a27eb3c377fddae351676da8178b636a5a82eb0ad845728e8cd827c07c3e53ce

Sharing

Copy URL Twitter E-mail

General

Target

a27eb3c377fddae351676da8178b636a5a82eb0ad845728e8cd827c07c3e53ce
Size

7.6MB
MD5

8c49490a49262b8a10b1bb21709866d3
SHA1

76b61f818281b5482353ec4b8ddb30fcc6d234cf
SHA256

a27eb3c377fddae351676da8178b636a5a82eb0ad845728e8cd827c07c3e53ce
SHA512

163cba767cc61c27b90adc7938360eb76ad72007edd6b34bf9e28763445e2a33c1648d4aa70b8c1ea062e1d87ffa56aedca7b8829e4854db0437bb102267f00d
SSDEEP

196608:W0Tb3VHS3ZcDPjhgXGXouQC0U4FLOyomFHKnPD:RX3VyCDwVvjF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a27eb3c377fddae351676da8178b636a5a82eb0ad845728e8cd827c07c3e53ce

Files

a27eb3c377fddae351676da8178b636a5a82eb0ad845728e8cd827c07c3e53ce
.exe windows:5 windows x86 arch:x86

66bc997dcb02c96cbbdba8299e46122b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\gamebt\iGameMenuX\Release\iPrinterClient.pdb

Imports

kernel32

DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
MapViewOfFile
CreateFileMappingW
GetSystemTime
LockFileEx
HeapCompact
DeleteFileA
GetVersionExA
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnlockFileEx
HeapCreate
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetFullPathNameA
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
TzSpecificLocalTimeToSystemTime
ReadConsoleW
GetConsoleMode
ExitProcess
GetStdHandle
SetStdHandle
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetCommandLineW
GetCommandLineA
PeekNamedPipe
GetModuleHandleExW
FreeLibraryAndExitThread
GetProcessAffinityMask
CreateThread
SetConsoleCtrlHandler
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
CreateWaitableTimerA
OpenEventA
AreFileApisANSI
MoveFileExW
GetFileInformationByHandle
GetCPInfo
LCMapStringW
GetStringTypeW
TryEnterCriticalSection
lstrcpynW
DosDateTimeToFileTime
GetACP
QueryPerformanceFrequency
GetDriveTypeW
SetFilePointerEx
lstrcatW
RemoveDirectoryW
DeviceIoControl
lstrlenW
CreateDirectoryW
MapViewOfFileEx
GetFileType
CreateFileMappingA
SwitchToThread
CreateFileA
FlushViewOfFile
UnmapViewOfFile
CancelIo
OutputDebugStringW
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
GetStartupInfoW
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
SetThreadAffinityMask
UnregisterWait
GetThreadTimes
ExitThread
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
SetFileAttributesW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
GetWindowsDirectoryW
FindResourceExW
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
GetUserDefaultLCID
SetFileTime
GetTempFileNameW
VirtualFree
GetFileTime
GetDiskFreeSpaceW
SearchPathW
GetProfileIntW
GetTempPathW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
VirtualProtect
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
InitializeCriticalSection
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalReAlloc
GetFileSize
GetFileAttributesW
CreateFileW
GetCurrentDirectoryW
ResumeThread
lstrcpyW
GetTickCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetVersionExW
CopyFileW
GlobalFree
FormatMessageA
GlobalSize
MultiByteToWideChar
MulDiv
GlobalGetAtomNameW
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
HeapDestroy
DecodePointer
RaiseException
HeapReAlloc
HeapSize
CreateMutexW
GetCurrentThread
SetThreadPriority
WaitForMultipleObjectsEx
HeapFree
GetProcessHeap
HeapAlloc
ReleaseSemaphore
CreateSemaphoreA
SetThreadUILanguage
SetThreadLocale
GetUserDefaultLangID
GetUserDefaultUILanguage
LockResource
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
LoadResource
SizeofResource
FreeLibrary
LoadLibraryW
GetProcAddress
TlsSetValue
TlsGetValue
CreateWaitableTimerW
VerifyVersionInfoW
VerSetConditionMask
InterlockedCompareExchange
GetQueuedCompletionStatus
SetWaitableTimer
CreateIoCompletionPort
SleepEx
QueueUserAPC
TerminateThread
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
SetLastError
WaitForSingleObjectEx
GetSystemTimeAsFileTime
Sleep
CreateEventW
TlsFree
CreateEventA
PostQueuedCompletionStatus
InterlockedExchangeAdd
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
SetEvent
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
CloseHandle
GetLastError
GetSystemInfo
LocalFree
WideCharToMultiByte
FormatMessageW
GetConsoleCP

