455948d008b41a1e3e20f79d47a939c17ab014deda6d1f17420c4184d6564af7_unpacked

Resubmissions

28/05/2023, 10:08

230528-l6lhzaeh26 3

28/05/2023, 10:01

230528-l2h72sfc6t 6

Sharing

Copy URL Twitter E-mail

General

Target

455948d008b41a1e3e20f79d47a939c17ab014deda6d1f17420c4184d6564af7_unpacked
Size

455KB
MD5

e7376fe5993cd38483f2948d5bfd2f4a
SHA1

416196ba9af49c87de882612309b07e9b7c5839e
SHA256

a6a12f3b0b8f26cd7de4a98deed55cdba949c8631a3e65ec72470d3f5109ba64
SHA512

b24998332099d0b13bffef9e90ece5dce5cacc0ee2ef3ebd98c3dc223ac5d8f423cd5f8772b9339acaa5626e08b7528eda517c1eff9db3a49597fa5fdf153a34
SSDEEP

6144:qYGKcdvv6azsXHkDriqiN0DaSCrIB28UJ1F5FRpS0X:HGKKDAKhi+Da3rIByJ13pR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
455948d008b41a1e3e20f79d47a939c17ab014deda6d1f17420c4184d6564af7_unpacked

Files

455948d008b41a1e3e20f79d47a939c17ab014deda6d1f17420c4184d6564af7_unpacked
.dll regsvr32 windows x86

2f7d1706341a4c1a58fd983f48b245ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
GetNumaHighestNodeNumber
SetThreadAffinityMask
ReadFile
OpenEventA
SizeofResource
TryEnterCriticalSection
GetLogicalDrives
GetOEMCP
CompareFileTime
GlobalHandle
GetFileSizeEx
CreateTimerQueueTimer
FindFirstFileExW
SetWaitableTimer
TlsSetValue
FindFirstVolumeW
GetSystemDefaultLCID
VirtualProtect
VerifyVersionInfoA
HeapFree
SetLastError
EnterCriticalSection
VirtualFree
GetCommandLineW
GetCurrentProcess
GetStdHandle
ReleaseSemaphore
WriteFile
RegisterWaitForSingleObject
GetModuleHandleExW
UnregisterWait
DeviceIoControl
LCMapStringA
VirtualAlloc
TerminateProcess
GetProcessAffinityMask
LoadLibraryExA
SetFileTime
WaitForMultipleObjects
GetConsoleCP
SignalObjectAndWait
SetThreadPriority
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
InitializeCriticalSection
ExpandEnvironmentStringsA
SetErrorMode
SetFilePointer
GetCompressedFileSizeW
SetEndOfFile
PeekNamedPipe
WaitForMultipleObjectsEx
FindClose
GetVolumePathNameW
WaitForSingleObject
FreeLibraryAndExitThread
GetCurrentThreadId
lstrcmpA
ResumeThread
UnmapViewOfFile
DuplicateHandle
ExitThread
GetModuleHandleA
GetLocaleInfoA
GetACP
HeapSize
GetVersion
GetCommandLineA
GetVolumeNameForVolumeMountPointW
GetExitCodeThread
Sleep
GetConsoleMode
GetTimeZoneInformation
LocalFileTimeToFileTime
GetLastError
ChangeTimerQueueTimer
GetFileAttributesA
GetStringTypeExA
CreateFileA
GetUserDefaultLCID
SetEvent
GetLogicalProcessorInformation
FileTimeToSystemTime
GetCurrentThread
InterlockedFlushSList
GetSystemDirectoryA
TerminateThread
LoadLibraryA
WaitForSingleObjectEx
TlsAlloc
GetVersionExA
LockResource
QueryPerformanceFrequency
GetThreadPriority
GlobalAlloc
GlobalFree
HeapReAlloc
CloseHandle
RaiseException
GetSystemInfo
CreateThread
ResetEvent
GetWindowsDirectoryA
LoadResource
HeapAlloc
FileTimeToLocalFileTime
QueueUserAPC
GetLocalTime
SetStdHandle
CreateWaitableTimerA
SwitchToThread
HeapDestroy
GlobalLock
SetFilePointerEx
UnregisterWaitEx
LocalFree
MoveFileExW
IsProcessorFeaturePresent
GetFileSize
DeleteCriticalSection
ExitProcess
VerSetConditionMask
FindVolumeClose
SetEnvironmentVariableA
GetCurrentProcessId
UnhandledExceptionFilter
GetProcessHeap
SystemTimeToFileTime
IsValidLocale
FreeLibrary
FlushInstructionCache
GetVolumePathNamesForVolumeNameW
SleepEx
VerifyVersionInfoW
TlsGetValue
GetThreadTimes
SystemTimeToTzSpecificLocalTime
GetSystemTimeAsFileTime
GetFileType
DeleteTimerQueueTimer
TlsFree
CreateDirectoryA
GetSystemTime
GlobalMemoryStatus
FormatMessageA
BackupRead
CreateSemaphoreA
InterlockedPushEntrySList
DosDateTimeToFileTime
CreateEventA
MapViewOfFile
FindNextVolumeW
BackupSeek
QueryPerformanceCounter
InitializeSListHead
GetTickCount
GlobalUnlock
MulDiv
VirtualQuery
IsWow64Process
GetFileTime
InterlockedPopEntrySList
GlobalReAlloc
IsDebuggerPresent
VirtualQueryEx
QueryDepthSList
CreateTimerQueue
SetUnhandledExceptionFilter
FlushFileBuffers
FileTimeToDosDateTime

