56967bc1e26c5a526feeb58cf77ab86af723562d5c33572690843155a2ac61a0

Sharing

Copy URL

Twitter E-mail

General

Target

56967bc1e26c5a526feeb58cf77ab86af723562d5c33572690843155a2ac61a0
Size

2.6MB
MD5

7800c49142a287d9de5b20352f2f0397
SHA1

b4906c70a7f3f6d059ca83e981ad3bd5433a284e
SHA256

56967bc1e26c5a526feeb58cf77ab86af723562d5c33572690843155a2ac61a0
SHA512

d1bde0be04ef525271c1ea9a74a4361bc9c7d011c79ffba1a517e3f49218e213a015245b402d485ded81f0a65b6986847314e4c4630b6b535d2066fe1ceee42a
SSDEEP

49152:QBnICOwjQ1wz+435JO9KajVgc7KmbNQsP99LpT7w4I3STuANDMa5oei:QBnICOwjBL35Lajic7KIQA9LpHwf3STC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56967bc1e26c5a526feeb58cf77ab86af723562d5c33572690843155a2ac61a0

Files

56967bc1e26c5a526feeb58cf77ab86af723562d5c33572690843155a2ac61a0
.dll windows:6 windows x86 arch:x86

b9ecb4c642bb90a26a7b7d3fe8dea903

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringW
InitializeCriticalSectionEx
lstrlenA
RtlUnwind
InterlockedFlushSList
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
CompareStringW
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
WriteConsoleW
HeapReAlloc
HeapAlloc
GetLastError
RaiseException
DecodePointer
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
HeapFree
HeapSize
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetLastError
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
FormatMessageA
CopyFileA
MultiByteToWideChar
OutputDebugStringA
EncodePointer
GetCurrentThreadId
GlobalDeleteAtom
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadLibraryA
LoadLibraryW
LoadResource
lstrcmpW
FindResourceA
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
GetCurrentProcessId
GetModuleFileNameA
VirtualProtect
lstrcmpA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileTime
GetFullPathNameA
SetFileTime
GetTempFileNameA
ReplaceFileA
SystemTimeToFileTime
CloseHandle
SetEvent
WaitForSingleObject
SetThreadPriority
ResumeThread
GetCurrentThread
GetVersionExA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
FileTimeToSystemTime
GetThreadLocale
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
GetACP
FindResourceExW
SetErrorMode
lstrcpyA
GetCurrentDirectoryA
VerSetConditionMask
VerifyVersionInfoA
CreateFileA
DeleteFileA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
lstrcmpiA
MoveFileA
GetVolumeInformationA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetWindowsDirectoryA
SearchPathA
GetProfileIntA
Sleep
GetTempPathA
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter

user32

OpenClipboard
GetKeyNameTextA
MapVirtualKeyA
InvertRect
HideCaret
GetIconInfo
DrawIconEx
DrawFocusRect
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
LoadImageA
InsertMenuItemA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
EnumDisplayMonitors
SetLayeredWindowAttributes
MonitorFromPoint
UnionRect
EnableScrollBar
UpdateLayeredWindow
IsRectEmpty
CloseClipboard
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
WindowFromPoint
MessageBeep
MapVirtualKeyExA
GetDoubleClickTime
IsClipboardFormatAvailable
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
SetWindowRgn
DeleteMenu
GetSystemMenu
LoadMenuW
KillTimer
SetTimer
ReleaseCapture
SetCapture
CharUpperA
IsZoomed
LoadImageW
DestroyIcon
TrackMouseEvent
CopyImage
RealChildWindowFromPoint
SetClipboardData
EmptyClipboard
SetClassLongA
SetParent
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
DrawIcon
CharUpperBuffA
GetUpdateRect
LockWindowUpdate
ModifyMenuA
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
WaitMessage
GetComboBoxInfo
SetMenuDefaultItem
GetFocus
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetCaretPos
ClipCursor
SetMenuItemInfoA
GetParent
ShowWindow
MoveWindow
SetWindowPos
GetDlgItem
CheckDlgButton
SendDlgItemMessageA
GetDlgCtrlID
SetFocus
IsWindowEnabled
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowLongA
GetWindow
IsDialogMessageA
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
PostMessageA
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsMenu
IsChild
DestroyWindow
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
IsIconic
DestroyCursor
DrawMenuBar
DefFrameProcA
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
ScrollWindow
SetScrollPos
TabbedTextOutA
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
AdjustWindowRectEx
MessageBoxA
MapWindowPoints
CopyRect
EqualRect
PtInRect
GetClassLongA
GetClassNameA
GetTopWindow
GetLastActivePopup
SetWindowsHookExA
CallNextHookEx
LoadIconA
LoadIconW
DefMDIChildProcA
TranslateMDISysAccel
CreateMenu
SubtractRect
GetWindowRgn
GetDC
GrayStringA
DrawTextExA
DrawTextA
UnhookWindowsHookEx
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
UnregisterClassA
GetCursorPos
GetWindowRect
GetSubMenu
EnableMenuItem
LoadMenuA
InvalidateRect
LoadBitmapA
FillRect
ValidateRect
ReleaseDC
GetWindowDC
LoadBitmapW
GetClientRect
RedrawWindow
EnableWindow
IsWindow
SendMessageA
IsCharLowerA
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
GetWindowThreadProcessId
GetAsyncKeyState
MapDialogRect
SetRectEmpty
OffsetRect
DrawStateA
GetSystemMetrics
DestroyMenu
GetMenuItemInfoA
InflateRect
SystemParametersInfoA
GetMessageA
TranslateMessage
PostQuitMessage
ShowOwnedPopups
SetCursor
RegisterClipboardFormatA
SetWindowContextHelpId
IntersectRect
LoadCursorA
GetSysColorBrush

gdi32

Arc
InvertRgn
GetTextExtentExPointA
GetTextFaceA
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
SetPaletteEntries
ExtFloodFill
CreateFontA
Rectangle
GetCurrentObject
OffsetRgn
LPtoDP
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetDIBColorTable
StretchBlt
SetPixel
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetRgnBox
GetTextColor
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
CreateDIBSection
CreateRoundRectRgn
EnumFontFamiliesExA
GetTextMetricsA
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
CreateCompatibleBitmap
GetTextExtentPoint32A
CreateFontIndirectA
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
GetObjectA
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
GetDeviceCaps
CreateDCA
CopyMetaFileA
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCloseKey
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA

shell32

SHBrowseForFolderA
DragQueryFileA
DragFinish
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
SHAppBarMessage
SHGetFileInfoA

shlwapi

PathFindExtensionA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
PathIsUNCA
PathFindFileNameA

uxtheme

IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemePartSize
GetWindowTheme
GetThemeSysColor

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoInitializeEx
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoGetClassObject
CreateStreamOnHGlobal
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateInstance
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoUninitialize
DoDragDrop
RevokeDragDrop

oleaut32

SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantCopy
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
VarBstrFromDate
OleCreateFontIndirect

