78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449

Sharing

Copy URL

Twitter E-mail

General

Target

78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449
Size

2.9MB
MD5

87a5492afe046c5d593985f205dbad75
SHA1

be0322e2e19d4331fb4cfd24ef21d87c8b959453
SHA256

78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449
SHA512

fd906ee20da16a40b3a6cee3a9c21682e217278fe3e87a10263f22f314282962d508f8bfb842dfd18e32625687eff6f5b573e36e473ab96c607c2d3a31117ec5
SSDEEP

49152:H1M1LFgmU0KxHH0wPN+TPfHyYrI6l9r6GvhPJ99qITv4VX5fr9wEHA75zeZ1Wva:H1YBgmUvxHUCN+TPfHyYrI6lsGvhPJ9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449

Files

78bb0dcddac2f3e3fe365863cead7bdcb472d0942905c96e6de4fbc909561449
.exe windows:6 windows x86 arch:x86

b0b8541ae0947cbd53f05fff6b7dd1d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\git\VS\TOOLS_Onepack\Source\OnePack 4.0\Release\UnPacker.pdb

Imports

setupapi

CM_Disable_DevNode
SetupDiGetDeviceRegistryPropertyW
SetupDiRemoveDevice
SetupDiGetClassDevsW
CM_Enable_DevNode
CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
CM_Get_Parent
SetupDiEnumDeviceInfo

kernel32

GetConsoleMode
GetConsoleOutputCP
ExitProcess
GetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetFileType
SetFilePointerEx
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
RaiseException
OutputDebugStringW
ReadConsoleW
LCMapStringW
GetTimeZoneInformation
FindFirstFileExW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetTempFileNameW
GetTempPathW
GetProfileIntW
GetTickCount64
SearchPathW
GetWindowsDirectoryW
SetErrorMode
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
VirtualProtect
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
GetCurrentThread
lstrcmpiW
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
SuspendThread
SetThreadPriority
GlobalGetAtomNameW
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
FormatMessageW
GlobalSize
SetLastError
MulDiv
GlobalFree
ResumeThread
CreateEventW
ResetEvent
SetEvent
GlobalLock
GlobalUnlock
GlobalAlloc
OpenMutexW
CreateMutexW
GetSystemPowerStatus
SetThreadExecutionState
FindResourceExW
ReadFile
GetDiskFreeSpaceExW
CreateDirectoryW
GetUserDefaultUILanguage
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocalTime
GetCurrentProcess
WriteFile
SetFilePointer
DeleteFileW
GetCurrentDirectoryW
GetEnvironmentVariableW
LocalFree
LocalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateProcessW
GetExitCodeProcess
Sleep
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
WriteConsoleW
HeapReAlloc
HeapAlloc
CreatePipe
GetLastError
CloseHandle
DecodePointer
GetFileSize
FindNextFileW
FindFirstFileW
FindClose
CreateFileW
SetCurrentDirectoryW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
SetStdHandle

