596b41d08927cf92f3b93e089726516f3512a27fbae2e643fbaf5ef29a302146

Sharing

Copy URL

Twitter E-mail

General

Target

596b41d08927cf92f3b93e089726516f3512a27fbae2e643fbaf5ef29a302146
Size

4.5MB
MD5

f2298510b14effd4e1766648f84104f7
SHA1

3bf70b2f24e767ad9a5b61f0f4e0f37d3238858a
SHA256

596b41d08927cf92f3b93e089726516f3512a27fbae2e643fbaf5ef29a302146
SHA512

96c5a2b887087463b93a86fdc94c8f6d4d0ce75222734152a87a6f377ea23a6b8b0bac098c29c4cd5b8fcc0caf5fdcce2d5b24ebb2d9ee72c9098367e629874e
SSDEEP

49152:rSqOd18ZIH/OWyqFVowMy1BKp7G+NMsGZZZZ1fz+w:r1Ob8ZAXyqVowMy1B67G+NKZZZZ1fz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
596b41d08927cf92f3b93e089726516f3512a27fbae2e643fbaf5ef29a302146

Files

596b41d08927cf92f3b93e089726516f3512a27fbae2e643fbaf5ef29a302146
.dll windows:6 windows x86 arch:x86

618aa5f9a82ac42863a1787e630cf737

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\newcitest2\20230526\PKPM_V1.5.1.0_20230526_0016\Ci\SPP_OLD\pkpm_ribbon_spp\_runtime\Win32\Release\SPP\SDHelp32.pdb

Imports

kernel32

SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineW
GetCommandLineA
VirtualQuery
VirtualAlloc
GetSystemInfo
CompareStringW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
RtlUnwind
ExpandEnvironmentStringsA
OutputDebugStringW
GetFileType
ExitProcess
GetStdHandle
LCMapStringW
GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateFileW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
GetTempFileNameA
Sleep
GetProfileIntA
GetTickCount
SearchPathA
GetTempPathA
GetWindowsDirectoryA
FindResourceExW
GetCurrentDirectoryA
VerifyVersionInfoA
lstrcpyA
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetACP
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
FileTimeToSystemTime
GlobalFlags
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetVolumeInformationA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
lstrcmpA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
SetThreadPriority
GetCurrentThreadId
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
OutputDebugStringA
SetLastError
CopyFileA
FormatMessageA
LocalFree
GlobalSize
GetCurrentProcessId
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
HeapFree
GetModuleFileNameA
ResetEvent
SetEvent
WaitForSingleObject
GlobalAlloc
ResumeThread
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
CreateEventA
CloseHandle
WriteFile
CreateFileA
lstrcmpiA
lstrlenA
FindResourceW
SizeofResource
GetVersion
LockResource
LoadResource
FindResourceA
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetModuleHandleExW
WriteConsoleW

user32

TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
BringWindowToTop
RealChildWindowFromPoint
ShowOwnedPopups
PostQuitMessage
CharUpperA
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
KillTimer
SetTimer
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
UnhookWindowsHookEx
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetFocus
LoadMenuA
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
IsZoomed
GetMessageTime
GetMessagePos
RegisterWindowMessageA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
IntersectRect
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
GetMenuStringA
LoadMenuW
MessageBeep
NotifyWinEvent
CopyRect
GetSysColor
FillRect
DrawEdge
SetRect
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxA
IsWindowEnabled
ScreenToClient
EndPaint
BeginPaint
SetWindowLongA
PtInRect
SetRectEmpty
IsWindow
UnregisterClassA
FrameRect
CreateIconIndirect
GetIconInfo
DrawStateA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
LoadCursorA
CopyImage
GetAsyncKeyState
MapDialogRect
GetSystemMenu
IsRectEmpty
SetParent
SetLayeredWindowAttributes
LoadCursorW
OffsetRect
DrawFocusRect
InflateRect
GetActiveWindow
WindowFromPoint
ClientToScreen
SetCursor
GetParent
EnumDisplayMonitors
TrackMouseEvent
LoadImageW
UnionRect
SetCapture
LockWindowUpdate
SetFocus
GetMenuItemInfoA
DrawTextA
SystemParametersInfoA
DrawIconEx
DestroyIcon
GetSystemMetrics
GetDesktopWindow
GetDC
ReleaseDC
AppendMenuA
GetMenuItemCount
InsertMenuA
ModifyMenuA
GetMenuState
GetMenuItemID
CreateMenu
CreatePopupMenu
GetSysColorBrush
LoadBitmapW
RemoveMenu
DeleteMenu
GetSubMenu
EnableWindow
TabbedTextOutA
DrawTextExA
GrayStringA
SetWindowRgn
PostMessageA
InvalidateRect
GetClientRect
GetWindowDC
LoadImageA
GetWindowRect
DestroyCursor
GetWindowLongA
SendMessageA
IsMenu
GetNextDlgTabItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
MonitorFromPoint
GetMenuDefaultItem
DrawFrameControl
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetCursorPos
GetWindowRgn
GetComboBoxInfo
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
WaitMessage
PostThreadMessageA
CharUpperBuffA
RegisterClipboardFormatA
DrawIcon
CopyIcon
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
InvertRect
HideCaret
GetNextDlgGroupItem
DefWindowProcA
SetClassLongA

gdi32

Escape
GetBkColor
StretchBlt
CreateRectRgn
CombineRgn
GetStockObject
CreateBitmap
SetBkColor
SetTextColor
CreatePatternBrush
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
SetViewportExtEx
ExtTextOutA
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
SetRectRgn
DPtoLP
GetTextMetricsA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
EnumFontFamiliesExA
CreateRoundRectRgn
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
SetDIBColorTable
LPtoDP
GetRgnBox
OffsetRgn
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceA
TextOutA
RectVisible
PtVisible
Rectangle
CreateHatchBrush
PatBlt
SetPixel
GetPixel
GetObjectA
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
Ellipse
GetTextExtentPoint32A
CreateFontIndirectA
GetBkMode
CreatePen
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
SetViewportOrgEx
GetTextExtentPoint32W
CreateCompatibleDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumValueA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegSetValueExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
ShellExecuteExA

comctl32

ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent
ImageList_Draw

shlwapi

PathFindExtensionA
PathIsUNCA
StrFormatKBSizeA
PathRemoveFileSpecW
PathFindFileNameA
PathStripToRootA

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
DoDragDrop
CoInitializeEx
CoDisconnectObject
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
LoadTypeLi
SysFreeString
VariantCopy
VarBstrFromDate
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocStringLen
OleLoadPicture

gdiplus

GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

winmm

PlaySoundA

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Exports

Exports

helpChm
helpWin
setChmFile

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

618aa5f9a82ac42863a1787e630cf737

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

winmm

oleacc

imm32

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 303KB - Virtual size: 303KB

.data Size: 21KB - Virtual size: 37KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 134KB - Virtual size: 134KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 303KB - Virtual size: 303KB

.data
Size: 21KB - Virtual size: 37KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 134KB - Virtual size: 134KB

.rmnet
Size: 56KB - Virtual size: 60KB