oledlg

ord8

gdiplus

GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipGetImagePalette

datacenterf

GEOL_C22
GEOL_C23

wxlcmdmngr

UnRegisterCmdGroup

cfgdll55

m_pCfg

jcmodeldata

_JC_GEOL_SET_HOLE_BASE_NOSTANDSOIL@8
_JC_GEOL_GET_SOIL_ID@8
_JC_GEOL_SET_SOIL_ID@8
_JC_GEOL_GET_SOIL_NAME@12
_JC_GEOL_SET_SOIL_NAMEC@8
_JC_GEOL_SET_HOLE_SOIL@28
_JC_GEOL_GET_HOLE_SOIL@28
_JC_GEOL_GET_HOLE_NAME@12
_JC_GEOL_SET_HOLE_XY@12
_JC_GEOL_GET_HOLE_XY@12
_JC_GEOL_GET_HOLES_XY@4
_JC_GEOL_SET_HOLE_ELEV@12
_JC_GEOL_GET_HOLE_ELEV@12
_JC_GEOL_SET_HOLE_WATER@8
_JC_GEOL_GET_HOLE_WATER@8
_JC_GEOL_SET_HOLE_ES@12
_JC_GEOL_SET_HOLE_GR@12
_JC_GEOL_SET_HOLE_FF@12
_JC_GEOL_SET_HOLE_CC@12
_JC_GEOL_SET_HOLE_PL@12
_JC_GEOL_GET_HOLE_NUM@4
_JC_GEOL_SET_LAYE_NUM@4
_JC_GEOL_GET_LAYE_NUM@4
_JC_GEOL_GET_ELEV0@4
_JC_GEOL_GET_DZFILE@8
_JC_GEOL_GET_STANDSOIL@4
_JC_GEOL_SET_SOIL_NAME@12
_JC_GEOL_GET_HOLE@12
_JC_GEOL_SET_HOLE_FS@12
_JC_GEOL_SET_HOLE_FP@12
_JC_GEOL_SET_HOLE_CZL@12
_JC_GEOL_SET_HOLE@12
_JC_GEOL_GET_HOLE_BASE_THICK@8
_JC_GEOL_SET_HOLE_BASE_THICK@8
_JC_GEOL_GET_HOLE_BASE_PARA@24
_JC_GEOL_SET_HOLE_BASE_PARA@24
_JC_GEOL_GET_HOLE_BASE_CZL@8
_JC_GEOL_SET_HOLE_BASE_CZL@8
_JC_GEOL_SET_HOLE_BASE_FS@8
_JC_GEOL_SET_HOLE_BASE_FP@8
_JC_GEOL_GET_HOLE_BASE_FS@8
_JC_GEOL_GET_HOLE_BASE_FP@8
_JC_GEOL_GET_HOLE_BASE_ELEV_T@4
_JC_GEOL_SET_HOLE_BASE_ELEV_T@4
_JC_GEOL_SET_ELEV0@4
_JC_GEOL_GET_EP_NP@8
_JC_GEOL_SET_IFEP@4
_JC_GEOL_GET_IFEP@4
_JC_GEOL_SET_SOIL_TH_ELEV_IN@4
_JC_GEOL_GET_HOLE_BASE_NOSTANDSOIL@8
_JC_GEOL_SET_EP@16
_JC_GEOL_GET_EP@16
_JC_GEOL_SET_STANDSOIL@4
_JC_GEOL_GET_SOIL_TH_ELEV_IN@4
_JC_GEOL_GET_HOLE_XY_C@12
_JC_GEOL_SET_DZXY@16
_JC_GEOL_DEL_SOIL_HOLE_LAYER@4
_JC_GEOL_INSERT_SOIL_HOLE_LAYER@4

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

winmm

PlaySoundA

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

comctl32

ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetImageCount

commlogic

_R4TOCHAR@20

Exports

Exports

EntryPoint
_DLGEXITGEOL@4
_SOILCS@0
_SOILPARAHOLE@4
_SOILPARASTANDHOLE@0
_TRANSCOORDPARADLG@16
_VIEW_3D_GEOL@0
_WARNINGGEOL@16

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 10.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b9ecb4c642bb90a26a7b7d3fe8dea903

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

datacenterf

wxlcmdmngr

cfgdll55

jcmodeldata

oleacc

winmm

imm32

comctl32

commlogic

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 377KB - Virtual size: 377KB

.data Size: 28KB - Virtual size: 10.3MB

.rsrc Size: 203KB - Virtual size: 203KB

.reloc Size: 159KB - Virtual size: 158KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 377KB - Virtual size: 377KB

.data
Size: 28KB - Virtual size: 10.3MB

.rsrc
Size: 203KB - Virtual size: 203KB

.reloc
Size: 159KB - Virtual size: 158KB

.rmnet
Size: 56KB - Virtual size: 60KB