user32

InsertMenuW
GetMenuState
GetMenuStringW
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
AppendMenuW
RemoveMenu
DrawStateW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
MessageBeep
RegisterClipboardFormatW
SetWindowContextHelpId
EnableWindow
LoadCursorW
SendMessageW
InvertRect
GetIconInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
CopyImage
DrawFrameControl
MapDialogRect
MonitorFromPoint
ShowOwnedPopups
GetKeyNameTextW
MapVirtualKeyW
TrackMouseEvent
SetTimer
GetSystemMetrics
GetDC
GetWindowRect
GetWindowLongW
SetWindowLongW
ReleaseDC
SetWindowsHookExW
UnhookWindowsHookEx
EnumChildWindows
UpdateWindow
GetPropW
EnumWindows
GetLastActivePopup
PostMessageW
SetForegroundWindow
LoadMenuW
LoadAcceleratorsW
MessageBoxA
IsChild
FindWindowW
LoadBitmapW
GetSysColor
IsCharAlphaNumericW
CloseWindowStation
SetThreadDesktop
CloseDesktop
SetProcessWindowStation
OpenDesktopW
OpenWindowStationW
GetClientRect
InflateRect
InvalidateRect
SetRectEmpty
IntersectRect
UnionRect
IsRectEmpty
GetDesktopWindow
GetWindow
GetTopWindow
IsWindowVisible
GetParent
GetMenuItemCount
GetMenuItemID
ModifyMenuW
GetSubMenu
SystemParametersInfoW
GetKeyState
GetAsyncKeyState
CallNextHookEx
RegisterWindowMessageW
SetPropW
IsWindow
GetCursorPos
RedrawWindow
PostQuitMessage
DefWindowProcW
DestroyWindow
RegisterClassExW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
IsIconic
IsZoomed
GetCapture
SetWindowRgn
CopyRect
OffsetRect
GetMenuItemInfoW
SetParent
PeekMessageW
GetMessagePos
GetMessageTime
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
IsMenu
SetWindowPos
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetDlgCtrlID
SetFocus
GetFocus
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
LockWindowUpdate
DrawEdge
GetSysColorBrush
DrawFocusRect
DrawIconEx
CharUpperBuffW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetCursorPos
SetRect
SendDlgItemMessageA
RealChildWindowFromPoint
GetMenuDefaultItem
SetMenuDefaultItem
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
CopyAcceleratorTableW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
CopyIcon
GetComboBoxInfo
SubtractRect
GetDoubleClickTime
DestroyCursor
DrawIcon
DestroyAcceleratorTable
GetMenu
SetMenu
TrackPopupMenu
SetActiveWindow
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
RemovePropW
GetWindowTextW
GetWindowTextLengthW
AdjustWindowRectEx
MessageBoxW
ScreenToClient
MapWindowPoints
EqualRect
PtInRect
GetClassNameW
HideCaret
LoadIconW
SetScrollInfo
GetScrollInfo
WinHelpW
MonitorFromWindow
GetMonitorInfoW
ShowWindow
BringWindowToTop
GetActiveWindow
ReleaseCapture
IsWindowEnabled
TranslateAcceleratorW
CreatePopupMenu
DestroyMenu
InsertMenuItemW
SetCursor
GetWindowThreadProcessId
DestroyIcon
LoadImageW
UnpackDDElParam
ReuseDDElParam
MoveWindow
CheckDlgButton
SetWindowTextW
WindowFromPoint
SetClassLongW
NotifyWinEvent
UpdateLayeredWindow
SetCapture
KillTimer
CreateMenu
IsCharLowerW
MapVirtualKeyExW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
EnableScrollBar
CharUpperW
CheckMenuItem
IsDialogMessageW
GetSystemMenu
GetClassLongW
GetWindowRgn
DeleteMenu

