b4ecf1cf762b2ec65e9851bc2a7ab20316ec72feb309dcea1b6f09a8b0a80c00

Sharing

Copy URL Twitter E-mail

General

Target

b4ecf1cf762b2ec65e9851bc2a7ab20316ec72feb309dcea1b6f09a8b0a80c00
Size

371KB
MD5

65eb284a3df6fb8f9e98a222f138464a
SHA1

96683532b9317e39fd8d259e73de3d2c24c0877f
SHA256

b4ecf1cf762b2ec65e9851bc2a7ab20316ec72feb309dcea1b6f09a8b0a80c00
SHA512

3e0547eb110727b1358c4a77641ea85757c9543a1b9178b94bb65592b61caf9addeabbb6dc18732d529b4dcac035858bd9fd6e010ac95cda26d0ec4c48ff29b2
SSDEEP

6144:0iHwJpDyjXpqYeMwzSFMib+nxQfsZtwfm7TFxhoRB8nPY2n:hw7YX0YHVjshjhbDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4ecf1cf762b2ec65e9851bc2a7ab20316ec72feb309dcea1b6f09a8b0a80c00

Files

b4ecf1cf762b2ec65e9851bc2a7ab20316ec72feb309dcea1b6f09a8b0a80c00
.dll windows x86

5961b3518af05bde26334c10f1628e12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrlenW
GlobalFree
SystemTimeToFileTime
GetSystemTime
GetLastError
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetProcAddress
GetModuleHandleA
FreeLibrary
lstrcpynA
GetUserDefaultLangID
GetTimeZoneInformation
GetVersionExA
GetEnvironmentVariableA
GetCurrentProcess
IsDBCSLeadByte
GlobalUnlock
GlobalLock
GlobalAlloc
EnumSystemCodePagesA
IsBadCodePtr
FileTimeToSystemTime
CompareStringA
lstrcpyA
SetFilePointer
CloseHandle
CreateFileMappingA
GetFileSize
GetFileTime
SetFileTime
WriteFile
ReadFile
FlushFileBuffers
FlushViewOfFile
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
CompareFileTime
GetDiskFreeSpaceA
DosDateTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetTimeFormatA
GetDateFormatA
GetFileInformationByHandle
FindClose
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeExA
GetShortPathNameA
GetWindowsDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
SetFileAttributesA
DeleteFileA
MoveFileA
SetCurrentDirectoryA
GetSystemDirectoryA
FindFirstFileA
FindNextFileA
GetFileAttributesA
CreateFileA
GetDriveTypeA
GetTempFileNameA
GetVolumeInformationA
SearchPathA
GetModuleFileNameA
IsBadReadPtr
LoadLibraryA
Sleep
GetTickCount
GetLocaleInfoA
GetNumberFormatA
IsBadWritePtr
IsBadStringPtrA
FindResourceExA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
ExitProcess
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetStdHandle

Exports

Exports

DllMain
GetCommentDlgProc
GetFileNameDlgProc
GetWinSFXParamDlgProc
MakeDirMsgDlgProc
OWReadOnlyMsgDlgProc
OverWriteMsgDlgProc
SetLangueEnglish
SetLangueJapanese
SetLangueSpecified
Unlha
UnlhaA
UnlhaBarWindProc
UnlhaCheckArchive
UnlhaCheckArchiveA
UnlhaCheckArchiveW
UnlhaClearEnumMembersProc
UnlhaClearEnumMembersProc64
UnlhaClearOwnerWindow
UnlhaCloseArchive
UnlhaCompressMem
UnlhaCompressMemA
UnlhaCompressMemW
UnlhaConfigDialog
UnlhaConfigDialogA
UnlhaConfigDialogW
UnlhaDialogProc
UnlhaExtractMem
UnlhaExtractMemA
UnlhaExtractMemW
UnlhaFindFirst
UnlhaFindFirstA
UnlhaFindFirstW
UnlhaFindNext
UnlhaFindNextA
UnlhaFindNextW
UnlhaGetAccessTime
UnlhaGetAccessTime64
UnlhaGetAccessTimeEx
UnlhaGetArcAccessTime
UnlhaGetArcAccessTime64
UnlhaGetArcAccessTimeEx
UnlhaGetArcCompressedSize
UnlhaGetArcCompressedSizeEx
UnlhaGetArcCreateTime
UnlhaGetArcCreateTime64
UnlhaGetArcCreateTimeEx
UnlhaGetArcDate
UnlhaGetArcFileName
UnlhaGetArcFileNameA
UnlhaGetArcFileNameW
UnlhaGetArcFileSize
UnlhaGetArcFileSizeEx
UnlhaGetArcOSType
UnlhaGetArcOriginalSize
UnlhaGetArcOriginalSizeEx
UnlhaGetArcRatio
UnlhaGetArcReadSize
UnlhaGetArcReadSizeEx
UnlhaGetArcTime
UnlhaGetArcWriteTime
UnlhaGetArcWriteTime64
UnlhaGetArcWriteTimeEx
UnlhaGetAttribute
UnlhaGetAttributes
UnlhaGetBackGroundMode
UnlhaGetCP
UnlhaGetCRC
UnlhaGetCompressedSize
UnlhaGetCompressedSizeEx
UnlhaGetCreateTime
UnlhaGetCreateTime64
UnlhaGetCreateTimeEx
UnlhaGetCursorInterval
UnlhaGetCursorMode
UnlhaGetDate
UnlhaGetFileCount
UnlhaGetFileCountA
UnlhaGetFileCountW
UnlhaGetFileName
UnlhaGetFileNameA
UnlhaGetFileNameW
UnlhaGetLastError
UnlhaGetMethod
UnlhaGetMethodA
UnlhaGetMethodW
UnlhaGetOSType
UnlhaGetOriginalSize
UnlhaGetOriginalSizeEx
UnlhaGetRatio
UnlhaGetRunning
UnlhaGetSubVersion
UnlhaGetTime
UnlhaGetVersion
UnlhaGetWriteTime
UnlhaGetWriteTime64
UnlhaGetWriteTimeEx
UnlhaIsSFXFile
UnlhaKillOwnerWindowEx
UnlhaKillOwnerWindowEx64
UnlhaLocalDlgProc
UnlhaOpenArchive
UnlhaOpenArchive2
UnlhaOpenArchive2A
UnlhaOpenArchive2W
UnlhaOpenArchiveA
UnlhaOpenArchiveW
UnlhaPrtBarDlgProc
UnlhaQueryFunctionList
UnlhaSetBackGroundMode
UnlhaSetCP
UnlhaSetCursorInterval
UnlhaSetCursorMode
UnlhaSetEnumMembersProc
UnlhaSetEnumMembersProc64
UnlhaSetEnumMembersProcA
UnlhaSetEnumMembersProcW
UnlhaSetLangueEnglish
UnlhaSetLangueJapanese
UnlhaSetLangueSpecified
UnlhaSetOwnerWindow
UnlhaSetOwnerWindowA
UnlhaSetOwnerWindowEx
UnlhaSetOwnerWindowEx64
UnlhaSetOwnerWindowExA
UnlhaSetOwnerWindowExW
UnlhaSetOwnerWindowW
UnlhaSetPriority
UnlhaSetUnicodeMode
UnlhaW

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 145KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5961b3518af05bde26334c10f1628e12

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 145KB - Virtual size: 359KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 145KB - Virtual size: 359KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 20KB - Virtual size: 19KB