2024-09-25_02eda70ba77f8935ede2776328ea2b3b_hijackloader_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-25_02eda70ba77f8935ede2776328ea2b3b_hijackloader_icedid
Size

10.0MB
MD5

02eda70ba77f8935ede2776328ea2b3b
SHA1

82ee4826d0b79ab55d89df1d2b250b76e7f934e0
SHA256

e82166004a8db53a5aacbb21d1c1dae93c28a0967c5d82fd42245c6d9327cb95
SHA512

ad3a410acb1940bdcb662d9e9d9888796260e95d535f61f1abec5e58b9ab21dde4ca7dffe01c0e100c82de5317400227d3b5a31e6370a02f461b9e33a4642e2d
SSDEEP

196608:hzTT1GqzafK3VZFKghY8372Y6gpkIVpGGwPg2gyd:hIqiK7Mg53aY6gmh

Score

1^/10

Malware Config

Signatures

Files

2024-09-25_02eda70ba77f8935ede2776328ea2b3b_hijackloader_icedid
.exe windows:6 windows x86 arch:x86

570242ca66f88dec6cb3a7e989edb794

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:36:76:7a:d1:04:27:75:b0:b9:be:90:89:cd:c2:03
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

07/03/2023, 14:37

Not After

05/03/2025, 14:37

Subject

CN=Softutils s.r.o.,O=Softutils s.r.o.,L=Prague,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

93:8b:42:8d:34:45:4c:92:43:01:36:f8:c6:23:3e:2a:c4:e1:ea:fd:b2:13:53:6e:bc:48:3c:8e:0a:2d:50:c1
Signer

Actual PE Digest

93:8b:42:8d:34:45:4c:92:43:01:36:f8:c6:23:3e:2a:c4:e1:ea:fd:b2:13:53:6e:bc:48:3c:8e:0a:2d:50:c1

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\_users\Petr\Projects\Work\WINWORK\MacroCommander\src\Release\_prog.pdb

Imports

winmm

mixerSetControlDetails
mixerGetControlDetailsW
mixerGetLineControlsW
PlaySoundW
mixerClose
mixerOpen
mixerGetDevCapsW
mixerGetNumDevs
mixerGetLineInfoW

mpr

WNetCancelConnection2W
WNetAddConnection2W

ws2_32

getsockname
getsockopt
inet_addr
inet_ntoa
listen
ntohs
recv
select
send
setsockopt
ioctlsocket
socket
gethostbyname
gethostname
WSAStartup
WSAGetLastError
WSAIoctl
WSAPoll
WSACleanup
WSASocketW
WSASetLastError
WSASend
connect
closesocket
bind
accept
__WSAFDIsSet
htonl
shutdown
htons

wininet

FtpRemoveDirectoryW
FtpCreateDirectoryW
FtpOpenFileW
FtpRenameFileW
FtpDeleteFileW
InternetFindNextFileW
InternetWriteFile
InternetReadFile
InternetOpenUrlW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
FtpFindFirstFileW
InternetGetConnectedState

