03030aa669dae8aa9d50a9c809312a954139e5012f8b024c461964fea09b214d

Sharing

Copy URL Twitter E-mail

General

Target

03030aa669dae8aa9d50a9c809312a954139e5012f8b024c461964fea09b214d
Size

577KB
MD5

4025c3f32ba0a882b208e0c5db9f0ce5
SHA1

5d8ab1fe77054399c9e36c7f9beea19910528778
SHA256

03030aa669dae8aa9d50a9c809312a954139e5012f8b024c461964fea09b214d
SHA512

86d1e17c6ce00f55a8da90d44cb13f2a698ddabdcfd693a072386f1965fe43e1e5f5ba50423a7fe095519261def429694c8612ff3daa3b318e6fa7fcfa6e2af5
SSDEEP

12288:c5572drjCG2nSGlzg/PPRnQj6IQusu9CgenzRh:c58drjCG0loVQj6k9czR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03030aa669dae8aa9d50a9c809312a954139e5012f8b024c461964fea09b214d

Files

03030aa669dae8aa9d50a9c809312a954139e5012f8b024c461964fea09b214d
.dll regsvr32 windows x86

57324ae208541329adf0dc6c359ff1d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetFileSizeEx
SetFilePointerEx
SetEnvironmentVariableA
WriteConsoleW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
GetEnvironmentStringsW
DeleteFileW
OutputDebugStringW
CreateThread
Sleep
InterlockedExchange
CloseHandle
ResetEvent
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetThreadPriority
lstrlenW
GetModuleFileNameW
VirtualQuery
lstrcpyW
GetProcAddress
GetVersionExW
LoadLibraryW
FreeLibrary
LockResource
SetLastError
GetLastError
DeactivateActCtx
MultiByteToWideChar
SizeofResource
ActivateActCtx
LoadResource
RaiseException
GetModuleHandleW
WideCharToMultiByte
FindClose
FindFirstFileW
GetVolumeInformationW
GetSystemInfo
lstrlenA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
CreateEventW
GetCurrentThreadId
GetCurrentThread
GetTickCount
GetCurrentProcessId
lstrcmpW
GetCurrentProcess
DisableThreadLibraryCalls
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
CreateActCtxW
ReleaseActCtx
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetLocaleInfoW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
lstrcmpA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSectionAndSpinCount
LocalAlloc
WriteFile
SetFilePointer
FlushFileBuffers
GetFullPathNameW
GetFileAttributesExW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
EncodePointer
DecodePointer
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
RtlUnwind
QueryPerformanceCounter
GetSystemTimeAsFileTime
ExitProcess
SetStdHandle
GetFileType
HeapSize
HeapQueryInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
FindResourceW

user32

GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
GetDlgItem
GetLastActivePopup
GetForegroundWindow
GetWindowTextW
IsWindow
GetFocus
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
WinHelpW
LoadIconW
GetMenuState
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
IsWindowEnabled
InvalidateRect
PostQuitMessage
CharUpperW
KillTimer
SetTimer
CheckMenuItem
EnableMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageW
SetCursor
UnregisterClassW
DestroyMenu
SetWindowTextW
RealChildWindowFromPoint
MonitorFromWindow
ShowWindow
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
PostMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
GetWindowRect
ScreenToClient
PtInRect
GetDlgCtrlID
CallWindowProcW
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
EnumWindows
GetWindowThreadProcessId
DispatchMessageW
RegisterWindowMessageW
GetKeyState
SetMenu
EnableWindow
PeekMessageW
ReleaseDC
GetDC
wvsprintfW
wsprintfW
EnumDisplayMonitors
GetParent
LoadCursorW
SetRectEmpty
SystemParametersInfoW
GetSysColor
GetSysColorBrush
GetSystemMetrics
MapWindowPoints
GetMonitorInfoW
CopyRect
GetClassInfoW
GetClassNameW
SendMessageW
DefWindowProcW
GetWindow
GetCursorPos

gdi32

SetTextColor
SetBkColor
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
CreateSolidBrush
GetStockObject
CreateDIBitmap
CreatePen
CreatePatternBrush
GetObjectW
DeleteObject
GetTextCharsetInfo
GetDeviceCaps
CreateFontIndirectW
GetTextMetricsW
EnumFontFamiliesW
SaveDC
RestoreDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode

ole32

CLSIDFromString
CoTaskMemFree
StringFromGUID2
CoFreeUnusedLibraries
CoCreateGuid
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
SysAllocStringLen
VariantInit
VariantChangeType
SysAllocString
SysFreeString

shlwapi

PathStripToRootW
PathFindExtensionW
PathIsUNCW
PathFindFileNameW

oleacc

LresultFromObject
CreateStdAccessibleObject

winmm

timeGetTime

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
RegEnumValueW

shell32

ShellExecuteW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_get_version_string
opus_multistream_decode
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_parse
opus_pcm_soft_clip
opus_strerror

Sections

.text
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57324ae208541329adf0dc6c359ff1d2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

shlwapi

oleacc

winmm

winspool.drv

advapi32

shell32

Exports

Exports

Sections

.text Size: 339KB - Virtual size: 338KB

.rdata Size: 140KB - Virtual size: 139KB

.data Size: 32KB - Virtual size: 87KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 64KB - Virtual size: 63KB

.text
Size: 339KB - Virtual size: 338KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 32KB - Virtual size: 87KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 64KB - Virtual size: 63KB