invoice_202[.]iso

Sharing

Copy URL

Twitter E-mail

General

Target

invoice_202.iso
Size

1.3MB
MD5

36d56c473734e20aa63e7255dce47b5c
SHA1

e1bf98b73dbcc087af59ba04341fa1e1066547c6
SHA256

9e32d82f6649df430b1a3c7b50cd2dd2e3a55f1262b17ffe9df889c1cad4f641
SHA512

001053251897e51b11ff6471e283d757b0fbb324931a96b6c4a74d39d6d9373f60169cc09f0c1ac6fd5fd8cf711c7691623f0190051359cdb179905da7ee149a

Score

N/A

Malware Config

Signatures

Files

invoice_202.iso
.iso
document.lnk
.lnk
main.dll
.dll regsvr32 windows x64

c5e489cf45e8a8007fdce1f989215e6a

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCurrentProcessorNumber
GetSystemDefaultLangID
AreFileApisANSI
UnregisterApplicationRecoveryCallback
GetCommandLineA
GetErrorMode
UnregisterApplicationRestart
GetEnvironmentStringsW
GetThreadLocale
GetACP
GetUserDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetThreadErrorMode
GetOEMCP
TlsAlloc
GetSystemDefaultUILanguage
VirtualAlloc
GetTickCount
GetCurrentProcess
GetCommandLineW
GetLogicalDrives
SetFileApisToOEM
GetThreadUILanguage
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
GetProcessHeap
FindResourceW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
ReadConsoleW
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
HeapSize
CloseHandle
ReadFile
FindClose
GetTickCount64
SizeofResource
LoadLibraryA
GetFileType
GetStdHandle
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleExW
ExitProcess
TerminateProcess
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
TlsFree
TlsSetValue
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount

user32

IsWow64Message
GetDialogBaseUnits
CountClipboardFormats
GetShellWindow
GetOpenClipboardWindow
EmptyClipboard
CloseClipboard
GetMenuCheckMarkDimensions
GetClipboardSequenceNumber
GetCapture
GetForegroundWindow
GetFocus
CreateMenu
SetProcessDPIAware
GetClipboardViewer
CharNextW
DestroyCaret
GetDesktopWindow
GetActiveWindow
GetMessageExtraInfo
GetProcessWindowStation

advapi32

RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW

shell32

InitNetworkAddressControl

ole32

CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
OleUninitialize
CoFreeUnusedLibraries

oleaut32

VarUI4FromStr

Exports

Exports

DllGetClassObject
DllRegisterServer
PluginInit
arneoxmdd
bctmmjbehxs
bkrqltpwd
cbwxnzcn
cmjjkncoaj
cqtevnlijbyqed
dazfvqhstpcbcrre
dfbspjy
dpcqyjbbl
eimabmch
ejhhuzscu
ekrjrbtweitesk
emvyppsehf
ewxorztodxkw
ffekssattbwvshjy
fhpzgpxmiuuashq
gjzftjaahy
guvgdaczqeldfbt
haacejufh
htgahubmz
hyfgpaosivxa
ivjoffiutwe
jdsdkmpvtpe
jubzdhflmbdstvfrg
kbephjwdw
kceiedyqqwuqqljnx
krebteknuifr
lftpxpdlhqqohwbbj
livdjtqmpz
mqqvuhu
nbzugkeajijmq
npqanotkvldbuf
oubsaovcrv
ovgikpfd
pbssqxafbwzzm
pcwzsrnetxfde
ppmdyjbygg
putotyvgcl
qbhxojomqwz
qemzeyqbuwwn
qvprkug
qztedamdxpndyt
rentznwhcs
sxbqxvwacwlr
tzonwljtuoslrbamj
ucwrxpcc
uevxdlwnekjuxo
uexputbqj
uoofygtfmcbxvj
uqfmxkyjmbejni
watutwabq
wonthgp
xnymgryjak
xzosqmbzdvaejzlxx
ybinpmjs

Sections

.text
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 659KB - Virtual size: 658KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5e489cf45e8a8007fdce1f989215e6a

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 552KB - Virtual size: 551KB

.rdata Size: 659KB - Virtual size: 658KB

.data Size: 25KB - Virtual size: 31KB

.pdata Size: 11KB - Virtual size: 10KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 1024B - Virtual size: 756B

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 552KB - Virtual size: 551KB

.rdata
Size: 659KB - Virtual size: 658KB

.data
Size: 25KB - Virtual size: 31KB

.pdata
Size: 11KB - Virtual size: 10KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 1024B - Virtual size: 756B

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 3KB - Virtual size: 3KB