2024-12-12_4ba01fb6736d7eba31916e90603e7399_bkransomware_floxif

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-12_4ba01fb6736d7eba31916e90603e7399_bkransomware_floxif
Size

12.4MB
MD5

4ba01fb6736d7eba31916e90603e7399
SHA1

e658379e9433f9de520bc52d2d2e4fb473434eee
SHA256

98e17929bd89d7ec162b1ef16be8c101bdd6b50a4bc301be3e66f839e3c6ef18
SHA512

0cadd43dec996186767b19f1d3c73f9ab5658fe71ed26d74438e5857c94a993f38cb928bf535680960359a4840da54952cf067e7e33885daa600db8d5fd1c54e
SSDEEP

98304:NrHqmH10K96SwYIctkdjDDAOfDQter0vobgKznixRuaa5lQTQYbMAiOWqfnPoR6V:NlEXYkda+fziq5lQQYbMAimgeXSg9

Score

1^/10

Malware Config

Signatures

Files

2024-12-12_4ba01fb6736d7eba31916e90603e7399_bkransomware_floxif
.exe windows:5 windows x86 arch:x86

93b44c253f992e1333de35ae60c38f94

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:58:fc:05:42:6c:c4:b6:5d:bc:0c:2c:2e:3a:f3:04
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

11-07-2019 00:00

Not After

15-08-2021 23:59

Subject

CN=GRETECH CORPORATION,OU=GRETECH CORPORATION,O=GRETECH CORPORATION,L=Shinjuku,ST=Tokyo,C=JP

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a0:87:24:35:78:fc:4c:f1:f7:f2:1b:3a:3c:3c:a3:cb:d0:a9:ef:29
Signer

Actual PE Digest

a0:87:24:35:78:fc:4c:f1:f7:f2:1b:3a:3c:3c:a3:cb:d0:a9:ef:29

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Projects\GomPlayer_Tags\2.3.44.5306\project\map_pdb\GOM32R_vc120_ReleaseU.pdb

Imports

winmm

mixerGetLineControlsW
mixerGetDevCapsW
mixerGetLineInfoW
mixerSetControlDetails
mixerGetControlDetailsW
PlaySoundW
mixerGetID
mixerGetNumDevs
mixerClose
waveOutGetNumDevs
mixerOpen

