6fc62947468aacc9b758308369ca96349eed30f1e8ae0b6ad56a748f65d39fe1

Sharing

Copy URL

Twitter E-mail

General

Target

6fc62947468aacc9b758308369ca96349eed30f1e8ae0b6ad56a748f65d39fe1
Size

2.9MB
MD5

b38ab9998551ae3b70f6a72dff0dc875
SHA1

95cd03d138da84ea0019745b1c64344e96fc1f76
SHA256

6fc62947468aacc9b758308369ca96349eed30f1e8ae0b6ad56a748f65d39fe1
SHA512

2173c1a9946f6dc2d518b17947ad0f4d73420b30e268b973f4ecaf860a666605cb1fac0e76ae00c38f4f9501c9a75e06de1f77fb904880770050001faf624129
SSDEEP

49152:NJc76oYBqua+PY9u1vItBn3XNPuS7NrjTZ2kIhu9PuzAXAH:NJc7k/Pv1v2h3XkS7NrJ2LkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc62947468aacc9b758308369ca96349eed30f1e8ae0b6ad56a748f65d39fe1

Files

6fc62947468aacc9b758308369ca96349eed30f1e8ae0b6ad56a748f65d39fe1
.exe windows:6 windows x86 arch:x86

da7566e6ac56307768bf2447b2b9dce3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\KINGSOFT_DUBA\Build\Build_Src\kis_wallpaper\kis_wallpaper_sogou\product\win32\dbginfo\kwallpapersdk.pdb

Imports

kernel32

GetWindowsDirectoryW
CreateThread
Process32FirstW
TerminateThread
Process32NextW
Sleep
CreateToolhelp32Snapshot
GetLogicalDriveStringsW
GetTickCount
GetCommandLineW
WriteConsoleW
ReadConsoleInputW
SetConsoleMode
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
GetFullPathNameW
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleCP
lstrlenW
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
GetFileAttributesExW
GetModuleHandleExW
ExitProcess
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GlobalMemoryStatus
FlushConsoleInputBuffer
GetSystemTime
VerifyVersionInfoA
PeekNamedPipe
GetFileType
GetFileSizeEx
GetEnvironmentVariableA
CompareFileTime
MoveFileExA
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
QueryPerformanceFrequency
SleepEx
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetCPInfo
LoadLibraryExW
lstrcmpiW
GetTickCount64
GetDriveTypeW
DeviceIoControl
GetComputerNameA
GlobalUnlock
MoveFileExW
GlobalLock
GlobalFree
GlobalAlloc
GetDiskFreeSpaceExW
OutputDebugStringW
GetExitCodeThread
VerifyVersionInfoW
VerSetConditionMask
GetPrivateProfileStringW
FreeResource
GetFileInformationByHandle
UnmapViewOfFile
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetFileTime
LocalFree
GetSystemDirectoryW
GetVersionExW
FileTimeToSystemTime
GetExitCodeProcess
CreateProcessW
WritePrivateProfileStringW
GetCurrentProcessId
FormatMessageW
GetCurrentThreadId
CreateMutexW
SetEndOfFile
OpenProcess
WaitForSingleObject
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
EnterCriticalSection
QueryDosDeviceW
MultiByteToWideChar
WideCharToMultiByte
WriteFile
GetFileAttributesW
RemoveDirectoryW
FindNextFileW
FindResourceW
LoadResource
FindResourceExW
LockResource
SizeofResource
FreeLibrary
GetModuleHandleW
GetProcessHeap
DeleteCriticalSection
GetProcAddress
HeapDestroy
DecodePointer
HeapAlloc
LoadLibraryW
RaiseException
HeapReAlloc
DeleteFileW
GetLastError
HeapSize
FindClose
InitializeCriticalSectionEx
InitializeCriticalSection
GetModuleFileNameW
HeapFree
FindFirstFileW
CreateDirectoryW
GetFileSize
CloseHandle
CreateFileW
EncodePointer
GetStringTypeW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
SetLastError
GetPrivateProfileIntW
ResetEvent
SetEvent
ReadFile
CreateEventW
WaitForMultipleObjects
GetTempPathW
GetLocalTime
MoveFileW
CopyFileW
GetStdHandle
SetFilePointer
SetConsoleCtrlHandler

user32

GetCursorPos
InvalidateRect
SetForegroundWindow
ReleaseCapture
PtInRect
GetParent
GetClassInfoExW
SetRect
DrawTextW
UpdateLayeredWindow
GetDlgItem
GetClientRect
SetWindowLongW
SetRectEmpty
SetCursor
SetCapture
LoadCursorW
FindWindowW
TranslateMessage
SetFocus
MoveWindow
IsWindowEnabled
GetForegroundWindow
AttachThreadInput
MapWindowPoints
IsChild
PeekMessageW
GetNextDlgTabItem
IsDialogMessageW
DispatchMessageW
IsWindow
ShowWindow
GetActiveWindow
RegisterClassExW
SendMessageW
ScreenToClient
CreateWindowExW
SetActiveWindow
MonitorFromWindow
SetWindowPos
InflateRect
DestroyWindow
GetFocus
GetWindowRect
GetWindow
PostMessageW
CallWindowProcW
DefWindowProcW
GetMessageW
GetWindowLongW
LoadImageW
GetMenuStringW
LoadBitmapW
GetMenuItemCount
GetMenuItemInfoW
CharNextW
KillTimer
DrawIconEx
PostThreadMessageW
LoadIconW
IntersectRect
IsRectEmpty
ChangeWindowMessageFilter
ClientToScreen
DestroyIcon
SetWindowTextW
EqualRect
IsWindowVisible
SetTimer
EndPaint
EnableWindow
GetDesktopWindow
GetWindowThreadProcessId
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
OffsetRect
GetMonitorInfoW
CopyRect
GetDC
SystemParametersInfoW
ReleaseDC
wsprintfW
UnregisterClassW
CreatePopupMenu
RegisterWindowMessageW
DestroyMenu
BeginPaint
GetDlgCtrlID

