cc31b026f1bb4c74c715ce73346f6a1fb7e50b10c67360f5111e9a6cd617c420

Sharing

Copy URL Twitter E-mail

General

Target

cc31b026f1bb4c74c715ce73346f6a1fb7e50b10c67360f5111e9a6cd617c420
Size

1.6MB
MD5

a7fb0d905ee5834ed4607d54fa568751
SHA1

8844eb2b9f4a85ce0626e0fddfb33f7788177979
SHA256

cc31b026f1bb4c74c715ce73346f6a1fb7e50b10c67360f5111e9a6cd617c420
SHA512

b48a89682a119d8b13b91bbd6542c5b488f85e421b8131cb1c908cc005a8e23b545c414429a4a0233fb29fcb2a93047bb3a60f76e7552f0a708829eaa88e21f5
SSDEEP

12288:CSj6qdlb3stHT9HwsEpwgfUTKg9Wktd1I8qOeQF1bWVtL9ksGu1aPBEXrdIm8Y:C2v8HwVD8kbQF1bWVbk5jPWRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cc31b026f1bb4c74c715ce73346f6a1fb7e50b10c67360f5111e9a6cd617c420

Files

cc31b026f1bb4c74c715ce73346f6a1fb7e50b10c67360f5111e9a6cd617c420
.dll regsvr32 windows x86

c3caff00e845af5f27c9972132965d5b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
SizeofResource
RtlUnwind
RaiseException
TerminateProcess
GetCommandLineA
HeapFree
CreateThread
ExitThread
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
FatalAppExitA
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetOEMCP
GetCPInfo
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
GetProcessVersion
FreeLibrary
FindResourceA
LoadResource
LockResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
GetModuleHandleA
SetLastError
MultiByteToWideChar
WideCharToMultiByte
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFlags
MulDiv
GetVersion
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
InterlockedIncrement
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
WaitForSingleObject
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
ExitProcess
IsBadReadPtr
GetProcessHeap
LoadLibraryA
GetProcAddress
Sleep
CreateFileA
WriteFile
GetStartupInfoA
CloseHandle

user32

SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
UpdateWindow
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyIcon
CharUpperA
DestroyMenu
CreateDialogIndirectParamA
EndDialog
GetDialogBaseUnits
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetWindowTextLengthA
IsDialogMessageA
ScrollWindowEx
DestroyWindow
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ScreenToClient
OemToCharA
CharToOemA
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenuItemCount
wsprintfA
GetDesktopWindow
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
PostMessageA
SendMessageA
ShowOwnedPopups
SetCursor
CreateWindowExA
GetClassLongA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
IsDlgButtonChecked
SetPropA
GetDC

gdi32

OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
RestoreDC
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
CreateRectRgn
SetWindowOrgEx
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetDCOrgEx
GetObjectA
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
SelectPalette
GetStockObject
SelectClipPath
CreateBitmap
SaveDC
StartDocA
DeleteDC
DeleteObject
SelectObject

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

ExtractIconA
SHGetFileInfoA
DragAcceptFiles

comctl32

ord17

ole32

StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
CoDisconnectObject

oleaut32

SysStringByteLen
SysStringLen
SysAllocStringByteLen
SysFreeString

Exports

Exports

AAAA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
GetArphaCrashReport
SetWindowLocalDump
UndateAollc
V_FixDoubleSlashes
V_FixSlashes
V_IsAbsolutePath
V_RemoveDotSlashes
V_StripLastDir
V_StripTrailingSlash
V_UTF16ToUTF8
V_UTF8ToUTF16
V_snprintf
V_strncat
V_strncat_length
V_strncpy
V_vsnwprintf
cef_api_hash
cef_dictionary_value_create
cef_enable_highdpi_support
cef_execute_process
cef_list_value_create
cef_log
cef_process_message_create
cef_register_extension
cef_string_list_alloc
cef_string_list_append
cef_string_list_free
cef_string_list_size
cef_string_list_value
cef_string_map_alloc
cef_string_map_append
cef_string_map_free
cef_string_map_key
cef_string_map_size
cef_string_map_value
cef_string_multimap_alloc
cef_string_multimap_append
cef_string_multimap_free
cef_string_multimap_key
cef_string_multimap_size
cef_string_multimap_value
cef_string_userfree_utf16_free
cef_string_utf16_clear
cef_string_utf16_cmp
cef_string_utf16_set
cef_string_utf16_to_utf8
cef_string_utf8_clear
cef_string_utf8_to_utf16
cef_v8context_get_current_context
cef_v8value_create_array
cef_v8value_create_bool
cef_v8value_create_double
cef_v8value_create_int
cef_v8value_create_null
cef_v8value_create_object
cef_v8value_create_string

Sections

.text
Size: 248KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3caff00e845af5f27c9972132965d5b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 248KB - Virtual size: 246KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 1.3MB - Virtual size: 1.3MB

.idata Size: 12KB - Virtual size: 11KB

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 20KB - Virtual size: 17KB

.text
Size: 248KB - Virtual size: 246KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 1.3MB - Virtual size: 1.3MB

.idata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 20KB - Virtual size: 17KB