user32

CreateDialogIndirectParamW
GetCursorPos
TranslateMessage
GetMessageW
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
GetWindowThreadProcessId
OffsetRect
IntersectRect
SetRectEmpty
SetCursor
InsertMenuItemW
DestroyMenu
CreatePopupMenu
LoadMenuW
TranslateAcceleratorW
LoadAcceleratorsW
GetActiveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
EndDialog
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsZoomed
IsWindowEnabled
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
SetWindowRgn
MessageBeep
WindowFromPoint
NotifyWinEvent
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
ShowWindow
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
ScreenToClient
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
MessageBoxW
DrawIcon
GetSystemMetrics
GetNextDlgTabItem
DrawStateW
InflateRect
CharUpperW
ShowOwnedPopups
SendDlgItemMessageA
GetKeyNameTextW
MapVirtualKeyW
GetSysColorBrush
LoadCursorW
RealChildWindowFromPoint
GetMenuItemInfoW
SystemParametersInfoW
CopyImage
IsIconic
FillRect
GetAsyncKeyState
MapDialogRect
UnionRect
IsRectEmpty
GetSystemMenu
DeleteMenu
SetParent
CallWindowProcW
MonitorFromPoint
EnumDisplayMonitors
TrackMouseEvent
WaitMessage
UnregisterClassW
SetLayeredWindowAttributes
BringWindowToTop
ModifyMenuW
GetClientRect
PostMessageW
UpdateWindow
RedrawWindow
SendMessageW
PostThreadMessageW
PostQuitMessage
SetTimer
KillTimer
EnableWindow
InvalidateRect
GetWindowRect
SetRect
PtInRect
GetWindowLongW
GetDesktopWindow
LoadIconW
SetForegroundWindow
IsWindow
GetCapture
SetCapture
ReleaseCapture
ClientToScreen
GetParent
GetDC
EqualRect
IsWindowVisible
CopyRect
ReleaseDC
GetSysColor
LockWindowUpdate
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawIconEx
RegisterClipboardFormatW
DrawEdge
DrawFrameControl
DrawFocusRect
SetClassLongW
CharUpperBuffW
GetWindowRgn
SubtractRect
CreateMenu
GetUpdateRect
GetComboBoxInfo
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
DestroyCursor
GetDoubleClickTime
IsClipboardFormatAvailable
InvertRect
HideCaret
GetIconInfo
GetNextDlgGroupItem
FrameRect
CopyIcon
SetCursorPos
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx

gdi32

PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
DPtoLP
GetTextExtentPoint32W
LineTo
GetTextMetricsW
CreateRoundRectRgn
CreateDIBSection
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
EnumFontFamiliesExW
GetBkColor
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
GetTextColor
GetRgnBox
OffsetRgn
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
ExtFloodFill
SetPaletteEntries
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
GetTextFaceW
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetClipBox
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
CreateDCW
CopyMetaFileW
GetObjectW
SelectObject
DeleteObject
CreateSolidBrush
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
PatBlt
GetObjectType
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

AdjustTokenPrivileges
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
RegCloseKey
StartServiceW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
InitiateSystemShutdownW
LookupPrivilegeValueW

shell32

SHAppBarMessage
DragQueryFileW
DragFinish
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindFileNameW
PathIsUNCW

uxtheme

GetThemePartSize
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
CloseThemeData
IsAppThemed
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData

ole32

RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoDisconnectObject
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantChangeType
VariantInit
VariantCopy
VarBstrFromDate
SysAllocStringLen
SysFreeString
OleLoadPicture

gdiplus

GdipCreateBitmapFromHBITMAP
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipSetSmoothingMode
GdipCloneBitmapAreaI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdiplusStartup
GdipSetStringFormatHotkeyPrefix
GdipDrawImageRectRect
GdipDrawImageRectI
GdipSetInterpolationMode
GdiplusShutdown
GdipAlloc
GdipFree
GdipCloneBrush
GdipDeleteBrush
GdipCreateTexture
GdipTranslateTextureTransform
GdipCreateSolidFill
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipCreateBitmapFromGraphics
GdipCreateFromHDC
GdipDeleteGraphics
GdipGraphicsClear
GdipFillRectangle
GdipDrawImageI
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawImageRect
GdipMeasureString
GdipGetImageWidth
GdipSetPixelOffsetMode

winhttp

WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpOpen

wintrust

WinVerifyTrust

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

winmm

PlaySoundW

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0b8541ae0947cbd53f05fff6b7dd1d5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

setupapi

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

winhttp

wintrust

oleacc

winmm

imm32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 355KB - Virtual size: 354KB

.data Size: 27KB - Virtual size: 110KB

.rsrc Size: 232KB - Virtual size: 232KB

.reloc Size: 139KB - Virtual size: 139KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 355KB - Virtual size: 354KB

.data
Size: 27KB - Virtual size: 110KB

.rsrc
Size: 232KB - Virtual size: 232KB

.reloc
Size: 139KB - Virtual size: 139KB