kernel32

GlobalFlags
GetSystemDefaultUILanguage
SetErrorMode
SearchPathW
ExitThread
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
RtlUnwind
VirtualAlloc
HeapQueryInformation
SetStdHandle
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
CreateSemaphoreW
IsValidCodePage
GetOEMCP
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetStringTypeW
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
MoveFileExW
WriteConsoleW
SetEnvironmentVariableA
InterlockedExchange
SwitchToThread
lstrlenA
VirtualFree
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProfileIntW
GlobalGetAtomNameW
GetFileSizeEx
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetFilePointerEx
ReplaceFileW
GetThreadLocale
ReleaseSemaphore
GlobalMemoryStatus
GetEnvironmentStrings
FreeEnvironmentStringsA
InterlockedCompareExchange
SizeofResource
LockResource
LoadResource
FindResourceW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
RaiseException
FreeLibrary
GetCurrentProcess
GetModuleHandleW
LoadLibraryW
Sleep
GetModuleFileNameW
GetProcAddress
VirtualProtect
CloseHandle
lstrlenW
MultiByteToWideChar
lstrcmpW
GlobalAlloc
GlobalLock
GlobalUnlock
CreateDirectoryW
GetFileAttributesW
GetLocalTime
GetDiskFreeSpaceExW
DeleteFileW
GetUserDefaultUILanguage
GetVersionExW
OutputDebugStringW
VerSetConditionMask
VerifyVersionInfoW
LocalFree
WideCharToMultiByte
CopyFileW
GetNativeSystemInfo
GetSystemInfo
GetSystemTimeAsFileTime
MoveFileW
DuplicateHandle
SuspendThread
lstrcmpA
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
EncodePointer
GetVersionExA
MoveFileA
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleA
SetFileAttributesA
CreateDirectoryA
GetDriveTypeA
FindNextFileA
FindFirstFileA
IsDBCSLeadByte
GetCPInfo
GetFileType
GetStdHandle
SetFileTime
DeleteFileA
AreFileApisANSI
GetSystemTime
GetTempPathA
GetFileAttributesExW
GetDiskFreeSpaceA
CreateFileMappingA
LockFileEx
HeapValidate
HeapCreate
GetFileAttributesA
FormatMessageA
UnlockFileEx
WaitForSingleObjectEx
LockFile
FlushViewOfFile
UnlockFile
SystemTimeToFileTime
SetEndOfFile
TryEnterCriticalSection
HeapCompact
CreateMutexW
GetFullPathNameA
InterlockedDecrement
InterlockedIncrement
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetFileAttributesW
GetProcessId
SetThreadExecutionState
CreateFileW
GetLogicalDrives
GetSystemDirectoryA
SetDllDirectoryW
LoadLibraryExW
lstrcmpiW
RemoveDirectoryW
SetPriorityClass
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
LocalAlloc
LoadLibraryA
ResumeThread
GetACP
GetLocaleInfoW
GetLongPathNameW
TerminateThread
SetCurrentDirectoryW
GetUserDefaultLCID
CreateThread
GetCurrentProcessId
CompareStringW
FindResourceExW
QueryPerformanceCounter
GetFullPathNameW
GlobalSize
DeleteTimerQueueEx
CreateTimerQueue
GetDiskFreeSpaceW
GetCommandLineW
GetCurrentDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileTime
SetThreadPriority
GetTempFileNameW
GetTempPathW
GetVersion
IsDBCSLeadByteEx
FreeResource
SetLastError
FlushInstructionCache
CreateTimerQueueTimer
DeleteTimerQueueTimer
ResetEvent
SetEvent
CreateEventW
GetExitCodeProcess
WaitForSingleObject
lstrcpynW
GetUserDefaultLangID
GetCurrentThread
IsBadWritePtr
VirtualQuery
FormatMessageW
SetUnhandledExceptionFilter
FlushFileBuffers
WriteFile
CreateFileA
GetVolumeInformationW
GetSystemWindowsDirectoryW
ReadFile
SetFilePointer
GetFileSize
WaitForMultipleObjects
GetDriveTypeW
OutputDebugStringA
DecodePointer
HeapSize
HeapDestroy
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
GetQueuedCompletionStatus
ReadDirectoryChangesW
PostQueuedCompletionStatus
CreateIoCompletionPort
WritePrivateProfileStringW
GetTickCount
GlobalFree
lstrcpyW
FindClose
FindNextFileW
GetPrivateProfileStringW
FindFirstFileW
WinExec
MulDiv
CreateProcessW
WritePrivateProfileStringA
GetCurrentThreadId
GetPrivateProfileIntW
DeviceIoControl

