6f98a39b20f87ed67eb79bac872b67ce7c1cca5a13a5f88126a490ac49c004b9

Sharing

Copy URL Twitter E-mail

General

Target

6f98a39b20f87ed67eb79bac872b67ce7c1cca5a13a5f88126a490ac49c004b9
Size

9.1MB
MD5

c1af712e111ee17e5e9350d2c0106766
SHA1

3fd873dca1d386d63d22b4676f554e5b33a4d21d
SHA256

6f98a39b20f87ed67eb79bac872b67ce7c1cca5a13a5f88126a490ac49c004b9
SHA512

38db814f05baebf83b03eb2289176597e0d2c9b59040b508cf1053f4b8c0c33f9025ce0e1c455da907cb14cf7a32ab74ababcaeaabf41b181e3046bdcaf058bc
SSDEEP

196608:dqolT6r8HMsKHlXdjAyNcwimjNe+KnD9zhSMEk8pTYlOsYr:xV6o4KyiK8OMEkgTLsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f98a39b20f87ed67eb79bac872b67ce7c1cca5a13a5f88126a490ac49c004b9

Files

6f98a39b20f87ed67eb79bac872b67ce7c1cca5a13a5f88126a490ac49c004b9
.exe windows:6 windows x86 arch:x86

7e104f6e930e6a0cdc11aeb69186433e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\A_MRT_KAIFA_PRO\DriverSetup\Release\DriverSetup.pdb

Imports

kernel32

LCMapStringW
GetACP
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
GetStringTypeW
GetSystemInfo
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlUnwind
OutputDebugStringW
GetTimeZoneInformation
GetConsoleCP
VirtualQuery
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
FindResourceExW
GetWindowsDirectoryW
Sleep
GetProfileIntW
GetTickCount
GetTempPathW
GetTempFileNameW
SearchPathW
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
VirtualProtect
FileTimeToSystemTime
GetFileAttributesW
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
GlobalGetAtomNameW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
GlobalFindAtomW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GetCurrentProcessId
GlobalAddAtomW
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
LoadLibraryW
GlobalUnlock
GetModuleHandleA
SetLastError
OutputDebugStringA
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalFree
FreeResource
InitializeCriticalSectionAndSpinCount
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
SizeofResource
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetCurrentProcess
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
lstrlenW
GetLastError
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
FindResourceW
LoadResource
LockResource
VirtualAlloc
WriteConsoleW

user32

SetTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
CharUpperW
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
KillTimer
ScrollWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateAcceleratorTableW
GetClassInfoExW
GetClassInfoW
EmptyClipboard
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
RemoveMenu
InsertMenuW
GetMenuItemCount
DestroyAcceleratorTable
CopyAcceleratorTableW
EnumChildWindows
LoadIconW
GetSystemMenu
AppendMenuW
SendMessageW
IsIconic
GetMenuItemID
GetSubMenu
GetMenuState
InflateRect
CopyRect
GetSysColor
GetMenuItemInfoW
DestroyMenu
GetMenuStringW
UnhookWindowsHookEx
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
SetCursor
ShowOwnedPopups
InvalidateRect
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
LoadMenuW
CreatePopupMenu
InsertMenuItemW
SetRectEmpty
IntersectRect
DestroyIcon
LoadImageW
UnpackDDElParam
ReuseDDElParam
SetParent
CallNextHookEx
SetWindowsHookExW
MonitorFromPoint
SetLayeredWindowAttributes
GetSysColorBrush
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetScrollPos
SetClipboardData
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
DrawEdge
UnregisterClassW
PostMessageW
PostQuitMessage
IsZoomed
RedrawWindow
MessageBeep
OffsetRect
SystemParametersInfoW
SetWindowPos
SetWindowContextHelpId
GetParent
GetWindow
MapDialogRect
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
IsWindowVisible
GetKeyState
ValidateRect
GetCursorPos
RegisterClipboardFormatW
LockWindowUpdate
SetClassLongW
CharNextW
DrawStateW
IsRectEmpty
TrackMouseEvent
GetAsyncKeyState
SetWindowRgn
NotifyWinEvent
ModifyMenuW
PostThreadMessageW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
RegisterClassW
MapVirtualKeyW
InvalidateRgn
SetRect
GetNextDlgGroupItem
SendDlgItemMessageA
GetKeyNameTextW
UnionRect
DrawIconEx
InvertRect
HideCaret
GetWindowRgn
GetComboBoxInfo
DestroyCursor
CreateMenu
GetIconInfo
GetDoubleClickTime
GetUpdateRect
SubtractRect
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
IsClipboardFormatAvailable
FrameRect
CopyIcon
SetMenuDefaultItem
GetMenuDefaultItem
EnableScrollBar
UpdateLayeredWindow
CharUpperBuffW
SetCursorPos
DrawFocusRect
DrawFrameControl
CreateWindowExW

gdi32

CreateRectRgn
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateCompatibleBitmap
CreateDIBitmap
CreatePatternBrush
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
CombineRgn
GetDIBits
PatBlt
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetTextColor
GetBkColor
GetMapMode
SetRectRgn
DPtoLP
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
RoundRect
CreatePalette
GetPaletteEntries
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetNearestPaletteIndex
GetSystemPaletteEntries
GetTextFaceW
SetPixelV
CreatePen
CreateHatchBrush
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
ExtTextOutW
GetObjectW
GetTextExtentPoint32W
CreateFontIndirectW
CreateCompatibleDC
BitBlt
CreateBitmap
CreateRectRgnIndirect
CreateSolidBrush
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

SHGetDesktopFolder
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetMalloc
ShellExecuteW
ord680
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathFindExtensionW
PathRemoveFileSpecW

uxtheme

OpenThemeData
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
CloseThemeData
GetThemePartSize
IsAppThemed
GetThemeColor
GetCurrentThemeName
GetWindowTheme

ole32

CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
IsAccelerator
OleTranslateAccelerator
OleCreateMenuDescriptor
CoInitializeEx
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleLockRunning
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoDisconnectObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleDestroyMenuDescriptor

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
VariantInit
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantClear
VariantChangeType
OleCreateFontIndirect
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy

oledlg

OleUIBusyW

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiCallClassInstaller
SetupCopyOEMInfW

newdev

UpdateDriverForPlugAndPlayDevicesW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13.5MB - Virtual size: 13.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e104f6e930e6a0cdc11aeb69186433e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

setupapi

newdev

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 327KB - Virtual size: 327KB

.data Size: 23KB - Virtual size: 47KB

.gfids Size: 106KB - Virtual size: 106KB

.giats Size: 512B - Virtual size: 16B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 13.5MB - Virtual size: 13.5MB

.reloc Size: 122KB - Virtual size: 122KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 327KB - Virtual size: 327KB

.data
Size: 23KB - Virtual size: 47KB

.gfids
Size: 106KB - Virtual size: 106KB

.giats
Size: 512B - Virtual size: 16B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 13.5MB - Virtual size: 13.5MB

.reloc
Size: 122KB - Virtual size: 122KB