f19d6c79d8efea829ce8a7e5ba909eb9d067a9a8cf7469195e05fcf42236242e

Sharing

Copy URL Twitter E-mail

General

Target

f19d6c79d8efea829ce8a7e5ba909eb9d067a9a8cf7469195e05fcf42236242e
Size

660KB
MD5

ca8121a4c79c49bf102642fe402e2e24
SHA1

ce91302f2b1da25a4dc0b7500cfa7ae555c2cad3
SHA256

f19d6c79d8efea829ce8a7e5ba909eb9d067a9a8cf7469195e05fcf42236242e
SHA512

3e5d85a23b118c7b1ebd93abe6552650eb6906c37a60101a4dcf95cbab54eb2f75ffc30369bd5a4c02ffbc25d86235e1c98e70b0480b9e01c2a1cfd738c97785
SSDEEP

12288:KwcbBq4yaA6sTcpDqOs4GwEN7sJ8loNs:0bHbISeNLXN7sJ8R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f19d6c79d8efea829ce8a7e5ba909eb9d067a9a8cf7469195e05fcf42236242e

Files

f19d6c79d8efea829ce8a7e5ba909eb9d067a9a8cf7469195e05fcf42236242e
.dll windows x86

b9c7d3b0bf340e951ee9d39eb31e3001

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
VirtualFree
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapCreate
HeapDestroy
GetTimeZoneInformation
GetACP
HeapSize
RaiseException
TerminateProcess
ExitProcess
GetCommandLineA
GetSystemTimeAsFileTime
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalFree
LocalAlloc
InterlockedIncrement
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
lstrlenA
lstrcpynA
GetLastError
SetLastError
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
MultiByteToWideChar
lstrcpyA
InterlockedDecrement
CloseHandle
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
IsValidCodePage
GetCPInfo
GlobalLock
GlobalSize
GlobalAlloc
GlobalFree
GetTickCount
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
IsDBCSLeadByteEx
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
MulDiv
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
WideCharToMultiByte
GlobalUnlock
GlobalReAlloc
GetLocaleInfoA

user32

CopyRect
LoadIconA
TabbedTextOutA
GrayStringA
CharUpperA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
IsIconic
GetWindowPlacement
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
HideCaret
DestroyCaret
CreateCaret
ShowCaret
EmptyClipboard
SetClipboardData
SystemParametersInfoA
AppendMenuA
OpenClipboard
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
GetScrollInfo
SetScrollInfo
SetCaretPos
ScrollWindow
UpdateWindow
SetTimer
KillTimer
GetDlgCtrlID
IsChild
ScreenToClient
ClientToScreen
GetMessageTime
SetFocus
MsgWaitForMultipleObjects
PostMessageA
RegisterClipboardFormatA
RegisterClassExA
MessageBoxA
GetDoubleClickTime
TrackPopupMenu
DestroyMenu
CreatePopupMenu
UnregisterClassA
ReleaseCapture
BeginPaint
GetParent
EndPaint
CallWindowProcA
DefWindowProcA
SetCapture
GetCursorPos
AdjustWindowRectEx
EnableWindow
ShowWindow
SendMessageA
CreateWindowExA
LoadCursorA
GetKeyboardLayout
InflateRect
DrawTextW
DrawTextA
DrawFocusRect
GetDC
ReleaseDC
GetSystemMetrics
MapWindowPoints
SetWindowTextA
GetNextDlgTabItem
GetTopWindow
SetCursor
InvalidateRect
GetClientRect
GetWindowRect
GetFocus
DestroyWindow
FillRect
GetWindowLongA
SetWindowLongA
GetSysColor
GetKeyState
SetWindowPos

gdi32

RoundRect
Ellipse
BitBlt
ExtTextOutW
SetTextColor
SetBkMode
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentExPointA
GetTextExtentExPointW
GetTextMetricsA
RealizePalette
IntersectClipRect
GetObjectA
TranslateCharsetInfo
CreateBitmap
GetClipBox
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
TextOutA
Escape
SetBkColor
ExtTextOutA
Rectangle
Polygon
LineTo
MoveToEx
GetDeviceCaps
GetNearestColor
CreateSolidBrush
CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
SetTextAlign
SelectObject
SelectPalette
DeleteDC
CreatePalette
DeleteObject
CreateFontIndirectA
GetStockObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

ord17

ole32

RevokeDragDrop
OleUninitialize
DoDragDrop
RegisterDragDrop
OleInitialize

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetContext
ImmNotifyIME
ImmSetCompositionFontA

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 88KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b9c7d3b0bf340e951ee9d39eb31e3001

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

imm32

Sections

.text Size: 496KB - Virtual size: 495KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 88KB - Virtual size: 153KB

.rsrc Size: 12KB - Virtual size: 8KB

.data Size: 32KB - Virtual size: 30KB

.text
Size: 496KB - Virtual size: 495KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 88KB - Virtual size: 153KB

.rsrc
Size: 12KB - Virtual size: 8KB

.data
Size: 32KB - Virtual size: 30KB