d65a3bdefd6f81f3c6e1ad3fe011f428dcbffeed4fbbd70ea64d11da73e39161

Sharing

Copy URL Twitter E-mail

General

Target

d65a3bdefd6f81f3c6e1ad3fe011f428dcbffeed4fbbd70ea64d11da73e39161
Size

4.3MB
MD5

48de7d388c21f79d8b60e3e6242e0d0d
SHA1

8e48447e4364c21be70ee397b9ce877976f24ef1
SHA256

d65a3bdefd6f81f3c6e1ad3fe011f428dcbffeed4fbbd70ea64d11da73e39161
SHA512

5ed00b613d3d072d045ea23e83cd2405ffb3aa46e55e9633fda96b7290c00f0e4634f093199afe8fc4a66a699459881bd4f106a585b3c514478284279329fb4f
SSDEEP

98304:HOQ0PIM75bnWOfXliCAcR4G1WlaFyprhmq5Nf:H0w0WOfXliCAcCG1WjmA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d65a3bdefd6f81f3c6e1ad3fe011f428dcbffeed4fbbd70ea64d11da73e39161

Files

d65a3bdefd6f81f3c6e1ad3fe011f428dcbffeed4fbbd70ea64d11da73e39161
.exe windows:4 windows x86 arch:x86

047c726208572e4e874dfe88cabed3cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualQuery
DeleteFileA
GetTickCount
GetSystemTime
VirtualProtect
GlobalMemoryStatus
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
CompareFileTime
CopyFileA
CreateDirectoryA
MulDiv
EscapeCommFunction
ClearCommBreak
SetCommBreak
ReadFile
GetFileSize
FileTimeToDosDateTime
GetFileInformationByHandle
SetFileTime
DosDateTimeToFileTime
WriteFile
FlushInstructionCache
TerminateProcess
WaitForMultipleObjects
lstrcpyA
SetUnhandledExceptionFilter
SetCurrentDirectoryA
OpenMutexA
GetFileTime
GetLogicalDriveStringsA
ClearCommError
IsBadCodePtr
IsBadReadPtr
GetCommState
CreateEventA
PurgeComm
SetupComm
GetCommMask
ResetEvent
GetCommModemStatus
GetOverlappedResult
GetVersionExA
GetExitCodeProcess
GetCurrentDirectoryA
HeapDestroy
GetComputerNameA
ReleaseMutex
GetCurrentProcess
GetModuleFileNameA
lstrlenA
lstrcatA
CreateProcessA
ExitProcess
CreateFileA
SetFilePointer
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
CloseHandle
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
InitializeCriticalSection
CreateThread
SetThreadPriority
GetLastError
FormatMessageA
FindFirstFileA
FindNextFileA
AllocConsole
FreeConsole
LoadLibraryA
FreeLibrary
GetVolumeInformationA
FindResourceA
LoadResource
LockResource
UnmapViewOfFile
MapViewOfFileEx
OpenEventA
SetEvent
CreateMutexA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
WideCharToMultiByte
GetDriveTypeA
DeviceIoControl
SetCommTimeouts
SetCommState
GetStartupInfoA
RtlUnwind
GetConsoleMode
PeekConsoleInputA
GetTimeZoneInformation
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
FatalAppExitA
GetLocalTime
HeapCreate
SetConsoleMode
HeapReAlloc
IsBadWritePtr
VirtualAlloc
LCMapStringA
LCMapStringW
HeapSize
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetCurrentThread
SetLastError
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
GetFileAttributesA
GetCurrentProcessId
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsValidLocale
FindClose
GetLocaleInfoA
EnumSystemLocalesA
IsValidCodePage
SetStdHandle
GetStringTypeA
GetUserDefaultLCID
CompareStringA
CompareStringW
GetStringTypeW
ReadConsoleInputA
SetEndOfFile
GetLocaleInfoW
lstrlenW
LocalFree
SetEnvironmentVariableA
VirtualFree
GetNumberOfConsoleInputEvents
WriteConsoleA
RaiseException

