2940971f1be4f8eeb994963716e2acabfa37ea8bd0d60feb324eb80ca6406350N

Sharing

Copy URL Twitter E-mail

General

Target

2940971f1be4f8eeb994963716e2acabfa37ea8bd0d60feb324eb80ca6406350N
Size

1.5MB
MD5

99aeb248179d283ee82c1aebd55be210
SHA1

392821bd4f82ee090010d2ee6de51a2c071e4963
SHA256

2940971f1be4f8eeb994963716e2acabfa37ea8bd0d60feb324eb80ca6406350
SHA512

6d478170e925340b1db1736e6df4253644ab15bbd2149fabf1e96cad9f1e667e5b25f076401c8696c205711dbe19e93eceeb2c5ed29532a5c8a30936889570a4
SSDEEP

24576:F8EPD3kLGO/iWeNLwexaR8cKR5CkJJFJ3ShcD:2EPD0KO/iWeNLwex+8ck5Ckb3SyD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2940971f1be4f8eeb994963716e2acabfa37ea8bd0d60feb324eb80ca6406350N

Files

2940971f1be4f8eeb994963716e2acabfa37ea8bd0d60feb324eb80ca6406350N
.exe windows:4 windows x86 arch:x86

d37f545923717c84c0bf285b5f1cd30b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\5005688\Documents\Visual Studio 2005\Projects\EPP08Unicode\SOURCE_JP\Step1\release\EPPEP_S2W.pdb

Imports

kernel32

GetFileAttributesW
GetFileTime
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
ExitProcess
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
GlobalFindAtomW
LoadLibraryW
CompareStringW
LoadLibraryA
GetVersionExA
FreeResource
ReleaseMutex
CreateMutexW
GlobalFree
GlobalUnlock
MulDiv
lstrlenA
lstrlenW
GlobalAddAtomW
GetCurrentProcessId
GetLastError
InterlockedDecrement
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetUserDefaultLCID
GetExitCodeProcess
OpenProcess
FormatMessageW
GetTempPathW
GetTickCount
LocalFree
DeleteFileW
WaitForSingleObject
FindResourceW
SizeofResource
CreateProcessW
LoadResource
CloseHandle
GetCommandLineA
LockResource

user32

PostThreadMessageW
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
UnregisterClassW
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassNameW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
MessageBoxW
GetWindowThreadProcessId
UnregisterClassA
EnumWindows
IsIconic
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
PeekMessageW
RegisterClipboardFormatW
DestroyMenu
GetCursorPos
ValidateRect
SetPropW
MessageBeep
GetWindowRect
IsWindowVisible
GetSystemMetrics
KillTimer
SetTimer
EnableWindow
PostQuitMessage
PostMessageW
SetCursor
SendMessageW
UnhookWindowsHookEx
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
EndDialog
GetNextDlgTabItem
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetClassLongW

gdi32

GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ExtSelectClipRgn
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetDeviceCaps
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SelectObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegOpenKeyW
RegSetValueExW
RegQueryValueW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathStripToRootW
PathFindFileNameW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleRun
CoInitialize
CoUninitialize
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
VarBstrCmp
SysAllocString
VariantClear
SysStringByteLen
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d37f545923717c84c0bf285b5f1cd30b

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 248KB - Virtual size: 244KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 1.2MB - Virtual size: 1.8MB

.text
Size: 248KB - Virtual size: 244KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 1.2MB - Virtual size: 1.8MB