e3b50343f9ff3acd80c70155f2cfa07c7e077df0596c6afc844beb49987b7eb4

Sharing

Copy URL Twitter E-mail

General

Target

e3b50343f9ff3acd80c70155f2cfa07c7e077df0596c6afc844beb49987b7eb4
Size

2.9MB
MD5

51198b302b71b0fb36c785528a211cdd
SHA1

929a23da515bac9434db5c4fc2bf6ff57fb6e2ba
SHA256

e3b50343f9ff3acd80c70155f2cfa07c7e077df0596c6afc844beb49987b7eb4
SHA512

5093b8c23f40d8b86813e2a0591e178002a4641cbba62bd33a944ffc01d70e2b0dfd44115b5b2516131fd4d4f7ca0db341fb3547bee5e5bbae753162a64a1e8d
SSDEEP

24576:3UHB8iYXPGkCrv/61HgYJug5dJHfNLliizk9wdFkmPTrecBNCHmvB7myzfinAtT:3WBMCehgXgjJNNkuTrecB8OT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3b50343f9ff3acd80c70155f2cfa07c7e077df0596c6afc844beb49987b7eb4

Files

e3b50343f9ff3acd80c70155f2cfa07c7e077df0596c6afc844beb49987b7eb4
.dll windows x86

d0cd78a286c95bd957446cd6f818d091

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
GetSysColorBrush
LoadCursorA
LoadIconA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
DestroyWindow
GetClassLongA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetFocus
SetWindowPos
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
GetMenuItemCount
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
PtInRect
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
SetCursor
PostMessageA
PostQuitMessage
DestroyMenu
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
GetCursorPos
GetSystemMetrics
wsprintfA
MessageBoxA
EnableWindow
TrackMouseEvent
ShowWindow
CallWindowProcA
UpdateLayeredWindow
GetDC
ReleaseDC
SetWindowLongA
IsWindow
GetWindowRect
GetPropA
GetWindowLongA
GetClassNameA
EnumWindows
GetAncestor
SendMessageA
EnumChildWindows
CreateWindowExA
RegisterWindowMessageA
SetPropA

kernel32

WriteFile
GetTempPathA
GetTickCount
GetStartupInfoA
CreateProcessA
WaitForSingleObject
GlobalUnlock
GetFileSize
ReadFile
CloseHandle
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
LCMapStringA
CreateFileA
GetPrivateProfileStringA
GetModuleFileNameA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetProcessHeap
WideCharToMultiByte
lstrlenW
VirtualAlloc
MultiByteToWideChar
RtlFillMemory
GetModuleHandleA
GetProcAddress
LoadLibraryA
LocalSize
MapViewOfFile
CreateFileMappingA
GlobalFree
GlobalLock
GlobalAlloc
RtlMoveMemory
SetStdHandle
IsBadCodePtr
GetStringTypeW
GetStringTypeA
LCMapStringW
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
lstrcmpA
GetACP
HeapSize
RaiseException
TerminateProcess
RtlUnwind
GetCommandLineA
GetOEMCP
GetCPInfo
FlushFileBuffers
GlobalDeleteAtom
SetFilePointer
GetCurrentProcess
GetProcessVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
SetLastError
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
GetVersion
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc

gdi32

ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
GetClipBox
SetBkColor
GetStockObject
RestoreDC
CreateBitmap
DeleteDC
SaveDC
GetDeviceCaps
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible

gdiplus

GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipSetSmoothingMode
GdiplusStartup
GdipLoadImageFromFile
GdipGetImageEncoders
GdipGetImageGraphicsContext
GdipSaveImageToStream
GdipDrawRectangleI
GdipDeletePen
GdipDeleteBrush
GdipSetTextRenderingHint
GdipCreateSolidFill
GdipSetSolidFillColor
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromStream
GdipDisposeImage
GdipGetImageEncodersSize

ole32

StringFromGUID2
CLSIDFromString
CreateStreamOnHGlobal

shell32

SHAppBarMessage
ShellExecuteA

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
ImmGetCompositionStringA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

comctl32

ord17

shlwapi

PathFileExistsA

winmm

PlaySoundA

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 508KB - Virtual size: 566KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0cd78a286c95bd957446cd6f818d091

Headers

File Characteristics

Imports

user32

kernel32

gdi32

gdiplus

ole32

shell32

imm32

winspool.drv

advapi32

comctl32

shlwapi

winmm

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 508KB - Virtual size: 566KB

.rsrc Size: 72KB - Virtual size: 69KB

.data Size: 68KB - Virtual size: 64KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 508KB - Virtual size: 566KB

.rsrc
Size: 72KB - Virtual size: 69KB

.data
Size: 68KB - Virtual size: 64KB