11e1b1efd6b2f98838d773c3d5f40cd096904ae4ec80458ba2cf14a3703855db

Sharing

Copy URL Twitter E-mail

General

Target

11e1b1efd6b2f98838d773c3d5f40cd096904ae4ec80458ba2cf14a3703855db
Size

958KB
MD5

7482a5a93dab2680f4a2632b30e19f45
SHA1

eba83ddf82fb7ab3929a89afad26f6c84f969588
SHA256

11e1b1efd6b2f98838d773c3d5f40cd096904ae4ec80458ba2cf14a3703855db
SHA512

abf8a77505b89b68a0b9dab16e9c96f19d329d76896495c474a34265262a84c4542bef9f4d49994c277206a95693d54718576a487331f054687a4bd9d2e0b1d4
SSDEEP

24576:Of7D6fYxPexWhhZpAWbZ3ClayDtxgtMj7MBz0oa0A:O6fYxPexW/ZpAWBitqGe0oS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11e1b1efd6b2f98838d773c3d5f40cd096904ae4ec80458ba2cf14a3703855db

Files

11e1b1efd6b2f98838d773c3d5f40cd096904ae4ec80458ba2cf14a3703855db
.exe windows:6 windows x64 arch:x64

ebfcfa4eadafc072e4ec6e6160ab2f75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\sub\ct\algorithm\DDZSolver\DDZSolver\x64\Release\DDZS.pdb

Imports

kernel32

DuplicateHandle
GetCurrentProcess
FileTimeToLocalFileTime
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFileTime
FindNextFileW
SetErrorMode
GetTickCount64
GetUserDefaultLCID
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
GetConsoleOutputCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
ExitProcess
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetFileType
SetStdHandle
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
LCMapStringEx
GetStringTypeW
RaiseException
OutputDebugStringW
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
DeleteFileW
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LocalAlloc
GetThreadLocale
CreateEventW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
GetCurrentThread
LocalFree
GlobalFree
GlobalAlloc
GetCurrentProcessId
MulDiv
GlobalLock
GlobalUnlock
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetProcAddress
GetModuleHandleW
WriteFile
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
SetLastError
OutputDebugStringA
GetModuleFileNameW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
FormatMessageW
GetACP
ReadConsoleW
WriteConsoleW
Sleep
WideCharToMultiByte
GetTickCount
FreeConsole
GetConsoleWindow
CreateThread
SetConsoleTitleW
SetConsoleMode
GetConsoleMode
AllocConsole
GetStdHandle
ReleaseMutex
GetLocalTime
WaitForSingleObject
CreateMutexW
CloseHandle
GetLastError
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SetEnvironmentVariableW
SizeofResource

user32

MessageBeep
GetNextDlgGroupItem
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableW
KillTimer
ReleaseCapture
SetCapture
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
CharNextW
TranslateMessage
GetMessageW
GetDesktopWindow
EndDialog
CreateDialogIndirectParamW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IntersectRect
GetWindowThreadProcessId
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetCursorPos
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
EnableWindow
DestroyCursor
DestroyMenu
DestroyIcon
GetWindowLongW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
CheckMenuItem
SendMessageW
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
ClientToScreen
WindowFromPoint
GetActiveWindow
GetWindowRect
GetSubMenu
TrackPopupMenuEx
PostMessageW
CopyRect
FrameRect
InflateRect
GetSysColor
OffsetRect
DrawFocusRect
GetClientRect
DrawStateW
FillRect
GetDC
ReleaseDC
LoadImageW
MessageBoxW
GetSystemMetrics
MoveWindow
GetMessagePos
FindWindowW
LoadIconW
SetTimer
IsIconic
DrawIcon
GetSystemMenu
DeleteMenu
CreatePopupMenu
AppendMenuW
EnableMenuItem
UnregisterClassW
SendDlgItemMessageA
SetRectEmpty
RegisterWindowMessageW
DispatchMessageW
GetScrollPos
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
PeekMessageW

gdi32

SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
ExtTextOutW
TextOutW
MoveToEx
GetBkColor
SetMapMode
SetBkMode
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
GetClipBox
Escape
CreateSolidBrush
CreatePen
DeleteObject
GetStockObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
GetObjectW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegSetValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
ShellExecuteExW

comctl32

_TrackMouseEvent

shlwapi

UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW

ole32

CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
OleInitialize
CoRevokeClassObject

oleaut32

SysAllocString
OleCreateFontIndirect
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantClear
VariantCopy
VariantChangeType
SysAllocStringLen
VariantInit
SysFreeString

oledlg

OleUIBusyW

oleacc

LresultFromObject
CreateStdAccessibleObject

wininet

InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetSetOptionW
InternetGetLastResponseInfoW
InternetSetStatusCallbackW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 660KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebfcfa4eadafc072e4ec6e6160ab2f75

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

oleacc

wininet

Sections

.text Size: 537KB - Virtual size: 537KB

.rdata Size: 206KB - Virtual size: 205KB

.data Size: 14KB - Virtual size: 660KB

.pdata Size: 28KB - Virtual size: 28KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 160KB - Virtual size: 159KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 537KB - Virtual size: 537KB

.rdata
Size: 206KB - Virtual size: 205KB

.data
Size: 14KB - Virtual size: 660KB

.pdata
Size: 28KB - Virtual size: 28KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 160KB - Virtual size: 159KB

.reloc
Size: 10KB - Virtual size: 9KB