3e6c0a23b655e1472db6782493d5bcd37c00d5a9141b6553aa2f7afb6fcc2980

Sharing

Copy URL Twitter E-mail

General

Target

3e6c0a23b655e1472db6782493d5bcd37c00d5a9141b6553aa2f7afb6fcc2980
Size

1.6MB
MD5

a27f6c81457401dddfd7f95845eb0e8a
SHA1

4f6d9341654b454e298c2d55fbccf68817745549
SHA256

3e6c0a23b655e1472db6782493d5bcd37c00d5a9141b6553aa2f7afb6fcc2980
SHA512

9f844508dd1a55f5f71942d63bf050090a31c1701a980537ba5d52c1aec02f23cce6ffe979d14d191809466106cd8fdcbda708c1b08d93ff9ae2e4b6dd9b9d22
SSDEEP

49152:YZVvBcugUogo/za3SwvFztfzcLgvLncyT:eVV0za3Sw9iED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e6c0a23b655e1472db6782493d5bcd37c00d5a9141b6553aa2f7afb6fcc2980

Files

3e6c0a23b655e1472db6782493d5bcd37c00d5a9141b6553aa2f7afb6fcc2980
.dll windows x64

6a46457741f4fb88df059365d707a775

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memset
_wcsicmp
wcscmp
tolower
wcslen
wcscpy
fabs
malloc
free
ceil
floor
fseek
ftell
fread
memcpy
??3@YAXPEAX@Z
fmod
_wfopen
fclose
fwrite
pow
memmove
wcsncpy
fopen
realloc
calloc
fprintf
__iob_func
getenv
strcmp
atoi
sprintf
_vsnprintf
sqrt
_vsnwprintf

kernel32

HeapCreate
HeapDestroy
GetModuleHandleW
UnregisterWait
CloseHandle
EnterCriticalSection
LeaveCriticalSection
HeapFree
TlsFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
TlsGetValue
HeapAlloc
GetCurrentProcess
GetCurrentThread
DuplicateHandle
RegisterWaitForSingleObject
TlsSetValue
FreeLibrary
LoadLibraryW
GetProcAddress
CreateFileW
WriteFile
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
HeapReAlloc
Sleep

user32

DragDetect
CheckMenuItem
CheckRadioButton
CharUpperW
CharLowerW
CharNextW
CharPrevW
CheckMenuRadioItem
ClipCursor
RegisterRawInputDevices
GetRawInputData
GetWindowRect
SetCapture
SetFocus
ShowCursor
GetForegroundWindow
ChangeDisplaySettingsW
DestroyWindow
ReleaseDC
GetWindow
SetActiveWindow
SendMessageW
DestroyIcon
LoadIconW
LoadCursorW
GetPropW
UnregisterClassW
RegisterClassW
CreateWindowExW
RegisterWindowMessageW
DefWindowProcW
SystemParametersInfoW
GetDC
FillRect

opengl32

glDeleteTextures
glEnable
glDepthFunc
glGetIntegerv
glViewport
glMatrixMode
glDisable
wglMakeCurrent
wglDeleteContext

glu32

gluOrtho2D

ole32

CoUninitialize
CoInitialize

shell32

DragFinish

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY

gdi32

DeleteObject
GetStockObject
CreateFontIndirectW
GetDeviceCaps
GetObjectType
GetObjectW
CreateBitmap
CreateCompatibleDC
SelectObject
SetPixel
DeleteDC
CreateDIBSection
GetDIBits
BitBlt
CreateDCW

comctl32

InitCommonControlsEx

Exports

Exports

DllUnregisterServer
EndSearch
Init
SearchLink

Sections

.code
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a46457741f4fb88df059365d707a775

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

opengl32

glu32

ole32

shell32

gdiplus

gdi32

comctl32

Exports

Exports

Sections

.code Size: 20KB - Virtual size: 19KB

.text Size: 278KB - Virtual size: 277KB

.rdata Size: 47KB - Virtual size: 46KB

.pdata Size: 13KB - Virtual size: 12KB

.data Size: 5KB - Virtual size: 9KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 512B - Virtual size: 492B

.code
Size: 20KB - Virtual size: 19KB

.text
Size: 278KB - Virtual size: 277KB

.rdata
Size: 47KB - Virtual size: 46KB

.pdata
Size: 13KB - Virtual size: 12KB

.data
Size: 5KB - Virtual size: 9KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 512B - Virtual size: 492B