powrprof

SetSuspendState

dbghelp

MiniDumpWriteDump

dwmapi

DwmGetWindowAttribute

kernel32

GlobalHandle
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VerSetConditionMask
VerifyVersionInfoW
FindResourceExW
SetErrorMode
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
EnumResourceNamesW
EnumResourceTypesW
EnumResourceLanguagesW
GetThreadPriority
GlobalFlags
GetFileInformationByHandle
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
CreateFileMappingW
ExitProcess
TryAcquireSRWLockExclusive
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
CompareStringEx
GetCPInfo
RtlUnwind
VirtualQuery
GetModuleHandleExW
ExitThread
FreeLibraryAndExitThread
GetFileType
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GetTimeZoneInformation
SetStdHandle
GetCommandLineA
GetCommandLineW
GlobalGetAtomNameW
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
GetFileSizeEx
GetStringTypeExW
lstrcmpiW
UnlockFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetUserDefaultLCID
CompareStringA
GetPrivateProfileIntW
FileTimeToLocalFileTime
VirtualProtect
ResumeThread
SuspendThread
SetThreadPriority
GetProfileIntW
lstrcmpA
GetThreadLocale
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
EncodePointer
OutputDebugStringA
RaiseException
GetSystemInfo
VirtualAlloc
VirtualFree
SetHandleInformation
GetComputerNameA
CreateSemaphoreA
ReleaseSemaphore
LoadLibraryA
GetVersionExA
IsBadReadPtr
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
LocalFileTimeToFileTime
SetFileTime
GetFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
GetOEMCP
GetACP
GetComputerNameW
FormatMessageA
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetModuleHandleA
GetFullPathNameW
GetCurrentDirectoryW
GetCurrentDirectoryA
TlsFree
ExpandEnvironmentStringsA
SetSystemTime
GetSystemTime
GetProcessId
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetExitCodeProcess
GetSystemDefaultLangID
GetUserDefaultLangID
GetTimeFormatW
GetDateFormatW
GetSystemPowerStatus
GetSystemDirectoryW
SleepEx
GetLongPathNameW
SearchPathW
SetCurrentDirectoryW
GetModuleHandleW
MoveFileExW
lstrlenW
lstrcatW
lstrcpyW
WinExec
GetWindowsDirectoryW
OpenMutexW
HeapQueryInformation
GetStdHandle
LCMapStringW
IsValidLocale
EnumSystemLocalesW
FindFirstFileExW
TlsSetValue
SetUnhandledExceptionFilter
GetModuleFileNameW
MoveFileW
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesExW
GetFileAttributesW
FlushFileBuffers
CreateDirectoryW
ExpandEnvironmentStringsW
WriteProfileStringW
ReadDirectoryChangesW
GlobalFree
QueryFullProcessImageNameW
OpenProcess
InitializeCriticalSectionAndSpinCount
FindFirstChangeNotificationW
FindCloseChangeNotification
GetEnvironmentVariableW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindNextFileW
GetFileSize
CreateProcessW
GetCurrentProcess
WaitForMultipleObjects
PeekNamedPipe
CreatePipe
SetLastError
DuplicateHandle
TerminateProcess
CreateMutexW
ReleaseMutex
InitializeCriticalSection
FormatMessageW
GetLocalTime
SetFilePointer
SetEndOfFile
LCIDToLocaleName
CreateThread
WaitNamedPipeW
SetNamedPipeHandleState
GlobalAlloc
GetTickCount64
SetThreadDescription
GetCurrentThread
LoadLibraryW
GetProcAddress
FreeLibrary
CompareFileTime
CopyFileW
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
FindFirstFileW
FindClose
LocalFree
LocalAlloc
GetCurrentThreadId
GetTickCount
WideCharToMultiByte
MulDiv
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GetVersionExW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
WritePrivateProfileStringW
GetPrivateProfileStringW
CloseHandle
GetTempPathW
WriteFile
ReadFile
DeleteFileW
CreateFileW
WriteConsoleW
GetCurrentProcessId
GetLastError
GetExitCodeThread
TerminateThread
Sleep
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
TlsGetValue
TlsAlloc
LoadLibraryExA
lstrcpynW