user32

EnableMenuItem
SetScrollPos
GetSysColorBrush
GetDesktopWindow
PostQuitMessage
CheckDlgButton
KillTimer
ShowCaret
LookupIconIdFromDirectoryEx
DrawIconEx
SetRect
GetMenuInfo
GetDlgItem
GetClientRect
CheckMenuItem
RemoveMenu
GetComboBoxInfo
MapDialogRect
SetScrollRange
FlashWindowEx
SetRectEmpty
SetCursor
SetClipboardData
GetWindowDC
SetCapture
SetParent
DestroyCaret
DragDetect
SetWindowContextHelpId
TranslateMessage
GetUpdateRect
BringWindowToTop
SetFocus
SetLayeredWindowAttributes
DestroyMenu
EnumWindows
UnhookWindowsHookEx
IsDlgButtonChecked
MoveWindow
IsWindowEnabled
GetSysColor
DrawFocusRect
FrameRect
TrackMouseEvent
SetMenuInfo
SetWindowPlacement
MapWindowPoints
CreateCaret
IsChild
ExitWindowsEx
EmptyClipboard
DestroyAcceleratorTable
CloseClipboard
ClientToScreen
GetDlgCtrlID
DrawEdge
IsMenu
DestroyIcon
RedrawWindow
SetTimer
GetCapture
OffsetRect
OpenClipboard
InvalidateRgn
IsWindow
ShowWindow
GetActiveWindow
GetSubMenu
SetCaretPos
TrackPopupMenu
DestroyCursor
GetWindowPlacement
WindowFromPoint
MsgWaitForMultipleObjects
GetScrollInfo
SetMenuItemBitmaps
CreatePopupMenu
MessageBeep
GetSystemMetrics
EndDialog
CallNextHookEx
ScreenToClient
DeleteMenu
GetIconInfo
FillRect
HideCaret
CopyIcon
LoadStringA
EnumChildWindows
GetMenuItemCount
MonitorFromWindow
CopyImage
SetWindowPos
IsWindowVisible
GetDC
InflateRect
DestroyWindow
GetFocus
GetMenu
GetMenuItemID
GetWindowRect
CreateIconFromResourceEx
GetWindow
CheckMenuRadioItem
MonitorFromPoint
GetMessagePos
GetKeyState
AdjustWindowRectEx
GetSystemMenu
CharLowerBuffA
GetWindowThreadProcessId
EndPaint
CharLowerA
GetParent
PtInRect
UpdateWindow
DrawFrameControl
ReleaseCapture
InvalidateRect
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos
BeginPaint
CopyRect

oleaut32

VarBstrFromR8
VariantInit
LoadTypeLi
SysFreeString
SysAllocStringByteLen
SysAllocString
VarBstrCmp
DispCallFunc
SysStringLen
SysAllocStringLen
VariantChangeType
VariantClear
VarUI4FromStr

Exports

Exports

DllInstall
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 366KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

2f7d1706341a4c1a58fd983f48b245ef

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

oleaut32

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 76KB

.rdata Size: 9KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 4KB

.rsrc Size: 366KB - Virtual size: 368KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 75KB - Virtual size: 76KB

.rdata
Size: 9KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 366KB - Virtual size: 368KB

.reloc
Size: 1KB - Virtual size: 1KB