0fb3828cf1b5805b40b308f75866937d789e4bbf633efaeb96388aeceb1293ae

Sharing

Copy URL Twitter E-mail

General

Target

0fb3828cf1b5805b40b308f75866937d789e4bbf633efaeb96388aeceb1293ae
Size

2.2MB
MD5

c17f10c5932ffeb32a381120490f90c2
SHA1

7eef6e16bfefa337ae9d85534606d24f6aebff13
SHA256

0fb3828cf1b5805b40b308f75866937d789e4bbf633efaeb96388aeceb1293ae
SHA512

f282bc749f8926eb89b1764c97474487ed041401f66fbcbd8ce88e77af17ccbeac0e69cb1cdbb90f998da476872381f11c106619615ac146f12e9ccdf2ae379e
SSDEEP

49152:B2d6TlIxHZlx+LKb2cs3tW5ZEALeCU8EZhKmIPISlc7muiwYvpIayKi6SqCfpK8J:B2T5lx+LKVhU8EZUmIPIMciuaIayKi6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb3828cf1b5805b40b308f75866937d789e4bbf633efaeb96388aeceb1293ae

Files

0fb3828cf1b5805b40b308f75866937d789e4bbf633efaeb96388aeceb1293ae
.exe windows:5 windows x86 arch:x86

54f35b570cacf7efe85b58931fa72469

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\NewCiTest\20240809\PKPM_main32_20240809_0004\Ci\PKPMLauncher\PkpmLauncher\_Out\Win32\Release\PKPM.pdb

Imports

shlwapi

PathIsRelativeW
PathIsDirectoryA
PathIsDirectoryW
PathFileExistsA
PathFileExistsW

gdiplus

GdipFillEllipseI
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipDeleteGraphics
GdipGetImageEncodersSize
GdipGetImageGraphicsContext
GdipCloneBrush
GdipSetPenEndCap
GdipSetPenDashCap197819
GdipGetPenStartCap
GdipGetPenEndCap
GdipGetPenDashCap197819
GdipSetPenLineJoin
GdipGetPenLineJoin
GdipSetPenDashStyle
GdipGetPenDashStyle
GdipCreateSolidFill
GdipCreateBitmapFromHBITMAP
GdipDrawPath
GdipScaleMatrix
GdipSetPenStartCap
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipFillRectangle
GdipSetStringFormatTrimming
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipGetFontCollectionFamilyCount
GdipNewInstalledFontCollection
GdipDrawImageRect
GdipImageRotateFlip
GdipClonePen
GdipSetPenWidth
GdipMeasureString
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipCreatePen2
GdipSetLineBlend
GdipCreateLineBrushFromRect
GdipDrawArc
GdipDeletePen
GdipCreatePen1
GdipCreateFromHDC
GdipGetPenWidth
GdipCreateTexture
GdipDeleteMatrix
GdipCreateMatrix
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateHBITMAPFromBitmap
GdipImageSelectActiveFrame
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipDrawString
GdipTransformPath
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathArcI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipAddPathLine2I
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipGetPathFillMode
GdipSetPathFillMode
GdipResetPath
GdipClonePath
GdipCreatePath
GdipDrawLineI
GdipDrawBezierI
GdipDrawEllipseI
GdipSetPenColor
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipGetImageHeight
GdipGetImageEncoders
GdipCloneImage
GdipDeleteBrush
GdipAlloc
GdipDeletePath
GdipDisposeImage
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipFillPath
GdipFree
GdipDrawRectangleI

comctl32

ord17
_TrackMouseEvent
InitCommonControlsEx

winmm

timeGetTime
timeSetEvent
timeKillEvent

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmSetOpenStatus
ImmGetOpenStatus
ImmGetContext