user32

GetMessageTime
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
GetScrollPos
SetScrollPos
SetClassLongW
ChangeWindowMessageFilter
RegisterRawInputDevices
GetRawInputData
InsertMenuW
AddClipboardFormatListener
PostQuitMessage
EndPaint
BeginPaint
UpdateWindow
DestroyWindow
RegisterClassExW
GetMessageW
GetKeyNameTextW
RegisterHotKey
BlockInput
VkKeyScanW
WaitMessage
UnregisterHotKey
CheckMenuRadioItem
RemoveMenu
SetActiveWindow
GetSysColorBrush
ShowCursor
SetMenuDefaultItem
EnableMenuItem
MoveWindow
PeekMessageW
GetCursorInfo
GetDpiForWindow
GetGUIThreadInfo
DestroyCursor
GetClassLongW
ModifyMenuW
GetMenuItemID
DestroyMenu
CountClipboardFormats
GetDlgItem
WaitForInputIdle
SendMessageTimeoutW
ExitWindowsEx
GetUserObjectSecurity
SetUserObjectSecurity
SetProcessDPIAware
SetFocus
SetParent
DdeQueryStringW
DdeQueryStringA
DdeCreateStringHandleW
DdeCreateStringHandleA
DdeGetData
DdeCreateDataHandle
DdeNameService
DdeInitializeW
GetMessageExtraInfo
GetClipboardFormatNameW
EnumClipboardFormats
MessageBoxW
GetClipboardFormatNameA
RegisterClipboardFormatA
GetMenuItemInfoW
GetMenuItemCount
CopyIcon
GetAncestor
GetWindow
GetLastActivePopup
FindWindowW
AllowSetForegroundWindow
AttachThreadInput
GetClipboardSequenceNumber
RedrawWindow
DeleteMenu
GetSubMenu
CheckMenuItem
LoadMenuW
GetWindowTextLengthW
SetWindowTextW
CreateWindowExW
ShowScrollBar
CallWindowProcW
GetClipCursor
GetClassNameW
GetWindowTextW
EnumDisplayMonitors
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
GetWindowThreadProcessId
MapVirtualKeyW
SendInput
GetKeyboardState
GetKeyboardLayout
GetKeyboardLayoutNameW
ToUnicodeEx
ActivateKeyboardLayout
EmptyClipboard
GetClipboardData
ValidateRect
CloseClipboard
OpenClipboard
UnhookWinEvent
SetWinEventHook
RegisterWindowMessageW
EqualRect
EndDeferWindowPos
BeginDeferWindowPos
GetCaretPos
EnableScrollBar
SetCursorPos
mouse_event
IsZoomed
IsIconic
GetForegroundWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindowDC
GetNextDlgTabItem
ShowWindow
DrawIconEx
GetDesktopWindow
GetDoubleClickTime
IntersectRect
InvertRect
ScrollWindow
SetScrollRange
GetScrollRange
SetPropW
GetPropW
CreateDialogIndirectParamW
RemovePropW
AdjustWindowRectEx
MapWindowPoints
GetTopWindow
SetScrollInfo
GetScrollInfo
WinHelpW
CheckDlgButton
IsWindowEnabled
RegisterClassW
ClipCursor
ReleaseCapture
SetCapture
GetCapture
GetFocus
IsClipboardFormatAvailable
GetClassInfoW
DefWindowProcW
GetMessagePos
GetKeyState
IsWindow
PostMessageW
DispatchMessageW
TranslateMessage
IsRectEmpty
GetSystemMetrics
DrawFrameControl
LoadCursorW
GetClassInfoExW
IsMenu
IsChild
GetWindowPlacement
SetWindowPlacement
DeferWindowPos
GetDlgCtrlID
GetMenu
SetMenu
TrackPopupMenu
GetMonitorInfoW
IsDialogMessageW
EndDialog
GetActiveWindow
SendDlgItemMessageA
GetTabbedTextExtentA
GetCursor
SetCaretPos
CreateCaret
LookupIconIdFromDirectoryEx
CreateIconIndirect
CreateIconFromResourceEx
SetRect
FrameRect
FillRect
SetCursor
DrawEdge
SystemParametersInfoW
UnregisterClassW
SetMenuItemBitmaps
AppendMenuW
CreatePopupMenu
SetWindowRgn
ReleaseDC
GetDC
SetWindowLongW
PtInRect
ScreenToClient
GetCursorPos
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
KillTimer
GetAsyncKeyState
IsWindowVisible
SetWindowPos
SetLayeredWindowAttributes
DestroyIcon
GetWindowRect
LockWindowUpdate
SetForegroundWindow
SetTimer
GetIconInfo
LoadImageW
LoadIconW
GetWindowLongW
OffsetRect
WindowFromPoint
ClientToScreen
DrawStateW
UnionRect
InflateRect
CopyRect
SetRectEmpty
GetSysColor
GetClientRect
InvalidateRect
SendMessageW
GetParent
EnableWindow
GetMenuStringW
GetMenuState
ShowCaret
DestroyCaret
CharNextW
RegisterClipboardFormatW
MapDialogRect
DrawIcon
ShowOwnedPopups
SetWindowContextHelpId
MessageBeep
CharUpperW
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
RealChildWindowFromPoint
CopyImage
TrackMouseEvent
GetSystemMenu
NotifyWinEvent
GetMenuDefaultItem
UpdateLayeredWindow
CopyAcceleratorTableW
InvalidateRgn
PostThreadMessageW
GetNextDlgGroupItem
CreateAcceleratorTableW
DestroyAcceleratorTable
EnumChildWindows
DrawFocusRect
HideCaret
CharUpperBuffW
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
GetComboBoxInfo
CreateMenu
GetWindowRgn
SetClipboardData