gdi32

GetClipRgn
OffsetRgn
TextOutW
GetTextExtentPoint32W
LineTo
SetViewportOrgEx
MoveToEx
ExtSelectClipRgn
RoundRect
GetViewportOrgEx
CreateCompatibleBitmap
SaveDC
StretchBlt
CreatePen
SetStretchBltMode
RestoreDC
CreateBitmap
BitBlt
SelectObject
CreateDIBSection
CreateCompatibleDC
GetStockObject
CreateRectRgnIndirect
CreateRoundRectRgn
CreateRectRgn
DeleteDC
SetTextColor
SetBkMode
Rectangle
SelectClipRgn
GetObjectW
GetTextColor
RectInRegion
SetBkColor
DeleteObject
CreateFontIndirectW
GetCurrentObject
CombineRgn
ExtTextOutW
GetDeviceCaps

advapi32

CryptEnumProvidersA
CryptDestroyHash
CryptCreateHash
RegQueryInfoKeyW
CreateServiceW
ChangeServiceConfig2W
ChangeServiceConfigW
RegEnumKeyExW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
StartServiceW
OpenServiceW
LookupAccountNameW
GetAce
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
DeleteAce
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegOpenKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CryptDecrypt
DeregisterEventSource
RegisterEventSourceA
ReportEventA
CryptAcquireContextA
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptSignHashA

shell32

SHBindToParent
ord680
SHParseDisplayName
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ShellExecuteW
Shell_NotifyIconW
ord155
SHGetFolderPathW

ole32

CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoCreateGuid

oleaut32

VarUI4FromStr

shlwapi

PathFindFileNameW
StrToIntW
StrToInt64ExW
PathAddBackslashW
StrToIntA
PathCombineW
PathRemoveFileSpecW
PathFileExistsW

comctl32

DrawShadowText
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipSetStringFormatFlags
GdipDeleteFontFamily
GdipFree
GdipSetStringFormatAlign
GdipPrivateAddFontFile
GdipDeletePrivateFontCollection
GdipCloneFontFamily
GdipSetCompositingQuality
GdipGetFamily
GdipAddPathPieI
GdipDrawRectangleI
GdipAddPathRectangleI
GdipAddPathArcI
GdipSetPenStartCap
GdipDeletePath
GdipSetSmoothingMode
GdipSetClipPath
GdipCreatePath
GdipFillPath
GdipAddPathStringI
GdipSetPenDashStyle
GdipDrawLine
GdipSetPixelOffsetMode
GdipFillRectangle
GdipClosePathFigure
GdipDrawPath
GdipResetWorldTransform
GdipSetPenEndCap
GdipRotateWorldTransform
GdipGetFontSize
GdipTranslateWorldTransform
GdipSetPenMode
GdipDrawImageI
GdipCreateLineBrushFromRectWithAngleI
GdipLoadImageFromFile
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipImageRotateFlip
GdipDrawImagePointsRectI
GdipDrawImageRectRect
GdipCloneImage
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipDisposeImageAttributes
GdipDisposeImage
GdipSetInterpolationMode
GdipCloneBitmapArea
GdipGraphicsClear
GdipGetImagePixelFormat
GdipCreateHBITMAPFromBitmap
GdipCreateImageAttributes
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipDrawImageRectRectI
GdipLoadImageFromStream
GdiplusStartup
GdiplusShutdown
GdipCreateStringFormat
GdipDeleteBrush
GdipAlloc
GdipSetStringFormatLineAlign
GdipCreateFont
GdipCreateSolidFill
GdipSetStringFormatTrimming
GdipCreateFontFromLogfontW
GdipDrawLinesI
GdipDrawString
GdipGetFontCollectionFamilyList
GdipCreateFromHDC
GdipSetTextRenderingHint
GdipCloneBrush
GdipMeasureString
GdipFillRectangleI
GdipGetFontCollectionFamilyCount
GdipDeleteGraphics
GdipDeleteStringFormat
GdipDeleteFont
GdipDeletePen
GdipCreatePen1
GdipNewPrivateFontCollection

ws2_32

WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
accept
WSACreateEvent
htonl
listen
WSACloseEvent
getservbyname
gethostbyname
shutdown
freeaddrinfo
ntohl
gethostname
getaddrinfo
__WSAFDIsSet
WSACleanup
WSAStartup
ioctlsocket
sendto
recvfrom
select
WSAIoctl
WSASetLastError
WSAWaitForMultipleEvents
closesocket
WSAGetLastError
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
recv
send

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreA
CertOpenStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertCloseStore

wldap32

ord200
ord79
ord35
ord33
ord301
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord32
ord46
ord217
ord143
ord30

normaliz

IdnToAscii

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 463KB - Virtual size: 462KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

da7566e6ac56307768bf2447b2b9dce3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

ws2_32

crypt32

wldap32

normaliz

version

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 463KB - Virtual size: 462KB

.data Size: 52KB - Virtual size: 67KB

.rsrc Size: 364KB - Virtual size: 363KB

.reloc Size: 163KB - Virtual size: 164KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 463KB - Virtual size: 462KB

.data
Size: 52KB - Virtual size: 67KB

.rsrc
Size: 364KB - Virtual size: 363KB

.reloc
Size: 163KB - Virtual size: 164KB