1c8de01df040c973b37ae5ce8e1bb523e1ba24a9c25263706022f9a9894a2e50

Sharing

Copy URL

Twitter E-mail

General

Target

1c8de01df040c973b37ae5ce8e1bb523e1ba24a9c25263706022f9a9894a2e50
Size

540KB
MD5

84040f339a996a373ae8a0bb0e671be5
SHA1

295fda9201323f640fd697faf69d2784e0135573
SHA256

1c8de01df040c973b37ae5ce8e1bb523e1ba24a9c25263706022f9a9894a2e50
SHA512

b537b562bf34d7dc2ecdfcce629fd08046832067aa19e740fd0340b257caf8abf5073d1d3de9de8430a31965fefe9d3d5b92a0b5d67fc910bd35413da1145ec2
SSDEEP

12288:myIEbOghGa96VBDDOu6J50EXg5/rSBtil:myIEP0VniSEXgNrSji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c8de01df040c973b37ae5ce8e1bb523e1ba24a9c25263706022f9a9894a2e50

Files

1c8de01df040c973b37ae5ce8e1bb523e1ba24a9c25263706022f9a9894a2e50
.dll windows x64

a2c333610904b0bdb1edbc04aa01b305

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapQueryInformation
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetDriveTypeA
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
Sleep
GetFileType
SetStdHandle
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlPcToFileHeader
RaiseException
HeapFree
HeapAlloc
GetCommandLineA
FlsSetValue
RtlUnwindEx
RtlLookupFunctionEntry
GetTickCount
FindResourceExA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetModuleHandleW
GetOEMCP
GetCPInfo
GlobalFlags
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetFileTime
GetFileSizeEx
CreateFileA
VirtualProtect
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetCurrentProcessId
lstrcmpA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
LoadLibraryA
GetLastError
SetLastError
lstrcmpW
GetModuleHandleA
GetVersionExA
GetModuleFileNameA
ExitProcess
LoadLibraryW
GetProcAddress
GetFileAttributesA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GetEnvironmentStrings
SizeofResource

user32

PostThreadMessageA
CopyAcceleratorTableA
CharNextA
CharUpperA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetAsyncKeyState
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
CheckMenuItem
RegisterWindowMessageA
LoadIconA
RegisterClipboardFormatA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
SetMenu
SetScrollPos
GetScrollPos
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
EnableMenuItem
InsertMenuA
EnableWindow
IsWindow
SetScrollInfo
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
SendDlgItemMessageA
IsRectEmpty
PtInRect
SetRectEmpty
OffsetRect
CopyRect
FillRect
DrawEdge
SendMessageA
GetWindowRect
GetClientRect
ClientToScreen
RedrawWindow
GetCapture
SetCapture
GetFocus
GetParent
GetSysColor
SetCursor
LoadCursorA
ReleaseCapture
GetKeyState
DrawTextA
PostMessageA
GetDC
ReleaseDC
DefWindowProcA
GetClassInfoA
GetSubMenu
LoadMenuA
GetCursorPos
LoadImageA
DestroyIcon
GetIconInfo
CopyImage
DrawIconEx
CreateIconIndirect
GetWindow
GetSystemMetrics
GetWindowPlacement

gdi32

GetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
EnumFontFamiliesExA
GetBkColor
GetTextColor
GetRgnBox
SelectClipRgn
MoveToEx
LineTo
CreateCompatibleBitmap
SetStretchBltMode
RestoreDC
SaveDC
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
GetDIBColorTable
SetDIBColorTable
GetDIBits
SetDIBits
CreateDIBSection
CreateSolidBrush
GetCurrentObject
GetPixel
StretchBlt
CreateRectRgn
CreateBitmap
UnrealizeObject
GetObjectA
LPtoDP
GetTextMetricsA
DPtoLP
GetWindowExtEx
SelectObject
CreatePen
DeleteObject
SetPixelV
BitBlt
Rectangle
Ellipse
SetBrushOrgEx
GetBrushOrgEx
CreateCompatibleDC
SetMapMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHGetMalloc

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
OleFlushClipboard
CoRegisterMessageFilter
CoInitializeEx

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

Exports

Exports

StartW

Sections

.text
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2c333610904b0bdb1edbc04aa01b305

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 346KB - Virtual size: 345KB

.rdata Size: 119KB - Virtual size: 118KB

.data Size: 15KB - Virtual size: 38KB

.pdata Size: 24KB - Virtual size: 24KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 346KB - Virtual size: 345KB

.rdata
Size: 119KB - Virtual size: 118KB

.data
Size: 15KB - Virtual size: 38KB

.pdata
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 14KB - Virtual size: 14KB