gdi32

SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
PolyBezierTo
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
CreateEllipticRgn
CreateDIBSection
CreateRoundRectRgn
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetRgnBox
EnumFontFamiliesExW
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
GetCharWidthW
GetNearestPaletteIndex
GetSystemPaletteEntries
CreatePolygonRgn
SelectPalette
ExtFloodFill
SetPaletteEntries
RoundRect
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetTextAlign
GetTextFaceW
SetPixelV
IntersectClipRect
GetObjectType
GetClipRgn
ExcludeClipRect
CreatePatternBrush
CreateHatchBrush
CopyMetaFileW
SetBkColor
CreateBitmap
MoveToEx
LineTo
GetClipBox
Rectangle
GetBkMode
GetPaletteEntries
CreatePalette
SetMetaFileBitsEx
GetMetaFileBitsEx
DeleteMetaFile
GetEnhMetaFileBits
SetEnhMetaFileBits
PlayEnhMetaFile
GetEnhMetaFileHeader
DeleteEnhMetaFile
StretchDIBits
SetBkMode
Polyline
GetPixel
SetViewportOrgEx
SetViewportExtEx
Polygon
ExtSelectClipRgn
CreateDCW
GetDIBits
DeleteDC
SelectClipRgn
SaveDC
RestoreDC
GetTextColor
GetCurrentPositionEx
GetTextMetricsW
PatBlt
GetObjectW
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
CreatePen
CreateFontW
GetDeviceCaps
GetCurrentObject
GetTextExtentPoint32W
CreateFontIndirectW
SetTextColor
GetStockObject
CombineRgn
LPtoDP
DPtoLP
BeginPath
EndPath
StrokePath
GetTextExtentExPointW
ExtCreateRegion
GetBitmapBits
GetTextExtentPoint32A
CloseFigure
FillPath
StrokeAndFillPath
TextOutW
SelectObject
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
Escape
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
ExtTextOutW
CreateSolidBrush
DeleteObject
Ellipse
SetRectRgn
BitBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW
ord204
EnumPrintersW

advapi32

EnumServicesStatusW
OpenSCManagerW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyW
RegQueryValueW
OpenProcessToken
AddAccessAllowedAce
AddAce
AdjustTokenPrivileges
CopySid
DuplicateTokenEx
GetAce
GetAclInformation
SetFileSecurityW
GetFileSecurityW
RegEnumKeyW
IsTextUnicode
RegSetValueW
CryptExportKey
CryptDestroyKey
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptSetHashParam
CryptAcquireContextW
CryptGetUserKey
CryptGetProvParam
CryptGenRandom
CryptReleaseContext
StartServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
ControlService
CryptAcquireContextA
RegCreateKeyExA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
CreateProcessWithLogonW
LookupPrivilegeValueW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSecurityDescriptorDacl
GetLengthSid

shell32

SHEmptyRecycleBinW
DragQueryFileW
SHGetKnownFolderPath
SHGetSpecialFolderLocation
SHAppBarMessage
DragFinish
SHFileOperationW
DoEnvironmentSubstW
SHParseDisplayName
SHBindToParent
Shell_NotifyIconW
ExtractIconW
ord6
SHGetFileInfoW
ExtractIconExW
FindExecutableW
ShellExecuteExW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW

comctl32

ImageList_Destroy
ImageList_Add
ImageList_GetIconSize
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Remove
ImageList_GetIcon
ImageList_DrawEx
ImageList_SetDragCursorImage
ImageList_GetImageCount
ImageList_SetOverlayImage

shlwapi

PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathRemoveFileSpecW
PathFindFileNameW
PathCompactPathExW
PathFileExistsW
PathCombineW
PathFindExtensionW
StrFormatKBSizeW

uxtheme

DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
IsAppThemed
DrawThemeText

ole32

CoTaskMemFree
CoInitialize
CLSIDFromString
CLSIDFromProgID
StgCreateDocfile
StgOpenStorage
CoInitializeEx
CoUninitialize
StringFromCLSID
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleGetClipboard
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
OleDraw
CoCreateGuid
CoRegisterClassObject
CoRevokeClassObject
CoDisconnectObject
OleRun
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoCreateInstance

oleaut32

VariantCopy
OleCreateFontIndirect
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantChangeType
SysStringLen
VariantInit
VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SysAllocString
SysFreeString
VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayUnaccessData
VarBstrFromDate
LoadTypeLi
OleLoadPicturePath
SafeArrayDestroy
GetErrorInfo

oledlg

OleUIBusyW

urlmon

CoInternetSetFeatureEnabled

gdiplus

GdipDeleteFont
GdipCreateFontFromLogfontW
GdipCreateFontFromLogfontA
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipDeleteFontFamily
GdipGetClipBoundsI
GdipGetClip
GdipSetClipRegion
GdipSetClipRectI
GdipDrawImageRectRect
GdipDrawImageRect
GdipDrawImage
GdipFillPath
GdipFillEllipse
GdipFillPolygonI
GdipFillPolygon
GdipDrawPath
GdipDrawPolygonI
GdipDrawPolygon
GdipDrawEllipse
GdipDrawLinesI
GdipDrawLines
GdipDrawLineI
GdipSetPageUnit
GdipGetWorldTransform
GdipTranslateWorldTransform
GdipSetWorldTransform
GdipSetTextRenderingHint
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipReleaseDC
GdipGetDC
GdipCloneStringFormat
GdipSetImageAttributesColorKeys
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetFamily
GdipGetPropertyItemSize
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageFlags
GdipLoadImageFromStream
GdipSetPenDashArray
GdipSetPenLineJoin
GdipSetPenEndCap
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen2
GdipCreatePen1
GdipSetLinePresetBlend
GdipCreateLineBrush
GdipDeleteRegion
GdipCreateRegion
GdipTransformMatrixPointsI
GdipTransformMatrixPoints
GdipInvertMatrix
GdipShearMatrix
GdipRotateMatrix
GdipScaleMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCloneMatrix
GdipCreateMatrix
GdipDeletePath
GdipCreatePath2
GdipSetStringFormatFlags
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipGetStringFormatFlags
GdipCloneBrush
GdipDeleteBrush
GdipDrawString
GdipGetFontSize
GdipGetFontStyle
GdipCreateStringFormat
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipGetPropertyItem
GdipCreateSolidFill
GdipDeleteStringFormat
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipDeleteGraphics
GdipFillRectangleI
GdipDrawImageI
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCloneBitmapAreaI
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateFromHDC2

odbc32

ord145
ord139
ord5
ord138
ord119
ord117
ord111
ord110
ord108
ord68
ord61
ord59
ord176
ord20
ord49
ord48
ord18
ord44
ord43
ord141
ord16
ord15
ord14
ord13
ord12
ord9
ord1
ord2
ord3

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

msimg32

AlphaBlend
TransparentBlt

crypt32

CryptProtectData
CryptUnprotectData

Sections

.text
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 334KB - Virtual size: 569KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

570242ca66f88dec6cb3a7e989edb794

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

61:36:76:7a:d1:04:27:75:b0:b9:be:90:89:cd:c2:03Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

93:8b:42:8d:34:45:4c:92:43:01:36:f8:c6:23:3e:2a:c4:e1:ea:fd:b2:13:53:6e:bc:48:3c:8e:0a:2d:50:c1Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

mpr

ws2_32

wininet

powrprof

dbghelp

dwmapi

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

gdiplus

odbc32

oleacc

imm32

msimg32

crypt32

Sections

.text Size: 7.6MB - Virtual size: 7.6MB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 334KB - Virtual size: 569KB

.rsrc Size: 124KB - Virtual size: 123KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

61:36:76:7a:d1:04:27:75:b0:b9:be:90:89:cd:c2:03
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

93:8b:42:8d:34:45:4c:92:43:01:36:f8:c6:23:3e:2a:c4:e1:ea:fd:b2:13:53:6e:bc:48:3c:8e:0a:2d:50:c1
Signer

.text
Size: 7.6MB - Virtual size: 7.6MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 334KB - Virtual size: 569KB

.rsrc
Size: 124KB - Virtual size: 123KB