user32

DefWindowProcA
SetFocus
GetWindowRect
IntersectRect
GetCursorPos
GetActiveWindow
MapVirtualKeyA
ChildWindowFromPointEx
GetKeyState
GetAsyncKeyState
ToAscii
CallWindowProcA
GetWindow
EndDialog
SetDlgItemTextA
DialogBoxParamA
DialogBoxIndirectParamA
ShowCursor
SetWindowPos
DestroyWindow
GetSystemMetrics
MoveWindow
AdjustWindowRectEx
GetMenu
ReleaseCapture
GetCapture
SetCapture
GetDlgCtrlID
GetSysColor
ValidateRect
AdjustWindowRect
CheckDlgButton
IsDlgButtonChecked
GetForegroundWindow
WaitForInputIdle
GetTopWindow
SetActiveWindow
LoadIconA
RedrawWindow
GetWindowContextHelpId
WinHelpA
ChildWindowFromPoint
LoadCursorA
SetCursor
PostQuitMessage
FindWindowA
SetCursorPos
CreateDialogIndirectParamA
GetKeyNameTextA
ScreenToClient
LockWindowUpdate
GetFocus
GetDC
CloseWindow
GetUpdateRect
PeekMessageA
MessageBoxIndirectA
UpdateWindow
PostMessageA
WindowFromPoint
ReleaseDC
MessageBoxA
BringWindowToTop
SendDlgItemMessageA
SetWindowLongA
GetWindowLongA
EnableWindow
InvalidateRect
ShowWindow
GetDlgItem
SendMessageA
wsprintfA
SetRect
ClientToScreen
TranslateMessage
DispatchMessageA
GetClientRect
RegisterClassA
KillTimer
CreateWindowExA
IsWindowVisible
SetForegroundWindow
SetTimer
GetParent
EnumChildWindows
GetClassNameA
IsWindowEnabled
GetWindowTextA
IsDialogMessageA
TranslateAcceleratorA
CharToOemBuffA
BeginPaint
EndPaint
CreateDialogParamA
GetNextDlgTabItem
RegisterHotKey

gdi32

CreateDIBSection
GetTextMetricsA
SelectObject
CreateFontIndirectA
GetDeviceCaps
TextOutA
SetTextColor
SetBkColor
SetBkMode
CreateSolidBrush
GetTextColor
GetBkColor
GetBkMode
GetStockObject
RestoreDC
DPtoLP
SetWindowOrgEx
SetViewportOrgEx
ModifyWorldTransform
SetGraphicsMode
SaveDC
DeleteObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA

shell32

FindExecutableA

ole32

StgCreateDocfile
CoRevokeClassObject
OleUninitialize
OleInitialize
CoRegisterClassObject
CoDisconnectObject
StringFromGUID2
StgOpenStorage
CoFileTimeNow
StringFromCLSID
CLSIDFromString
OleSaveToStream
OleLoadFromStream
CoCreateInstance
OleRun

oleaut32

GetErrorInfo
RevokeActiveObject
LoadTypeLi
SysFreeString
SysAllocString
RegisterActiveObject
SetErrorInfo
VariantChangeType
CreateErrorInfo
VariantClear
VariantInit

winmm

timeKillEvent
timeEndPeriod
timeGetTime
timeSetEvent
timeBeginPeriod

wsock32

closesocket
ntohl
htons
sendto
htonl
recvfrom
WSACleanup
ntohs
gethostbyname
gethostname
WSAStartup
ord1111
WSAAsyncSelect
inet_addr
getsockopt
setsockopt
socket
bind
WSAGetLastError

ddraw

DirectDrawCreate

dsound

ord1

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

comctl32

ImageList_DragShowNolock
ord17
ImageList_DragMove
ImageList_DragEnter
ImageList_BeginDrag
ImageList_Destroy
ImageList_EndDrag

imm32

ImmGetContext
ImmNotifyIME
ImmGetCandidateListA
ImmGetCompositionStringA
ImmSetOpenStatus

binkw32

_BinkSetSoundSystem@8
_BinkOpenDirectSound@4
_BinkGetError@0
_BinkOpen@8
_BinkSetVolume@8
_BinkClose@4
_BinkDDSurfaceType@4
_BinkGoto@12
_BinkPause@8
_BinkNextFrame@4
_BinkCopyToBuffer@28
_BinkDoFrame@4
_BinkWait@4

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 404KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

047c726208572e4e874dfe88cabed3cc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

wsock32

ddraw

dsound

version

comctl32

imm32

binkw32

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 188KB - Virtual size: 186KB

.data Size: 404KB - Virtual size: 3.4MB

.rsrc Size: 168KB - Virtual size: 168KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 188KB - Virtual size: 186KB

.data
Size: 404KB - Virtual size: 3.4MB

.rsrc
Size: 168KB - Virtual size: 168KB