gdi32

CreateHatchBrush
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
CreateDIBSection
BitBlt
GetCurrentObject
DeleteDC
DeleteObject
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
GetTextExtentPoint32W
CreateRectRgnIndirect
PatBlt
CombineRgn
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
CreateRoundRectRgn
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePen
Polygon
Polyline
RoundRect
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
OffsetRgn
Rectangle
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
EnumFontFamiliesExW
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetNearestPaletteIndex
GetSystemPaletteEntries
GetTextFaceW
SetPixelV
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetDeviceCaps
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
CreatePolygonRgn
GetTextMetricsW
SetViewportExtEx

msimg32

TransparentBlt
AlphaBlend

winspool.drv

XcvDataW
ord203
FindClosePrinterChangeNotification
FindFirstPrinterChangeNotification
GetPrinterDriverW
FindNextPrinterChangeNotification
ord204
EnumPrinterDriversW
ClosePrinter
DocumentPropertiesW
EnumPrintersW
OpenPrinterW

advapi32

FreeSid
SetSecurityDescriptorDacl
RegOpenKeyW
RegCreateKeyW
RegDeleteValueW
RegQueryInfoKeyW
OpenServiceW
ChangeServiceConfigW
QueryServiceConfigW
StartServiceW
EnumDependentServicesW
ControlService
DeleteService
OpenSCManagerW
CloseServiceHandle
CreateServiceW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
QueryServiceStatus
CheckTokenMembership
InitializeSecurityDescriptor
AllocateAndInitializeSid
RegSetValueExA
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW

shell32

DragFinish
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
DragQueryFileW
SHGetDesktopFolder
SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW

comctl32

ImageList_AddMasked
ImageList_Draw
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW

uxtheme

GetThemeSysColor
IsAppThemed
GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeText
DrawThemeParentBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent

ole32

DoDragDrop
OleLockRunning
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
OleGetClipboard
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CreateStreamOnHGlobal
CoLockObjectExternal
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoInitializeEx
RegisterDragDrop
RevokeDragDrop

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
OleCreateFontIndirect

oledlg

OleUIBusyW

gdiplus

GdipFree
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectI
GdipReleaseDC
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipAlloc
GdipGetImagePixelFormat

ws2_32

WSAIoctl
WSACleanup
WSAStartup
WSAGetLastError
select
listen
WSASetLastError
WSAStringToAddressW
WSAAddressToStringW
gethostname
shutdown
getsockname
closesocket
getsockopt
connect
bind
accept
htons
ntohs
htonl
ntohl
setsockopt
WSASocketW
WSASend
WSARecv
__WSAFDIsSet
ioctlsocket

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

iphlpapi

GetAdaptersInfo

setupapi

SetupDiGetClassDevsW
CM_Reenumerate_DevNode
CM_Get_Device_ID_Size
CM_Locate_DevNodeW
CM_Get_Device_IDW
CM_Get_Child
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

cabinet

ord21
ord20
ord23
ord22

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 609KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66bc997dcb02c96cbbdba8299e46122b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

iphlpapi

setupapi

cabinet

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 609KB - Virtual size: 608KB

.data Size: 63KB - Virtual size: 85KB

.rsrc Size: 3.8MB - Virtual size: 3.8MB

.reloc Size: 207KB - Virtual size: 207KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 609KB - Virtual size: 608KB

.data
Size: 63KB - Virtual size: 85KB

.rsrc
Size: 3.8MB - Virtual size: 3.8MB

.reloc
Size: 207KB - Virtual size: 207KB