0fff7024075690cf2f7c2e96f8671de923ea9370519df8bc1d17b34c1c692c17N

Sharing

Copy URL Twitter E-mail

General

Target

0fff7024075690cf2f7c2e96f8671de923ea9370519df8bc1d17b34c1c692c17N
Size

320KB
MD5

f2896ee064c28cd92908d312b084e990
SHA1

f35f0c9e05bce2fe03190f04f8ebde9e7fe6a0ed
SHA256

0fff7024075690cf2f7c2e96f8671de923ea9370519df8bc1d17b34c1c692c17
SHA512

cdacb4db0b299fb06f725d2bd9b64904c33d450953b5e038e3c1d07359dc0012128e3d979b9046b0db4acde3a5038b970216fd0cad662183ad14bd66e6d110aa
SSDEEP

6144:7WbukyxBOFcZmJDCHICLKxX2DrmyjzAwd5CkXJgedojRQmx7/:SKkrFcZmJKu0nmyjMwd5yedMRL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fff7024075690cf2f7c2e96f8671de923ea9370519df8bc1d17b34c1c692c17N

Files

0fff7024075690cf2f7c2e96f8671de923ea9370519df8bc1d17b34c1c692c17N
.exe windows:4 windows x86 arch:x86

102d055a144474a2bd5aae021dbbd237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveInGetDevCapsW
waveInGetDevCapsA
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutGetPosition
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
waveInClose
waveInAddBuffer
mmioWrite
mmioSeek
mmioRead
mmioOpenW
mmioOpenA
mmioDescend
mmioCreateChunk
mmioClose
mmioAscend
mixerSetControlDetails
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetID
mixerGetControlDetailsA
mixerClose

shfolder

SHGetFolderPathW

kernel32

TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
MoveFileA
lstrlenW
lstrlenA
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateMutexA
CreateMutexW
CreateProcessA
CreateSemaphoreA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FindResourceExW
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetQueuedCompletionStatus
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetThreadPriority
GetTickCount
GetUserDefaultLangID
GetVersionExA
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByte
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LockFileEx
LockResource
MapViewOfFile
TlsAlloc
MoveFileW
MultiByteToWideChar
OpenEventA
OpenProcess
PostQueuedCompletionStatus
QueryPerformanceCounter
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
RtlUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TerminateProcess
lstrcpynA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

user32

RegisterClassA
wsprintfA
UnregisterClassA
SetWindowTextA
SetWindowLongA
SetTimer
SetFocus
CharNextA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EnableWindow
EndDialog
FindWindowA
GetDlgItem
GetFocus
GetWindowLongA
IsWindow
KillTimer
LoadCursorA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
SetCursor
SendMessageA
SendMessageTimeoutA

advapi32

RegSetValueExW
GetUserNameW
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueExA
RegQueryValueExW
GetUserNameA
RegSetValueExA

ole32

CLSIDFromString
StringFromIID
CoCreateGuid
StringFromGUID2
StringFromCLSID
IIDFromString
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoDisconnectObject
CoCreateInstance
CLSIDFromProgID

oleaut32

LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayRedim
SafeArrayUnaccessData
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VarDecRound
VarUI4FromStr
VariantChangeType
VariantClear
VariantCopy
VariantInit

Exports

Exports

Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

102d055a144474a2bd5aae021dbbd237

Headers

File Characteristics

Imports

winmm

shfolder

kernel32

version

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 80KB - Virtual size: 1.7MB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 20KB - Virtual size: 20KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 80KB - Virtual size: 1.7MB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 20KB - Virtual size: 20KB