user32

ShowOwnedPopups
SetWindowContextHelpId
IsClipboardFormatAvailable
IsZoomed
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
WindowFromPoint
SendDlgItemMessageA
GetMessageW
IsDialogMessageW
IsDlgButtonChecked
CheckDlgButton
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
MapWindowPoints
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetClassInfoW
GetMessageTime
GetMessagePos
CreateDialogIndirectParamW
GetLastActivePopup
MapDialogRect
GetAsyncKeyState
GetMenuState
CharToOemBuffA
CharUpperA
OemToCharA
CharLowerA
CharToOemA
OemToCharBuffA
SetLastErrorEx
AnimateWindow
ShowScrollBar
UnregisterHotKey
RegisterHotKey
GetKeyNameTextW
MapVirtualKeyW
InsertMenuA
mouse_event
SubtractRect
ExitWindowsEx
ChangeDisplaySettingsW
ShowCursor
SetActiveWindow
EnumDisplayDevicesW
GetActiveWindow
CreateMenu
SetMenuItemInfoW
DeleteMenu
RemoveMenu
CheckMenuItem
AppendMenuW
CheckMenuRadioItem
EnableMenuItem
GetDoubleClickTime
PostThreadMessageW
PostQuitMessage
GetCapture
GetNextDlgTabItem
DrawEdge
DrawFrameControl
DrawFocusRect
RegisterClipboardFormatW
MessageBeep
wsprintfA
EnumDisplaySettingsW
InflateRect
CharUpperW
GetMenu
AdjustWindowRectEx
SetLayeredWindowAttributes
GetWindowDC
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
DestroyIcon
LoadMenuW
GetMenuItemInfoW
ModifyMenuW
GetMenuItemID
GetMenuStringW
GetUpdateRect
GetDlgCtrlID
GrayStringW
DrawTextExW
TabbedTextOutW
SetCapture
IntersectRect
UpdateLayeredWindow
SetRect
MonitorFromPoint
GetMonitorInfoW
MonitorFromRect
IsChild
RedrawWindow
CreateAcceleratorTableW
InvalidateRgn
GetDesktopWindow
DestroyAcceleratorTable
LoadCursorFromFileW
SetParent
GetClassLongW
SetClassLongW
DestroyCursor
MessageBoxW
GetClassInfoExW
RegisterClassExW
UpdateWindow
EqualRect
DestroyMenu
TrackPopupMenu
GetMenuItemCount
GetSubMenu
GetKeyState
DestroyWindow
GetWindow
GetTopWindow
GetCursor
GetFocus
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
SendMessageTimeoutW
ClientToScreen
UnionRect
CallWindowProcW
EnumWindows
GetClassNameW
SetRectEmpty
GetWindowPlacement
EndDialog
EndPaint
BeginPaint
MoveWindow
SetWindowPos
CreateWindowExW
NotifyWinEvent
GetSysColorBrush
RealChildWindowFromPoint
CopyImage
CopyAcceleratorTableW
GetSystemMenu
GetNextDlgGroupItem
GetMenuDefaultItem
EnableScrollBar
HideCaret
InvertRect
LockWindowUpdate
EnumDisplayMonitors
DrawStateW
IsMenu
GetComboBoxInfo
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
SetFocus
GetForegroundWindow
DialogBoxIndirectParamW
RemovePropW
SetPropW
GetPropW
SetDlgItemTextW
ToUnicodeEx
GetKeyboardState
SetCursorPos
CopyIcon
SetMenuDefaultItem
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
IsWindowEnabled
TranslateMDISysAccel
GetWindowLongW
SetWindowLongW
TrackMouseEvent
BringWindowToTop
LoadImageW
DrawIconEx
LoadBitmapW
LoadAcceleratorsW
IsIconic
DrawIcon
TranslateAcceleratorW
GetIconInfo
GetCursorInfo
CreatePopupMenu
InsertMenuW
GetDlgItem
keybd_event
DrawTextW
RegisterWindowMessageW
EnableWindow
CopyRect
PostMessageW
DefWindowProcW
UnregisterClassW
GetClientRect
RegisterWindowMessageA
LoadCursorW
FindWindowW
FindWindowA
LoadIconW
RegisterClassW
GetWindowRect
GetWindowRgn
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
SetWindowRgn
GetDC
EnumChildWindows
ReleaseDC
GetCursorPos
IsRectEmpty
PtInRect
OffsetRect
SetCursor
IsWindow
SetTimer
IsWindowVisible
wvsprintfW
PeekMessageW
FindWindowExW
wsprintfW
DispatchMessageW
TranslateMessage
ShowWindow
KillTimer
InvalidateRect
GetParent
GetSystemMetrics
FillRect
GetSysColor
SendMessageW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SystemParametersInfoW
ScreenToClient
CharNextW
ReleaseCapture

gdi32

GetTextExtentPointW
SetMapMode
CreateFontA
GetTextExtentPoint32A
TextOutA
BeginPath
CloseFigure
EndPath
GetPath
AbortPath
SelectPalette
RealizePalette
CopyMetaFileW
CreateDCW
CreateBitmap
CreateHatchBrush
ExcludeClipRect
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
ExtSelectClipRgn
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
SaveDC
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
PatBlt
GetMapMode
SetRectRgn
DPtoLP
LPtoDP
GetTextColor
GetCharWidthW
CreatePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesW
GetTextCharsetInfo
Polyline
SetPixelV
ExtFloodFill
SetPaletteEntries
GetBoundsRect
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
RestoreDC
GetClipBox
GetCurrentObject
PtInRegion
FrameRgn
Polygon
GetBkColor
Ellipse
FillRgn
SetTextCharacterExtra
SetPixel
LineTo
MoveToEx
EnumFontFamiliesExW
GetTextMetricsW
Escape
TextOutW
RectVisible
PtVisible
OffsetRgn
CombineRgn
Rectangle
CreatePen
StretchDIBits
CreateFontIndirectW
GetObjectA
CreateRectRgnIndirect
CreateRoundRectRgn
CreateEllipticRgn
CreatePatternBrush
GetDIBColorTable
SetDIBColorTable
ExtTextOutW
SetBkColor
SelectClipRgn
SetTextColor
SetBkMode
GetPixel
GetRgnBox
GetDIBits
CreateDiscardableBitmap
StretchBlt
GetTextExtentPoint32W
DeleteDC
SelectObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
GetDeviceCaps
CreateDIBitmap
GetStockObject
GetPaletteEntries
DeleteObject
CreateDIBSection
CreateSolidBrush
GetObjectW
CreateFontW
CreatePolygonRgn
RoundRect

