bcca4a4a2a92afdb43ca318a73ed4143e0dda797c227a42a45c0e134a0cbdc1c

Sharing

Copy URL Twitter E-mail

General

Target

bcca4a4a2a92afdb43ca318a73ed4143e0dda797c227a42a45c0e134a0cbdc1c
Size

2.5MB
MD5

2d5e8764b28479c71a9ffeafa51648f1
SHA1

f1f5f2f1c4464a2c510281c5e6fd94d1ea965b94
SHA256

bcca4a4a2a92afdb43ca318a73ed4143e0dda797c227a42a45c0e134a0cbdc1c
SHA512

fe04335cf2855933f50efce5e34ff1562cc7a406bb3cf72891bddc2c0f09c0c920836b2b41a057aa2bdace411acbd8ff7cc6238d9a282396e59b360c16467170
SSDEEP

49152:pvRfnbO5pMhj5kW/1ed6PipiHQ6trMoQ36XJUlYsO:vfS5p0j5kK1ed6hHjtrMoQ36XJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcca4a4a2a92afdb43ca318a73ed4143e0dda797c227a42a45c0e134a0cbdc1c

Files

bcca4a4a2a92afdb43ca318a73ed4143e0dda797c227a42a45c0e134a0cbdc1c
.exe windows:6 windows x86 arch:x86

2d8b820617680ad27c2e311ff4d4d025

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ebsilon.git\stage\Win32\Release\PDB\DonglePatch.exe.pdb

Imports

kernel32

ExitProcess
GetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
HeapQueryInformation
GetFileType
SetStdHandle
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
GetTimeFormatW
ExitThread
CreateThread
RtlUnwind
GetCPInfo
LCMapStringEx
GetStringTypeW
OutputDebugStringW
GetDateFormatW
IsValidLocale
LCMapStringW
EnumSystemLocalesW
GetTimeZoneInformation
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetEnvironmentVariableA
GetModuleFileNameA
FindFirstFileA
GetSystemTime
CreateFileA
FindNextFileA
GetLocalTime
GetVersion
DeviceIoControl
SearchPathA
CreateSemaphoreA
OpenSemaphoreA
ReleaseSemaphore
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetConsoleMode
GetUserDefaultLCID
SearchPathW
GetProfileIntW
GetTempPathW
FindResourceExW
SetErrorMode
lstrcpyW
GetWindowsDirectoryW
VirtualProtect
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GlobalGetAtomNameW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CompareStringW
GlobalFindAtomW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
GlobalSize
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThread
ResumeThread
SetThreadPriority
GetCurrentThreadId
CreateEventW
WaitForSingleObject
GlobalFree
GlobalLock
GlobalUnlock
GetModuleHandleW
GetModuleHandleA
GetCurrentProcessId
SetLastError
GetSystemInfo
VerifyVersionInfoW
ReplaceFileW
CopyFileW
MulDiv
LocalAlloc
LoadLibraryW
GetProcAddress
GetModuleFileNameW
GetCurrentProcess
GetLastError
CreateMutexW
WriteFile
SetFileAttributesW
ReadFile
GetVolumeInformationW
GetTempFileNameW
GetFileSize
GetFileAttributesExW
DeleteFileW
CreateFileW
CreateDirectoryW
VerSetConditionMask
ReleaseMutex
GetTickCount
Sleep
FormatMessageW
FormatMessageA
LocalFree
CreateEventA
WaitForSingleObjectEx
SetEvent
CloseHandle
OutputDebugStringA
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
FreeLibraryAndExitThread

user32

CreatePopupMenu
MapDialogRect
GetAsyncKeyState
GetMenuItemInfoW
DestroyMenu
IntersectRect
InflateRect
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
CharUpperW
DestroyIcon
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SystemParametersInfoW
CopyImage
OffsetRect
SetRectEmpty
SendDlgItemMessageA
LoadCursorW
GetSysColorBrush
RealChildWindowFromPoint
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongW
SetWindowRgn
SendMessageW
IsIconic
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
SetParent
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
GetNextDlgGroupItem
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMenuDefaultItem
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetWindow
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
FillRect
GetSysColor
ScreenToClient
DrawFocusRect
OpenClipboard
IsRectEmpty
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
MapVirtualKeyW
GetKeyNameTextW
SetLayeredWindowAttributes
EnumDisplayMonitors
TrackMouseEvent
ClientToScreen
EndPaint
LoadImageW
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
InsertMenuItemW
UnpackDDElParam
EnableWindow
GetSystemMetrics
DrawIcon
GetClientRect
LoadIconW
UnregisterClassW
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
GetParent
LoadBitmapW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExW
CallNextHookEx
PostMessageW
PostQuitMessage
ShowOwnedPopups
SetCursor
MessageBoxW
GetWindowThreadProcessId
GetLastActivePopup
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
UnhookWindowsHookEx
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
DefWindowProcW
ReuseDDElParam
IsChild
SetCursorPos
CopyIcon
FrameRect
UnionRect
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
PostThreadMessageW
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
DeferWindowPos

gdi32

SelectPalette
SetBkColor
SetBkMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
CreateCompatibleBitmap
EnumFontFamiliesExW
CreatePalette
SelectObject
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetNearestPaletteIndex
SetMapMode
CreateBitmap

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

CryptCreateHash
CryptDecrypt
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
SetEntriesInAclW
CryptDestroyHash
CryptEncrypt
CryptDestroyKey
CryptDeriveKey
CryptReleaseContext
CryptAcquireContextW
SetSecurityDescriptorDacl
SetFileSecurityW
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
CryptHashData

shell32

SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHGetKnownFolderPath

comctl32

ord17

shlwapi

PathRemoveFileSpecW
StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW

uxtheme

IsAppThemed
GetThemeSysColor
GetWindowTheme
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemAlloc
CoCreateGuid
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoFileTimeNow
OleLockRunning

oleaut32

VariantInit
SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
VariantChangeType
SysStringLen
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantTimeToSystemTime
SystemTimeToVariantTime

gdiplus

GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDeleteGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipDrawImageI

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CONST
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.poi
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d8b820617680ad27c2e311ff4d4d025

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

CONST Size: 512B - Virtual size: 80B

.rdata Size: 360KB - Virtual size: 359KB

.data Size: 75KB - Virtual size: 366KB

.poi Size: 512B - Virtual size: 32B

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 169KB - Virtual size: 168KB

.text
Size: 1.9MB - Virtual size: 1.9MB

CONST
Size: 512B - Virtual size: 80B

.rdata
Size: 360KB - Virtual size: 359KB

.data
Size: 75KB - Virtual size: 366KB

.poi
Size: 512B - Virtual size: 32B

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 169KB - Virtual size: 168KB