75d72f728d91cde3af57bcf37988908a62ac9f9b5a51dbcc1fc46a1e3f0adaaf

Sharing

Copy URL Twitter E-mail

General

Target

75d72f728d91cde3af57bcf37988908a62ac9f9b5a51dbcc1fc46a1e3f0adaaf
Size

5.9MB
MD5

ded72b09382db411a4bb9ea17d30d674
SHA1

0526f7afffd16c9f47ac46e67a74981b6b76a076
SHA256

75d72f728d91cde3af57bcf37988908a62ac9f9b5a51dbcc1fc46a1e3f0adaaf
SHA512

371911a6e06c1dac96ea0bc90769b4199c14e4445370dbea2969b66f741f4d309e050b9e529f1c6dd0f202c5ec11bdc50551c66b4f965e8cdb4f24662df27507
SSDEEP

98304:Y2GtVWlCuz8Q6k4FnJOyJd8RgxLz9yveBwkT0TEk3UEa9v7w2WqEQ4LUMFLZ2/b:lGtVWehIYv9yvesZEr7w2WqEQ4LUMFLe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75d72f728d91cde3af57bcf37988908a62ac9f9b5a51dbcc1fc46a1e3f0adaaf

Files

75d72f728d91cde3af57bcf37988908a62ac9f9b5a51dbcc1fc46a1e3f0adaaf
.exe windows:5 windows x86 arch:x86

6091f5d34189b91754e2bc67c575d1ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

G:\OpenLoginClient\OpenLoginClient\Release\OpenLoginClient.pdb

Imports

kernel32

CompareStringW
WriteConsoleW
FreeEnvironmentStringsW
CreateFileW
GetProcessHeap
SetEnvironmentVariableA
LCMapStringW
SetHandleCount
IsValidCodePage
GetConsoleMode
GetConsoleCP
IsProcessorFeaturePresent
HeapCreate
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapSize
GetFileType
SetStdHandle
ExitProcess
HeapReAlloc
WideCharToMultiByte
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitThread
VirtualQuery
VirtualAlloc
DecodePointer
EncodePointer
HeapFree
HeapAlloc
VirtualProtect
SearchPathA
GetProfileIntA
GetTempPathA
GetTempFileNameA
GetNumberFormatA
HeapQueryInformation
GetTimeZoneInformation
GetWindowsDirectoryA
SetErrorMode
lstrcpyA
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFileAttributesExA
GetACP
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
GetStringTypeW
QueryPerformanceCounter
FindResourceExW
GetEnvironmentStringsW
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
CreateFileA
lstrcmpiA
ResumeThread
SetThreadPriority
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
lstrcmpA
GetModuleHandleW
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
GlobalSize
lstrlenW
MulDiv
FormatMessageA
LocalFree
LocalAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
FreeLibrary
CompareStringA
LoadLibraryW
lstrcmpW
GetThreadLocale
InterlockedIncrement
GetCurrentProcess
GetSystemInfo
CreateIoCompletionPort
GetQueuedCompletionStatus
WritePrivateProfileStringA
CopyFileA
GetTickCount
CreateDirectoryA
WinExec
GetCurrentDirectoryA
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
GetPrivateProfileStringA
CreateMutexA
SetFileAttributesA
ReleaseMutex
WaitForSingleObject
GetModuleFileNameA
Sleep
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
DeactivateActCtx
SetLastError
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
FindResourceA
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
CloseHandle
CreateThread
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource

user32

SetClipboardData
OpenClipboard
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
SetClassLongA
DestroyAcceleratorTable
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
DrawIconEx
LoadImageA
CopyImage
GetIconInfo
HideCaret
DrawFocusRect
InvertRect
RegisterClipboardFormatA
DestroyIcon
GetMenuDefaultItem
SetMenuDefaultItem
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
GetSystemMenu
LoadMenuW
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
WaitMessage
LoadCursorW
MessageBeep
IsClipboardFormatAvailable
UnregisterClassA
LoadCursorA
GetSysColorBrush
RealChildWindowFromPoint
InvalidateRgn
SetRect
CopyAcceleratorTableA
IntersectRect
DestroyMenu
GetMenuItemInfoA
InflateRect
DrawStateA
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
MapVirtualKeyA
GetKeyNameTextA
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
CloseClipboard
GetMenuStringA
InsertMenuA
RemoveMenu
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
EmptyClipboard
LoadImageW
FrameRect
CopyIcon
CharUpperBuffA
PostThreadMessageA
IsCharLowerA
MapVirtualKeyExA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
GetMenu
SetWindowPos
GetDlgItem
CharNextA
GetNextDlgGroupItem
WindowFromPoint
ClientToScreen
SetParent
SetWindowLongA
GetScrollInfo
CallWindowProcA
GetWindowLongA
GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
GetUpdateRect
EndDialog
ScreenToClient
KillTimer
ReleaseCapture
PtInRect
CopyRect
ReleaseDC
GetDC
SetTimer
SetCapture
IsRectEmpty
OffsetRect
GetParent
RedrawWindow
GetSysColor
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetCursorPos
SetForegroundWindow
LoadIconA
PostMessageA
InvalidateRect
DrawIcon
IsIconic
ShowWindow
GetDlgCtrlID
SystemParametersInfoA
GetSystemMetrics
GetDesktopWindow
GetWindowTextA
IsWindow
GetClassNameA
EnumWindows
GetWindow
SetWindowsHookExA
GetWindowThreadProcessId
CallNextHookEx
LoadIconW
RegisterWindowMessageA
FindWindowA
GetClientRect
SendMessageA
SetLayeredWindowAttributes
GetWindowRect
LoadBitmapW
GetWindowDC
EnableWindow
CharUpperA

gdi32

CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
CreateFontIndirectA
GetTextExtentPoint32A
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetRgnBox
GetTextMetricsA
CreateDIBitmap
CreateCompatibleBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
CreateEllipticRgn
Ellipse
Polygon
OffsetRgn
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
SetPixelV
GetTextFaceA
SelectClipRgn
CreatePen
CreateRectRgn
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
Polyline
CreateCompatibleDC
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
CreateBitmap
SetBkColor
SetTextColor
GetTextColor
GetBkColor
GetDeviceCaps
SetPixel
Rectangle
GetDIBColorTable
StretchBlt
CreateDIBSection
GetObjectA
SetDIBColorTable
SelectObject
DeleteDC
DeleteObject
GetStockObject
CreateFontA
GetPixel
BitBlt

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumValueA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
OpenProcessToken
RegQueryValueA
RegEnumKeyA

shell32

DragQueryFileA
ShellExecuteA
Shell_NotifyIconA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHAppBarMessage
SHGetSpecialFolderPathA
DragFinish

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathIsDirectoryA
PathFileExistsA
UrlUnescapeA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW

ole32

OleGetClipboard
CoTaskMemFree
CoUninitialize
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoInitializeEx
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop

oleaut32

SysAllocStringLen
SysAllocString
VarBstrFromDate
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
VariantInit
VariantChangeType
OleCreateFontIndirect
VariantClear

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat

iphlpapi

GetAdaptersInfo

ws2_32

accept
listen
bind
htonl
WSASocketA
WSARecv
connect
inet_ntoa
inet_addr
gethostbyname
htons
socket
send
recv
closesocket
WSAStartup

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
HttpOpenRequestA
InternetOpenUrlA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpAddRequestHeadersA
InternetQueryDataAvailable

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6091f5d34189b91754e2bc67c575d1ae

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

iphlpapi

ws2_32

oleacc

wininet

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 293KB - Virtual size: 292KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 4.1MB - Virtual size: 4.1MB

.reloc Size: 184KB - Virtual size: 183KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 293KB - Virtual size: 292KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

.reloc
Size: 184KB - Virtual size: 183KB