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetSaveFileNameW
GetOpenFileNameW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyW
RegQueryValueExW
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
GetFileSecurityW
AdjustTokenPrivileges
SetFileSecurityA
SetFileSecurityW
LookupPrivilegeValueA
CryptHashData
CryptDestroyHash
CheckTokenMembership
CryptCreateHash
CryptReleaseContext
RegEnumKeyW
CryptAcquireContextW
CryptGetHashParam
RegSetValueExA
RegSetValueW
RegSetValueA
RegQueryValueExA
RegQueryValueA
RegQueryInfoKeyA
FreeSid
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyA
RegFlushKey
RegQueryValueW
RegOpenKeyW
RegEnumValueW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey

shell32

ShellExecuteW
SHCreateDirectoryExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
Shell_NotifyIconW
DragQueryFileW
DragFinish
DragQueryPoint
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFolderPathW
ShellExecuteExW
DragAcceptFiles
SHFileOperationW
SHGetFileInfoW
SHChangeNotify

comctl32

_TrackMouseEvent
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Draw
ImageList_Create
ImageList_Add

shlwapi

PathFileExistsW
PathFindFileNameW
PathFindExtensionW
StrCmpLogicalW
PathAddBackslashW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW

uxtheme

OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsAppThemed
DrawThemeText
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme

ole32

DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoDisconnectObject
CoFreeUnusedLibraries
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoInitializeEx
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoUninitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoGetObject
StringFromCLSID
CoInitialize
OleLoadFromStream
OleSaveToStream
StgCreateDocfile
StgOpenStorage
MkParseDisplayName
CreateBindCtx
CoCreateGuid
OleSetContainedObject
OleCreate
CoFreeLibrary
CoLoadLibrary
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleUninitialize

oleaut32

VariantClear
VariantInit
SafeArrayDestroy
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayCreateVector
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysStringLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantCopy
VarUI4FromStr
OleLoadPicturePath
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
SysAllocString
SysFreeString
VariantChangeType

