63615e15233b1a7f2b23dc16a08164e5b143dfa15910daae741c1603a2cb8000

Sharing

Copy URL

Twitter E-mail

General

Target

63615e15233b1a7f2b23dc16a08164e5b143dfa15910daae741c1603a2cb8000
Size

5.3MB
MD5

43d344eb15be74019daa4e45a20ea148
SHA1

b4aebfd040b9a07c7b5aeb1ac565ebf1e694e5cd
SHA256

63615e15233b1a7f2b23dc16a08164e5b143dfa15910daae741c1603a2cb8000
SHA512

ad9bcb9eb6e66f4be082a54003e8f2dbb18d5107b770d703bac3d97e696a6501b31f8264c597df9f86c2051506324c8d4b69e0e9800cd94c57485b57094c3723
SSDEEP

98304:1Ulw48i4PT/lBOLSWPROiXTcDFslz9JDesV0lvZV0OlCVvXCmJdxnX0L+00uYAjY:G64fQlkBAi4uos4HQ0mDxXo+6YS5AZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63615e15233b1a7f2b23dc16a08164e5b143dfa15910daae741c1603a2cb8000

Files

63615e15233b1a7f2b23dc16a08164e5b143dfa15910daae741c1603a2cb8000
.dll windows:6 windows x86 arch:x86

689daf93bed889145fb26e0cb28fa757

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
WriteConsoleW
FlushFileBuffers
GetDynamicTimeZoneInformation
GetStdHandle
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetEndOfFile
HeapSize
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapFree
HeapAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
DeleteCriticalSection
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetSystemTimeAsFileTime
LCMapStringEx
EncodePointer
InitializeCriticalSectionEx
LeaveCriticalSection
lstrcmpiW
RaiseException
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileInformationByHandleEx
AreFileApisANSI
GetTempPathW
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
InitializeCriticalSectionAndSpinCount
DecodePointer
FormatMessageW
LocalFree
SystemTimeToFileTime
SetFileTime
SetFilePointer
LocalFileTimeToFileTime
GetFileAttributesW
CreateDirectoryW
ExitProcess
GetACP
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetTickCount
ReadFile
GetFileSize
GetCurrentDirectoryW
SetPriorityClass
GetCurrentProcessId
GetCurrentThreadId
VerifyVersionInfoW
FindResourceW
SizeofResource
LockResource
LoadResource
FreeResource
TerminateProcess
GetCurrentProcess
CreateEventW
SetEvent
WriteFile
CreateFileW
VerSetConditionMask
MulDiv
GetSystemTime
GlobalLock
GlobalUnlock
GetTickCount64
CreateProcessW
GetCommandLineW
GetLocaleInfoEx
FormatMessageA
lstrcpynW
GetLocalTime
EnterCriticalSection
GlobalAlloc
GetExitCodeProcess
Sleep
WaitForSingleObject
GetModuleFileNameW
GetLastError
CloseHandle
IsDebuggerPresent

user32

PostQuitMessage
SetWindowPos
SetTimer
KillTimer
GetWindowRect
GetCursorPos
PtInRect
GetWindowLongW
SetWindowLongW
IsWindowVisible
EnumWindows
EnumThreadWindows
GetWindowThreadProcessId
IsWindow
ShowWindow
SetWindowTextW
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
DestroyWindow
IsIconic
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
GetDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
PostMessageW
MapWindowPoints
GetSysColor
IntersectRect
UnionRect
OffsetRect
IsRectEmpty
GetParent
GetWindow
LoadImageW
MonitorFromWindow
GetMonitorInfoW
SetCursor
InflateRect
LoadCursorW
wsprintfW
DefWindowProcW
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
EnableWindow
GetSystemMetrics
SetPropW
GetPropW
IsZoomed
SetWindowRgn
UpdateLayeredWindow
MoveWindow
IsWindowEnabled
GetWindowRgn
WaitForInputIdle
SendMessageW
PeekMessageW
ScreenToClient
CharPrevW
DrawTextW
FillRect
MessageBoxW
ReleaseDC
SetRect
MapVirtualKeyExW
GetKeyNameTextW
GetKeyboardLayout
SetForegroundWindow
GetGUIThreadInfo
InvalidateRgn
CreateAcceleratorTableW
DrawTextA
wsprintfA
GetWindowTextLengthW
GetWindowTextW
EqualRect
UpdateWindow
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
CreateCaret
TrackPopupMenu
AppendMenuW
EnableMenuItem
DestroyMenu
CreatePopupMenu

gdi32

SetBitmapBits
GetBitmapBits
GetTextExtentPointA
CreatePatternBrush
TextOutW
MoveToEx
GetObjectA
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
SetBkColor
ExtSelectClipRgn
SelectClipRgn
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateSolidBrush
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
PtInRegion
CreateRectRgn
CreateRoundRectRgn
GdiFlush
CreateDIBSection
SetWindowOrgEx
GetObjectW
GetTextMetricsW
PlayEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

shell32

SHGetMalloc
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
CommandLineToArgvW
ShellExecuteW
DragQueryFileW

ole32

CoCreateGuid
CoCreateInstance
DoDragDrop
OleDuplicateData
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
ReleaseStgMedium

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

comctl32

ord17
_TrackMouseEvent
InitCommonControlsEx

gdiplus

GdiplusStartup
GdipDrawImageI
GdipDrawLine
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetPenEndCap
GdipSetPenStartCap
GdipCreatePen2
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawImageRectRect
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipDrawRectangleI
GdipResetWorldTransform
GdipSetWorldTransform
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipReleaseDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdipSetPenDashStyle
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipRotateMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipAddPathArc
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdiplusShutdown

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

ws2_32

WSAStartup
gethostname
gethostbyname

Exports

Exports

CheckUIExit
GetUserPinToTaskBar
GetUserSelectedDir
GetUserSetDefaultBrowser
HideThisProcessWindow
HideThisThreadWindowFromTaskBar
InitDuiContentView
InitLogger
ReleaseDui
ReleaseDuiContentView
SetDuiContentVisible
SetInstallProgress
ShowErrorMessage
WaitUntilInstallOrQuit

Sections

.text
Size: 852KB - Virtual size: 852KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

689daf93bed889145fb26e0cb28fa757

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

advapi32

comctl32

gdiplus

imm32

ws2_32

Exports

Exports

Sections

.text Size: 852KB - Virtual size: 852KB

.rdata Size: 182KB - Virtual size: 181KB

.data Size: 21KB - Virtual size: 27KB

.rsrc Size: 4.2MB - Virtual size: 4.2MB

.reloc Size: 49KB - Virtual size: 48KB

.text
Size: 852KB - Virtual size: 852KB

.rdata
Size: 182KB - Virtual size: 181KB

.data
Size: 21KB - Virtual size: 27KB

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

.reloc
Size: 49KB - Virtual size: 48KB