9a4695caacb2584381562e7dfe925ebee6c4594dc6d127734c3cf86414750723

Sharing

Copy URL

Twitter E-mail

General

Target

9a4695caacb2584381562e7dfe925ebee6c4594dc6d127734c3cf86414750723
Size

454KB
MD5

a93917e34c8d0c609ea665dab86dcf35
SHA1

27ffca920626a17f792fbe5e193675f6b7c5c6fa
SHA256

9a4695caacb2584381562e7dfe925ebee6c4594dc6d127734c3cf86414750723
SHA512

13297f98f29f502b96fc83c27e87ab945a88ece8e30d0271d62b3dd43777518f43ffee8fadbb316c205335b7e39a1be6c31e5b4f50abd04018e1d3116f0f2ba6
SSDEEP

6144:8fwUtvC2j2ETwWuCv59KnymyspsOG6cAPLote+Pq9ndUu0zbkPvHs0PDRKerut:8bjrv5Qy2Lke+Pq9ndik3H1R+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a4695caacb2584381562e7dfe925ebee6c4594dc6d127734c3cf86414750723

Files

9a4695caacb2584381562e7dfe925ebee6c4594dc6d127734c3cf86414750723
.dll regsvr32 windows x86

3f1dd667f7abe70c688323c1c3dea3f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vzlprsdk

ord235
ord4
ord3
ord2
ord5
ord1
ord338
ord212
ord145
ord144
ord143
ord337
ord267
ord265
ord112
ord111
ord222
ord221
ord220
ord219
ord218
ord217
ord216
ord215
ord214
ord213
ord202
ord201
ord209
ord191
ord37
ord15
ord16
ord31
ord30
ord32
ord33
ord68
ord91
ord82
ord83
ord113
ord94
ord95
ord89
ord88
ord86
ord87
ord80
ord79
ord85
ord84
ord66
ord63
ord64
ord61
ord60
ord62
ord56
ord53
ord49
ord51
ord38
ord55
ord46
ord54
ord76
ord43
ord27
ord28
ord26
ord9
ord23
ord22
ord25
ord12
ord21
ord20
ord7
ord36
ord275
ord132
ord266
ord199
ord147
ord90
ord11
ord6
ord149
ord17
ord200

kernel32

GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
MulDiv
GlobalUnlock
GlobalLock
lstrlenW
LocalFree
FormatMessageA
GlobalAlloc
GlobalSize
CopyFileA
GlobalFree
lstrcmpA
InterlockedExchange
GetLocaleInfoA
GetModuleFileNameA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetModuleFileNameW
InterlockedDecrement
GetModuleHandleW
InterlockedIncrement
GlobalDeleteAtom
GetCurrentProcessId
IsDBCSLeadByte
GetUserDefaultLCID
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
WritePrivateProfileStringA
SetErrorMode
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
CreateFileA
FileTimeToLocalFileTime
GetVersion
FindResourceExA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetProfileIntA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
RtlUnwind
RaiseException
HeapReAlloc
Sleep
ExitProcess
HeapSize
HeapCreate
HeapDestroy
VirtualFree
GetTimeZoneInformation
GetStdHandle
GetACP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
FreeLibrary
CompareStringA
LoadLibraryA
GetLastError
SetLastError
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
lstrlenA
MultiByteToWideChar
CreateDirectoryA
LockResource
SizeofResource
WideCharToMultiByte
LoadResource
FindResourceA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CloseHandle

user32

IsChild
WinHelpA
SendDlgItemMessageA
LoadIconA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
BeginPaint
EndPaint
InflateRect
RemoveMenu
InsertMenuA
AppendMenuA
GetMenuStringA
PostQuitMessage
ValidateRect
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageA
SetCursor
GetWindowThreadProcessId
SetParent
DrawEdge
GetDesktopWindow
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
ReleaseCapture
DefWindowProcA
LoadCursorA
GetCapture
DestroyMenu
CreateMenu
IsRectEmpty
SetWindowRgn
SetRect
RegisterClipboardFormatA
EnumChildWindows
LockWindowUpdate
GetSysColorBrush
UnregisterClassA
DestroyIcon
CharUpperA
GetTabbedTextExtentA
GetDialogBaseUnits
GetDCEx
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
PostMessageA
ReleaseDC
GetWindowDC
GetClientRect
InvalidateRect
GetParent
SendMessageA
EnableWindow
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
SetRectEmpty
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
PtInRect
SetCapture
GetDlgCtrlID
GetWindowTextA

gdi32

GetStockObject
CreatePatternBrush
DeleteDC
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateRectRgn
SelectClipRgn
DeleteObject
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
MoveToEx
SelectObject
UnrealizeObject
EnumFontFamiliesExA
GetTextMetricsA
GetTextAlign
GetTextExtentPoint32A
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
LPtoDP
CreateDCA
Rectangle
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetROP2
SetMapMode
CopyMetaFileA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA

shell32

ExtractIconA

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleLoadFromStream
ReadClassStm
CreateStreamOnHGlobal
CoDisconnectObject
CreateDataAdviseHolder
OleSaveToStream
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateOleAdviseHolder
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
ReadFmtUserTypeStg
CoTaskMemFree
CoCreateInstance
CreateDataCache

oleaut32

SysAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
RegisterTypeLi
LoadTypeLi
OleCreatePropertyFrame
VariantCopy
SysAllocString
OleLoadPicture
OleCreateFontIndirect
OleCreatePictureIndirect
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 302KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f1dd667f7abe70c688323c1c3dea3f0

Headers

DLL Characteristics

File Characteristics

Imports

vzlprsdk

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 302KB - Virtual size: 302KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 26KB - Virtual size: 26KB

.reloc Size: 40KB - Virtual size: 39KB

.text
Size: 302KB - Virtual size: 302KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 26KB - Virtual size: 26KB

.reloc
Size: 40KB - Virtual size: 39KB