oledlg

OleUIBusyW

urlmon

UrlMkSetSessionOption
UrlMkGetSessionOption

gdiplus

GdipSaveImageToFile
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromResource
GdipCreateFromHDC
GdipDrawImagePointRectI
GdipDrawImageI
GdipDeleteFontFamily
GdipDeleteFont
GdipMeasureString
GdipCreateFontFamilyFromName
GdipCreateFont
GdipSetTextRenderingHint
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreatePen1
GdipDeletePen
GdipFillRectangleI
GdipDrawRectangleI
GdipDrawString
GdipDrawImage
GdipGetGenericFontFamilySansSerif
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipSetInterpolationMode
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorKeys
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateStringFormat
GdipDeleteStringFormat
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipGetSmoothingMode
GdipStringFormatGetGenericTypographic
GdipGraphicsClear
GdipSetStringFormatAlign
GdipCreateBitmapFromStreamICM
GdipSetImageAttributesColorMatrix
GdipFillPolygonI
GdipSetStringFormatLineAlign
GdipCreateBitmapFromStream
GdipBitmapSetResolution
GdipDrawPath
GdipClosePathFigure
GdipAddPathLineI
GdipGetPropertyItem
GdipDrawImageRectRectI
GdipAddPathArcI
GdipDeletePath
GdipCreateBitmapFromHBITMAP
GdipBitmapGetPixel
GdipGetPropertyItemSize
GdipFillPath
GdipDrawLineI
GdipImageRotateFlip
GdipCreatePath
GdipSetPixelOffsetMode
GdipFillEllipseI
GdipGetImageRawFormat
GdipSetStringFormatFlags
GdipSetStringFormatHotkeyPrefix
GdipSetStringFormatTrimming
GdipCloneStringFormat
GdipGetStringFormatFlags
GdipGetFontHeight
GdipFillRectangle
GdipCreateRegionRectI
GdipDeleteRegion
GdipCreateRegion
GdipGetClip
GdipSetClipRegion
GdipGetTextRenderingHint
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipDrawImageRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetLogFontW
GdipSetEmpty
GdipCombineRegionRectI
GdipGetRegionHRgn
GdipNewPrivateFontCollection
GdipGetFontCollectionFamilyCount
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipDeletePrivateFontCollection
GdipAddPathString
GdipDrawImageRect
GdipLoadImageFromFile
GdipSetPenMode
GdipSetCompositingMode
GdipCreateMatrix
GdipSetSmoothingMode
GdipTranslateMatrix
GdipRotateMatrix
GdipSetWorldTransform
GdipSetPenDashStyle
GdipSetPathFillMode
GdipGetPathWorldBounds
GdipTransformRegion
GdipIsVisibleRegionPointI
GdipSetStringFormatMeasurableCharacterRanges
GdipMeasureCharacterRanges
GdipGetRegionBounds
GdipScaleMatrix
GdipTransformPath
GdipAddPathPath
GdipSetMatrixElements
GdipSetPenLineJoin
GdipWidenPath
GdipAddPathRectangle
GdipWarpPath
GdipLoadImageFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromGdiDib
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageWidth
GdipGetImageHeight
GdipDrawEllipseI
GdipDeleteMatrix

crypt32

CertGetNameStringW
CryptUnprotectData

wininet

InternetSetCookieW
InternetCreateUrlW
InternetCrackUrlA
InternetCloseHandle
HttpEndRequestW
InternetGetConnectedState
HttpOpenRequestW
InternetGetCookieW
InternetOpenW
HttpSendRequestExW
InternetCrackUrlW
InternetReadFile
InternetConnectW
InternetWriteFile
InternetSetCookieExW
HttpQueryInfoW
HttpAddRequestHeadersW
InternetSetOptionW
HttpSendRequestW

ws2_32

WSAAsyncSelect
getservbyport
ntohs
inet_ntoa
gethostbyaddr
send
WSAGetLastError
ntohl
recv
htonl
closesocket
socket
htons
inet_addr
connect
gethostbyname
WSAStartup
gethostname
WSACleanup
WSASetLastError
getservbyname

iphlpapi

GetAdaptersInfo

imm32

ImmGetContext
ImmSetConversionStatus
ImmReleaseContext
ImmGetDefaultIMEWnd
ImmGetConversionStatus
ImmGetOpenStatus

rpcrt4

UuidCreate
RpcStringFreeW
UuidToStringW

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain

d3d9

Direct3DCreate9

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 118KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GOMSH
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 479KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93b44c253f992e1333de35ae60c38f94

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

4f:58:fc:05:42:6c:c4:b6:5d:bc:0c:2c:2e:3a:f3:04Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

a0:87:24:35:78:fc:4c:f1:f7:f2:1b:3a:3c:3c:a3:cb:d0:a9:ef:29Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

gdiplus

crypt32

wininet

ws2_32

iphlpapi

imm32

rpcrt4

wintrust

d3d9

version

oleacc

Sections

.text Size: 6.1MB - Virtual size: 6.1MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 118KB - Virtual size: 223KB

.GOMSH Size: 512B - Virtual size: 12B

.rsrc Size: 4.2MB - Virtual size: 4.2MB

.reloc Size: 479KB - Virtual size: 479KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

4f:58:fc:05:42:6c:c4:b6:5d:bc:0c:2c:2e:3a:f3:04
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

a0:87:24:35:78:fc:4c:f1:f7:f2:1b:3a:3c:3c:a3:cb:d0:a9:ef:29
Signer

.text
Size: 6.1MB - Virtual size: 6.1MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 118KB - Virtual size: 223KB

.GOMSH
Size: 512B - Virtual size: 12B

.rsrc
Size: 4.2MB - Virtual size: 4.2MB

.reloc
Size: 479KB - Virtual size: 479KB