msimg32

AlphaBlend

kernel32

DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
CreateThread
SignalObjectAndWait
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
CreateTimerQueue
GetModuleFileNameA
GetCurrentThread
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
DecodePointer
EncodePointer
GetThreadTimes
MoveFileExW
AreFileApisANSI
FindFirstFileExW
LoadLibraryExA
VirtualProtect
GetSystemInfo
FreeLibraryAndExitThread
LoadLibraryExW
VirtualAlloc
VirtualFree
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetProcessHeap
SetStdHandle
CreatePipe
HeapSize
SetEndOfFile
InitializeSListHead
GetModuleHandleA
FormatMessageA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetStdHandle
WriteFile
GetConsoleMode
ReadConsoleW
WriteConsoleW
WideCharToMultiByte
GetFileType
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
FreeEnvironmentStringsW
LocalFree
ExitProcess
GetEnvironmentStringsW
CreateDirectoryW
FindFirstFileW
GetFullPathNameW
FindNextFileW
GetLongPathNameW
GetShortPathNameW
RemoveDirectoryW
FindClose
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
MultiByteToWideChar
GetLastError
GetCurrentProcess
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CloseHandle
GetCurrentProcessId
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetExitCodeThread
Sleep
WaitForSingleObjectEx
GetNativeSystemInfo
RaiseException
SwitchToThread
GetModuleHandleW
lstrcpyW
WritePrivateProfileStringW
WriteConsoleA
GetTimeZoneInformation
SetCurrentDirectoryW
GetFileAttributesExA
GetPrivateProfileIntW
WaitForMultipleObjects
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetCurrentDirectoryA
SetCurrentDirectoryA
GetPrivateProfileStringW
GetTickCount64
CopyFileA
OutputDebugStringW
FileTimeToSystemTime
WritePrivateProfileStringA
FileTimeToLocalFileTime
VerSetConditionMask
VerifyVersionInfoW
GetPrivateProfileStringA
SetUnhandledExceptionFilter
GetExitCodeProcess
MulDiv
lstrcatW
lstrcmpW
ReadFile
SetFileTime
SetFilePointer
CreateFileW
GetFileAttributesW
LocalFileTimeToFileTime
SystemTimeToFileTime
UnmapViewOfFile
GetFileInformationByHandle
GetLocalTime
GetFileSize
GetTickCount
GetModuleFileNameW
FormatMessageW
GlobalLock
CreateProcessW
WinExec
GlobalUnlock
GetTempPathW
CopyFileW
GetVersionExW
VirtualQuery
TryEnterCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
DeleteCriticalSection
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
CreateEventW
SetEvent
ResetEvent
SetThreadPriority
TerminateThread
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
QueryPerformanceFrequency
GetSystemTimeAsFileTime
QueryPerformanceCounter
GlobalSize
GlobalAlloc
SetLastError

user32

SetWindowTextW
SendMessageW
GetWindowLongW
SetWindowPos
wsprintfW
GetDesktopWindow
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
OpenClipboard
PostQuitMessage
KillTimer
TranslateMessage
GetQueueStatus
CallMsgFilterW
MsgWaitForMultipleObjectsEx
PeekMessageW
SetTimer
DispatchMessageW
RegisterClassExW
WaitMessage
UnregisterClassW
CreateWindowExW
DestroyWindow
PostMessageW
DefWindowProcW
CharNextW
OffsetRect
ReleaseDC
LoadCursorW
RegisterClassW
GetClassInfoExW
IsWindow
GetMonitorInfoW
MonitorFromWindow
IsIconic
ClientToScreen
SetPropW
GetPropW
GetDC
InvalidateRect
ScreenToClient
GetKeyState
GetFocus
SetCapture
ReleaseCapture
BeginPaint
EndPaint
GetUpdateRect
GetClientRect
IsRectEmpty
IntersectRect
UpdateLayeredWindow
PtInRect
UnionRect
SetCursor
MonitorFromPoint
GetWindowPlacement
MonitorFromRect
SetWindowRgn
GetSysColor
GetAsyncKeyState
EmptyClipboard
SetClipboardData
MapWindowPoints
GetParent
DrawTextW
WindowFromPoint
SetParent
GetAncestor
SetClassLongW
RegisterClipboardFormatW
MessageBoxA
SetFocus
SetWindowLongW
IsZoomed
SetForegroundWindow
ShowWindow
CallWindowProcW
MoveWindow
GetWindowRect
FindWindowW
IsWindowVisible
GetWindow
LoadImageW
GetSystemMetrics
MessageBoxW
EnableWindow
GetCursorPos

gdi32

SetStretchBltMode
SetBkMode
SetTextColor
SetWindowOrgEx
GetTextExtentPoint32W
CreateRectRgnIndirect
ExtSelectClipRgn
GetWindowOrgEx
RestoreDC
SaveDC
DeleteDC
CreateCompatibleDC
StretchBlt
CreateDIBSection
AddFontResourceExW
GetDeviceCaps
CreateRoundRectRgn
BitBlt
SelectObject
DeleteObject
CreateFontIndirectW
GetStockObject
GetObjectA
GetObjectW

advapi32

RegQueryValueExA
OpenProcessToken
RegOpenKeyExA
GetTokenInformation
RegCloseKey
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegEnumValueW

shell32

ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
DragQueryFileW
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW
DragFinish

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
CoCreateGuid

winhttp

WinHttpReadData
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpReceiveResponse
WinHttpOpen
WinHttpAddRequestHeaders
WinHttpSetCredentials
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest

ws2_32

WSASocketW
WSACleanup
__WSAFDIsSet
closesocket
select
shutdown
recv
getaddrinfo
WSAStartup
getpeername
send
socket
ntohs
connect
getsockopt
freeaddrinfo
ioctlsocket
getnameinfo
setsockopt
WSAGetLastError

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54f35b570cacf7efe85b58931fa72469

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

gdiplus

comctl32

winmm

imm32

msimg32

kernel32

user32

gdi32

advapi32

shell32

ole32

winhttp

ws2_32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 322KB - Virtual size: 322KB

.data Size: 60KB - Virtual size: 66KB

.rsrc Size: 141KB - Virtual size: 140KB

.reloc Size: 89KB - Virtual size: 88KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 322KB - Virtual size: 322KB

.data
Size: 60KB - Virtual size: 66KB

.rsrc
Size: 141KB - Virtual size: 140KB

.reloc
Size: 89KB - Virtual size: 88KB