b43a72a6725d4342dda03210e19e35307e74ef03b3a9757f928663af10f001ac

Sharing

Copy URL

Twitter E-mail

General

Target

b43a72a6725d4342dda03210e19e35307e74ef03b3a9757f928663af10f001ac
Size

472KB
MD5

1a0e44f069192ecdb59268f16d9b47fd
SHA1

3df64c67076d0d05873a6adf93eeb156373a7f34
SHA256

b43a72a6725d4342dda03210e19e35307e74ef03b3a9757f928663af10f001ac
SHA512

56054ba51028587dc21467e758f56b2377db0ccadc5b59c78c717e00df0183a534884f0b8d522fc7389ea71a493afabd52f71b9e9504aba5b2f82c09356aae7c
SSDEEP

12288:Rlg7Vk6XmpPS0IbAMFL3cKncXbk7saeW4S0K+x2th:RlgKWAwL3cKncXgwaeWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b43a72a6725d4342dda03210e19e35307e74ef03b3a9757f928663af10f001ac

Files

b43a72a6725d4342dda03210e19e35307e74ef03b3a9757f928663af10f001ac
.dll windows:4 windows x86 arch:x86

e2bbd17c537e2f88487cb73fc661fc22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\GameMgr\build_temp\Win32\compile\release_static\tool\GMSkin\K8Skin.pdb

Imports

msimg32

TransparentBlt
AlphaBlend

kernel32

DosDateTimeToFileTime
CreateDirectoryW
GetCurrentDirectoryW
SetFileTime
WriteFile
GetLastError
GetFileTime
SetEndOfFile
CopyFileW
GetDriveTypeW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
RemoveDirectoryW
GetFileInformationByHandle
GetTempFileNameW
GetFileSizeEx
MoveFileExW
GetSystemDirectoryW
GetLongPathNameW
SearchPathW
SetCurrentDirectoryW
MoveFileW
lstrlenW
GetTempPathW
DeviceIoControl
GetFullPathNameW
GetWindowsDirectoryW
FindFirstFileW
FindClose
FindNextFileW
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
SystemTimeToFileTime
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
GetModuleFileNameA
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
Sleep
GetVersionExA
GetCurrentThread
InterlockedDecrement
SetLastError
GetCurrentProcess
DuplicateHandle
GetFileType
SetFilePointer
WideCharToMultiByte
lstrcpyW
GetCurrentThreadId
MulDiv
lstrcatW
CreateFileW
GetFileSize
ReadFile
CloseHandle
MultiByteToWideChar
lstrcmpiW
DisableThreadLibraryCalls
GetProcessHeap
GetModuleHandleA
IsValidLocale
SetEnvironmentVariableA
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcAddress

user32

AttachThreadInput
GetForegroundWindow
SetWindowTextW
SystemParametersInfoW
GetWindowThreadProcessId
GetWindow
IsWindowVisible
GetWindowTextLengthW
SetForegroundWindow
IsIconic
IsChild
GetCursorPos
PtInRect
ScreenToClient
ClientToScreen
UpdateWindow
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
CharNextW
InvalidateRect
EnumChildWindows
SetCapture
ReleaseCapture
ShowWindow
SetWindowRgn
OffsetRect
wsprintfW
GetSystemMetrics
SetWindowPos
GetSystemMenu
GetMenuItemInfoW
PostMessageW
KillTimer
SetTimer
GetClassNameW
GetParent
MapWindowPoints
IsWindow
SetPropW
CallWindowProcW
GetPropW
DefWindowProcW
GetClientRect
GetWindowRect
GetWindowLongW
LoadCursorW
SetCursor
TrackMouseEvent
BeginPaint
GetWindowTextW
DrawTextW
EndPaint
IsWindowEnabled
SendMessageW
SetWindowLongW
IsZoomed

gdi32

StretchBlt
CreateFontIndirectW
CreateDIBSection
SetBkColor
CreateSolidBrush
CreateRoundRectRgn
CreatePen
RoundRect
GetStockObject
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
SetBkMode
SetTextColor
BitBlt
DeleteObject
SetStretchBltMode

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

oleaut32

SysFreeString

Exports

Exports

AddShowImage
AddShowImageFromFile
AddShowText
ClearAllShow
DelShowImage
DelShowText
InitSkin
SetBkImage
SetBtnHoverFont
SetBtnImage
SetBtnTextHoverClr
SetCloseBtnImage
SetEditBkColor
SetEnabledCloseBtn
SetProgressBKImage
SetProgressImage
SetProgressTextWindow
SetTextClr
SetWindowID
SlideOff
SlideOn

Sections

.text
Size: 344KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2bbd17c537e2f88487cb73fc661fc22

Headers

File Characteristics

PDB Paths

Imports

msimg32

kernel32

user32

gdi32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 344KB - Virtual size: 343KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 344KB - Virtual size: 343KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB

.rmnet
Size: 60KB - Virtual size: 60KB