736ee89f80e6d0a42c01ca3574f1d0eb5ff9710e276a0ef19b2433d67f0c4df4

Sharing

Copy URL Twitter E-mail

General

Target

736ee89f80e6d0a42c01ca3574f1d0eb5ff9710e276a0ef19b2433d67f0c4df4
Size

640KB
MD5

8a27309cbccba2644b6ab33a477ad169
SHA1

0f95f29521a7566755e5c2ad2ab763c6975da207
SHA256

736ee89f80e6d0a42c01ca3574f1d0eb5ff9710e276a0ef19b2433d67f0c4df4
SHA512

6cc1f0e11694658c1db5f5413b74d498f86febec404dc665dce1d8210c53dc702759a51badde4c47247e7fd271358c7fa3e2c9619d85b39e22c8a215912e6828
SSDEEP

12288:bljlI5QlEM7WizFLWx6u/z1fvSpIIWQxvOIHu9Jwo1WDOrd6kh:85QlNWwLEH8lWQxWIHuELD4dvh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
736ee89f80e6d0a42c01ca3574f1d0eb5ff9710e276a0ef19b2433d67f0c4df4

Files

736ee89f80e6d0a42c01ca3574f1d0eb5ff9710e276a0ef19b2433d67f0c4df4
.exe windows:5 windows x64 arch:x64

69cc6ad7f20cdf955f51255cd8fbd942

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

AddVectoredExceptionHandler
AllocConsole
CloseHandle
CompareStringW
CreateFileA
CreateFileW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileA
FindFirstFileExW
FindNextFileA
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeConsole
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesExW
GetFileSize
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsBadReadPtr
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MulDiv
MultiByteToWideChar
OpenMutexA
OpenProcess
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
RegisterWaitForSingleObject
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnregisterWait
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile

ole32

CoInitialize
OleInitialize
OleUninitialize
RevokeDragDrop

comctl32

InitCommonControlsEx

user32

AdjustWindowRectEx
BeginPaint
CallWindowProcW
ChangeDisplaySettingsW
CharUpperW
ClientToScreen
ClipCursor
CreateAcceleratorTableW
CreateWindowExW
DefFrameProcW
DefWindowProcW
DestroyAcceleratorTable
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageW
DrawIconEx
DrawTextW
EnableWindow
EndPaint
EnumChildWindows
EnumWindows
GetActiveWindow
GetClassNameW
GetClientRect
GetCursorPos
GetDC
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetMenu
GetMessageW
GetParent
GetPropW
GetRawInputData
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
IsChild
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadIconW
MapWindowPoints
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
PostMessageW
PostThreadMessageA
RedrawWindow
RegisterClassW
RegisterRawInputDevices
RegisterWindowMessageW
ReleaseDC
RemovePropW
ScreenToClient
SendMessageW
SetActiveWindow
SetCapture
SetFocus
SetForegroundWindow
SetMenu
SetPropW
SetRect
SetWindowLongPtrW
SetWindowPos
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnregisterClassW

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
htons
inet_addr
listen
recv
send
setsockopt
socket

opengl32

glBegin
glBindTexture
glBlendFunc
glClear
glClearColor
glColor4f
glDeleteTextures
glDepthFunc
glDisable
glEnable
glEnd
glGenTextures
glGetError
glGetIntegerv
glGetTexImage
glLoadIdentity
glMatrixMode
glTexCoord4f
glTexEnvi
glTexImage2D
glTexParameteri
glVertex3f
glViewport
wglCreateContext
wglDeleteContext
wglGetProcAddress
wglMakeCurrent

gdi32

ChoosePixelFormat
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateFontIndirectW
CreateSolidBrush
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectType
GetStockObject
GetTextExtentPoint32W
SelectObject
SetBkColor
SetPixelFormat
SetTextColor
SwapBuffers

glu32

gluOrtho2D

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePen
GdipDeleteStringFormat
GdipFree

shell32

Shell_NotifyIconW

winmm

timeBeginPeriod

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

Sections

.text
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gxfg
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69cc6ad7f20cdf955f51255cd8fbd942

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

comctl32

user32

ws2_32

opengl32

gdi32

glu32

gdiplus

shell32

winmm

advapi32

Sections

.text Size: 442KB - Virtual size: 442KB

.rdata Size: 138KB - Virtual size: 138KB

.data Size: 15KB - Virtual size: 135KB

.pdata Size: 20KB - Virtual size: 19KB

.code Size: 5KB - Virtual size: 4KB

.gxfg Size: 12KB - Virtual size: 11KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 442KB - Virtual size: 442KB

.rdata
Size: 138KB - Virtual size: 138KB

.data
Size: 15KB - Virtual size: 135KB

.pdata
Size: 20KB - Virtual size: 19KB

.code
Size: 5KB - Virtual size: 4KB

.gxfg
Size: 12KB - Virtual size: 11KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB