697269e07e689336d7a0cb836f0c232dd0e8b09d329546e43a2b4735a4dadee2

Sharing

Copy URL Twitter E-mail

General

Target

697269e07e689336d7a0cb836f0c232dd0e8b09d329546e43a2b4735a4dadee2
Size

5.3MB
MD5

a4dc7b4299327bfa586bf0474f0f3ccd
SHA1

56cc8a8ff9fdeaa62f6e86423d2169816729bbbf
SHA256

697269e07e689336d7a0cb836f0c232dd0e8b09d329546e43a2b4735a4dadee2
SHA512

d02970dd754baa29fc613f4269f1719db0b40f168f8d98113f87d9452346fd535e85459c31b0bcfefe9e98185c3a1ee872ffc333bb8a63ffbdc889563c72b2ed
SSDEEP

98304:8r8pbb/5b0DaXXTXbfjnnlBOLSWPROiXTcDFslz9JDesV0lvZV0OlCVvXCmJdxnq:M8pbb5NXTXbfjnnlkBAi4uos4HQ0mDxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697269e07e689336d7a0cb836f0c232dd0e8b09d329546e43a2b4735a4dadee2

Files

697269e07e689336d7a0cb836f0c232dd0e8b09d329546e43a2b4735a4dadee2
.dll windows:6 windows x86 arch:x86

dd7e044b57b4bac57724ffc62fdcb4b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
WriteConsoleW
FlushFileBuffers
GetDynamicTimeZoneInformation
GetStdHandle
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
Sleep
WaitForSingleObject
GetModuleFileNameW
SetEndOfFile
HeapSize
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapFree
HeapAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedFlushSList
RtlUnwind
GetLastError
InitializeSListHead
GetStartupInfoW
lstrcmpiW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetSystemTimeAsFileTime
LCMapStringEx
EncodePointer
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
RaiseException
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetExitCodeThread
WaitForSingleObjectEx
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileInformationByHandleEx
AreFileApisANSI
GetTempPathW
GetFullPathNameW
GetLocalTime
GlobalAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
FormatMessageW
LocalFree
SystemTimeToFileTime
SetFileTime
SetFilePointer
LocalFileTimeToFileTime
GetFileAttributesW
CreateDirectoryW
ExitProcess
GetACP
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetTickCount
ReadFile
GetFileSize
GetCurrentDirectoryW
SetPriorityClass
GetCurrentProcessId
GetCurrentThreadId
VerifyVersionInfoW
FindResourceW
SizeofResource
LockResource
LoadResource
FreeResource
TerminateProcess
GetCurrentProcess
CreateEventW
SetEvent
WriteFile
CreateFileW
VerSetConditionMask
MulDiv
GetSystemTime
GlobalLock
GlobalUnlock
CloseHandle
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
GetLocaleInfoEx
FormatMessageA
lstrcpynW
GetTickCount64
CreateProcessW
IsDebuggerPresent
GetExitCodeProcess
OutputDebugStringW
GetCommandLineW

user32

WaitForInputIdle
PeekMessageW
PostMessageW
PostQuitMessage
SetWindowPos
SetTimer
KillTimer
GetWindowRect
GetCursorPos
PtInRect
GetWindowLongW
SetWindowLongW
IsWindowVisible
EnumWindows
EnumThreadWindows
GetWindowThreadProcessId
IsWindow
ShowWindow
SetWindowTextW
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
DestroyWindow
IsIconic
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
SendMessageW
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
GetClientRect
ScreenToClient
MapWindowPoints
GetSysColor
IntersectRect
UnionRect
OffsetRect
IsRectEmpty
GetParent
GetWindow
LoadImageW
MonitorFromWindow
GetMonitorInfoW
SetCursor
InflateRect
LoadCursorW
wsprintfW
DefWindowProcW
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
EnableWindow
GetSystemMetrics
SetPropW
GetPropW
IsZoomed
MessageBoxW
GetDC
SetWindowRgn
UpdateLayeredWindow
MoveWindow
IsWindowEnabled
GetWindowRgn
GetWindowTextLengthW
CharPrevW
DrawTextW
FillRect
SetRect
CreatePopupMenu
DestroyMenu
EnableMenuItem
MapVirtualKeyExW
GetKeyNameTextW
GetKeyboardLayout
SetForegroundWindow
GetGUIThreadInfo
AppendMenuW
CreateAcceleratorTableW
DrawTextA
wsprintfA
InvalidateRgn
GetWindowTextW
EqualRect
UpdateWindow
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
CreateCaret
TrackPopupMenu

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
SetBitmapBits
GetBitmapBits
GetTextExtentPointA
CreatePatternBrush
TextOutW
MoveToEx
GetObjectA
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
SetBkColor
ExtSelectClipRgn
SelectClipRgn
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateSolidBrush
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
PtInRegion
CreateRectRgn
CreateRoundRectRgn
GdiFlush
CreateDIBSection
SetWindowOrgEx
GetObjectW
GetTextMetricsW
PlayEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectW
BitBlt

shell32

SHGetMalloc
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
CommandLineToArgvW
ShellExecuteW
DragQueryFileW

ole32

DoDragDrop
CoCreateInstance
CoCreateGuid
OleDuplicateData
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
OleLockRunning

oleaut32

SysFreeString
VariantInit
VariantClear
SysAllocString

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

comctl32

_TrackMouseEvent
ord17
InitCommonControlsEx

gdiplus

GdipFree
GdipAddPathArc
GdiplusStartup
GdipCreateMatrix
GdipDeletePath
GdipCreatePath
GdipAlloc
GdipAddPathLine
GdipStringFormatGetGenericTypographic
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipDeleteBrush
GdipDrawImageI
GdipDrawLine
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetPenEndCap
GdipSetPenStartCap
GdipCreatePen2
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdiplusShutdown
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawImageRectRect
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipDrawRectangleI
GdipResetWorldTransform
GdipSetWorldTransform
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipReleaseDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdipSetPenDashStyle
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

ws2_32

gethostbyname
WSAStartup
gethostname

Exports

Exports

CheckUIExit
GetUserPinToTaskBar
GetUserSelectedDir
GetUserSetDefaultBrowser
HideThisProcessWindow
HideThisThreadWindowFromTaskBar
InitDuiContentView
InitLogger
ReleaseDui
ReleaseDuiContentView
SetDuiContentVisible
SetInstallProgress
ShowErrorMessage
WaitUntilInstallOrQuit

Sections

.text
Size: 853KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd7e044b57b4bac57724ffc62fdcb4b2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

advapi32

comctl32

gdiplus

imm32

ws2_32

Exports

Exports

Sections

.text Size: 853KB - Virtual size: 853KB

.rdata Size: 181KB - Virtual size: 181KB

.data Size: 21KB - Virtual size: 27KB

.rsrc Size: 4.2MB - Virtual size: 4.2MB

.reloc Size: 49KB - Virtual size: 48KB

.text
Size: 853KB - Virtual size: 853KB

.rdata
Size: 181KB - Virtual size: 181KB

.data
Size: 21KB - Virtual size: 27KB

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

.reloc
Size: 49KB - Virtual size: 48KB