1576207de47514f26d718dde6ed8d71631e8f7fa629c07eb9e186c5ac99d7b22

Sharing

Copy URL Twitter E-mail

General

Target

1576207de47514f26d718dde6ed8d71631e8f7fa629c07eb9e186c5ac99d7b22
Size

37KB
MD5

c0c965e6fa2a8bc597a298db4a7c6584
SHA1

a0c317eb7e3011674ade385e666316a1098a16b7
SHA256

1576207de47514f26d718dde6ed8d71631e8f7fa629c07eb9e186c5ac99d7b22
SHA512

bdafabcf974bd463b5f310f6b769e6fcbc4266f8918a7a5c2ccf0096297e3e4d67bea68309879160dfb432001a77085e0a4b64ef85acfeea901941fa4d252abc
SSDEEP

768:VcXX03fydD+JRAOtgXKx3Bb68jilHll4OkT/fYmztKWyY5Xyimz1cvAxmVNMTj:c8w0eZF+gzivnNMTj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1576207de47514f26d718dde6ed8d71631e8f7fa629c07eb9e186c5ac99d7b22

Files

1576207de47514f26d718dde6ed8d71631e8f7fa629c07eb9e186c5ac99d7b22
.dll windows x86

36ca9c637f4a155a9dea5c92a02c8753

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

CreatePropertySheetPageW
DestroyPropertySheetPage

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
_vsnwprintf
_winmajor
abort
calloc
free
fwrite
malloc
memmove
strncmp
vfprintf

powrprof

CallNtPowerInformation

user32

LoadStringW
SetDlgItemTextW

Exports

Exports

PropSheetExtProc

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 980B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rossym
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36ca9c637f4a155a9dea5c92a02c8753

Headers

File Characteristics

Imports

comctl32

kernel32

msvcrt

powrprof

user32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 24B

.rdata Size: 1024B - Virtual size: 960B

/4 Size: 512B - Virtual size: 20B

.bss Size: - Virtual size: 980B

.edata Size: 512B - Virtual size: 79B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1024B - Virtual size: 548B

.rossym Size: 17KB - Virtual size: 16KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 24B

.rdata
Size: 1024B - Virtual size: 960B

/4
Size: 512B - Virtual size: 20B

.bss
Size: - Virtual size: 980B

.edata
Size: 512B - Virtual size: 79B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1024B - Virtual size: 548B

.rossym
Size: 17KB - Virtual size: 16KB