document_E506_Nov#22[.]iso

Sharing

Copy URL

Twitter E-mail

General

Target

document_E506_Nov#22.iso
Size

1.2MB
MD5

1324c3f5b19897f15a4d26a18a125ebe
SHA1

78391b0832d0f5f4aca0598086fee39d0c5dadd5
SHA256

1227929a4962989bd6676abba8f974bdf35576c98973309f4a30789a9d9be796
SHA512

cbcd0489cd913ff462539780bf4a9715ce18403e50c071c3b32d090c42e0723e5a21470cdad837b16bf92a86447577dd03b376d79be3c0db6ac18120b270ceb1
SSDEEP

24576:2t68Z3shoA9qB8DvUAZkl9iIDIQIFaO1YnknF6:f8vmqB8DUAZklKYnknF6

Score

N/A

Malware Config

Signatures

Files

document_E506_Nov#22.iso
.iso .vbs
data.txt
document.vbs
.vbs
overhauled/dozens.gif
overhauled/superlativeness.png
.png
overhauled/watering.temp
.dll windows x86

060ac25334ec9db348ade902cce3d445

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
FileTimeToLocalFileTime
FindFirstFileA
FindFirstFileW
FindNextChangeNotification
GetDriveTypeA
GetDriveTypeW
GetFileAttributesA
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetFullPathNameA
GetLogicalDriveStringsW
LocalFileTimeToFileTime
LockFile
SetFileAttributesA
SetFileAttributesW
SetUnhandledExceptionFilter
SetErrorMode
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
LeaveCriticalSection
ReleaseMutex
OpenMutexW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsFree
GetThreadContext
GetSystemInfo
GetLocalTime
GetVersion
SetLocalTime
GetTickCount
GetSystemDirectoryA
GetSystemDirectoryW
GetWindowsDirectoryA
GetWindowsDirectoryW
SetSystemTime
VirtualProtect
ReadProcessMemory
VirtualLock
VirtualUnlock
FindResourceExW
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
LoadResource
FindResourceW
LoadLibraryA
LoadLibraryW
GlobalAlloc
LocalAlloc
SetHandleCount
SetCommMask
SetCommState
SetCommTimeouts
MulDiv
lstrcmpA
lstrcmpiA
lstrlenA
lstrlenW
GlobalAddAtomA
WriteProfileStringW
GetPrivateProfileIntW
MoveFileA
CompareFileTime
IsBadWritePtr
IsBadCodePtr
IsBadStringPtrA
IsBadStringPtrW
SystemTimeToFileTime
GetConsoleCP
GetConsoleOutputCP
ReadConsoleInputA
ReadConsoleInputW
PeekConsoleInputA
ReadConsoleA
ReadConsoleW
WriteConsoleA
WriteConsoleW
SetConsoleCtrlHandler
GetConsoleScreenBufferInfo
SetFilePointerEx
GetConsoleMode
WriteFile
FlushFileBuffers
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCPInfo
GetOEMCP
GetACP
CloseHandle
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
DecodePointer
MoveFileExW
LCMapStringW
MultiByteToWideChar
HeapAlloc
HeapFree
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsSetValue
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
EncodePointer
SetLastError
GetLastError
InterlockedFlushSList
RtlUnwind
RaiseException
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetCurrentDirectoryW
SetCurrentDirectoryA
ExpandEnvironmentStringsW
SetEnvironmentVariableW
GetCommandLineA
SetStdHandle
GetStdHandle
VirtualAllocEx
VirtualAlloc
GetTickCount64
ExitThread
WaitForSingleObjectEx
CreateThread
MoveFileW
ExitProcess

user32

IsWindowVisible
SetForegroundWindow
DialogBoxParamA
SystemParametersInfoW
LoadIconW
LoadBitmapW
SetWindowsHookExW
GetWindow
GetWindowThreadProcessId
FindWindowW
GetDesktopWindow
GetSysColor
MapWindowPoints
ScreenToClient
GetCaretBlinkTime
GetCursor
GetCursorPos
MessageBoxExW
MessageBoxW
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthW
GetPropW
GetScrollPos
SetScrollPos
ValidateRect
GetDC
GetDlgItemTextW
SetActiveWindow
LoadMenuW
GetSystemMetrics
SetCapture
MapVirtualKeyW
GetKeyboardState
GetKeyState
GetFocus
CharUpperW
GetClipboardData
SetClipboardData
OpenClipboard
GetDlgCtrlID
CheckRadioButton
CheckDlgButton
SetWindowPlacement
FlashWindow
UnregisterClassA
AttachThreadInput
SendMessageCallbackW
SendNotifyMessageW
SendMessageTimeoutW
RegisterWindowMessageW
GetProcessWindowStation
GetThreadDesktop
GetKeyboardLayoutNameW
GetKeyboardLayoutNameA
ActivateKeyboardLayout
FindWindowA
SetTimer
EndDialog

gdi32

SetDIBitsToDevice
GetStockObject
GetRgnBox
GetRegionData
CreateSolidBrush
CreateRectRgn
CreateFontIndirectW
CreateDIBitmap
CreateDCW
CreateBitmap
CreatePolygonRgn

advapi32

RegNotifyChangeKeyValue
RegCloseKey

ole32

CoInitializeEx
CoCreateGuid

shlwapi

PathFileExistsA
PathGetDriveNumberA
PathFindSuffixArrayA
StrToIntA
ord155
PathFindExtensionA
PathFindOnPathA

Exports

Exports

DllUnregisterServer
DrawThemeIcon
barmskin
hemocyte
ilicaceae
inapostate
periodontologist
pigweed
postern
pugnaciousness
trichosanthes

Sections

.text
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

060ac25334ec9db348ade902cce3d445

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shlwapi

Exports

Exports

Sections

.text Size: 645KB - Virtual size: 644KB

.data Size: 418KB - Virtual size: 417KB

.idata Size: 6KB - Virtual size: 6KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 52KB - Virtual size: 51KB

.text
Size: 645KB - Virtual size: 644KB

.data
Size: 418KB - Virtual size: 417KB

.idata
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 52KB - Virtual size: 51KB