KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 185KB - Virtual size: 185KB

.reloc
Size: 203KB - Virtual size: 204KB