4fde480c7819ffbb50b3355e287398b9d67238267e0da06731aa67f3d65f9166

Sharing

Copy URL Twitter E-mail

General

Target

4fde480c7819ffbb50b3355e287398b9d67238267e0da06731aa67f3d65f9166
Size

496KB
MD5

5e9943b5faf3af708c199cb894eb98c7
SHA1

37466e5d52f8b1a8df53b9b1a3d890a3429fbf9f
SHA256

4fde480c7819ffbb50b3355e287398b9d67238267e0da06731aa67f3d65f9166
SHA512

d65b1a7db5abc9559b6106ed1acbfe5c2e42bc27447f834e8847b8ab40620ae83e84d9daf084d16432bbf12e130eb27d25cd8cd46e5201a58b402627cdba1309
SSDEEP

6144:IYqUHfm+kuI1HX4n57BtLZan2bgoF5PB68flGdK5iRijW59BR3NzTtfg2PqmO4i:Nu+z6In5BtL82bRB6OIdVijoftdXiA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fde480c7819ffbb50b3355e287398b9d67238267e0da06731aa67f3d65f9166

Files

4fde480c7819ffbb50b3355e287398b9d67238267e0da06731aa67f3d65f9166
.dll windows x86

992018733c73c681417e84cdff112309

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
GetFileTime
RtlUnwind
HeapReAlloc
RaiseException
GetCommandLineA
TerminateProcess
HeapSize
GetACP
GetTimeZoneInformation
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
GetFileAttributesA
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetProfileStringA
InterlockedExchange
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
GetLastError
GlobalAlloc
lstrcmpA
GetCurrentThread
CloseHandle
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
lstrcpynA
MulDiv
InterlockedDecrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
InitializeCriticalSection
DisableThreadLibraryCalls
ExitProcess
CreateThread
CreateProcessA
WaitForSingleObject
CreateDirectoryA
GetSystemTimeAsFileTime
GetTickCount
Sleep
GetShortPathNameA
GetModuleFileNameA
lstrlenA
GetThreadLocale
HeapFree
IsBadReadPtr
VirtualProtect
GetSystemInfo
GetProcessHeap
HeapAlloc
SetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualFree
SetHandleCount
VirtualAlloc

user32

GetNextDlgGroupItem
MessageBeep
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
CopyRect
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CopyAcceleratorTableA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetSysColorBrush
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
wsprintfA
MessageBoxA
GetParent
ScreenToClient
LoadMenuA
GetSubMenu
WindowFromPoint
SetCapture
GetCapture
ClientToScreen
ReleaseCapture
GetMenu
CheckMenuItem
EnableWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
LoadIconA
KillTimer
IsWindowVisible
InvalidateRect
PtInRect
ReleaseDC
GetDC
IsIconic
DrawIcon
GetSystemMetrics
SendMessageA
SetTimer
GetClientRect
GetWindowRect
CharNextA
GetPropA
GetSystemMenu
AppendMenuA
SetRect
GetDesktopWindow
GetClassNameA
MapDialogRect
SetWindowContextHelpId
SetCursor
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
DestroyMenu
LoadStringA
InflateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetCursorPos
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
ShowWindow
SetWindowTextA
IsDialogMessageA
GetActiveWindow
LoadCursorA
CallWindowProcA
MoveWindow

gdi32

SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
DeleteDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
CreateFontIndirectA
DPtoLP
CreateCompatibleDC
GetTextColor
GetBkColor
LPtoDP
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
BitBlt
SetPixelV
SelectObject
CreateCompatibleBitmap
CreatePen
GetStockObject
DeleteObject
CreateDIBitmap
GetTextExtentPointA
CreateSolidBrush

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

DragQueryFileA
ExtractAssociatedIconA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysFreeString
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
VariantClear

winmm

mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsA
mixerClose
mixerGetLineControlsA

msvfw32

MCIWndCreateA

Exports

Exports

CallWindowProcW
CharLowerW
CharNextW
CharUpperW
ChooseFontW
CompareStringW
ConvertMessage
CreateAcceleratorTableW
CreateDCW
CreateDialogIndirectParamW
CreateDialogParamW
CreateEventW
CreateFileMappingW
CreateFileW
CreateFontIndirectW
CreateFontW
CreateMutexW
CreateWindowExW
CreateWindowW
DefWindowProcW
DeleteFileW
DialogBoxParamW
DialogBoxW
DispatchMessageW
DrawTextExW
DrawTextW
EnumFontFamiliesW
FindFirstChangeNotificationW
FindFirstFileW
FindNextFileW
FindWindowW
FormatMessageW
GUgd
GetClassInfoExW
GetClassInfoW
GetClassNameW
GetCurrentDirectoryW
GetDateFormatW
GetDlgItemTextW
GetLocaleInfoW
GetMessageW
GetModuleFileNameW
GetModuleHandleW
GetObjectW
GetPrivateProfileStringW
GetProfileStringW
GetPropW
GetShortPathNameW
GetStringTypeExW
GetTempFileNameW
GetTempPathW
GetTextFaceW
GetTextMetricsW
GetVersionExW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
InitUniAnsi
InsertMenuW
IsBadStringPtrW
IsCharAlphaNumericW
IsDialogMessageW
LoadAcceleratorsW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadLibraryExW
LoadLibraryW
LoadMenuW
LoadStringW
OutputDebugStringW
PeekMessageW
PlaySoundW
PostMessageW
PostThreadMessageW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterClassExW
RegisterClassW
RegisterWindowMessageW
RemovePropW
SendDlgItemMessageW
SendMessageW
SetCurrentDirectoryW
SetDlgItemTextW
SetMenuItemInfoW
SetPropW
SetWindowLongW
SetWindowTextW
SetWindowsHookExW
ShellExecuteW
SystemParametersInfoW
TranslateAcceleratorW
UpdateUnicodeAPI
WriteConsoleW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
wsprintfW
wvsprintfW

Sections

.text
Size: 304KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

992018733c73c681417e84cdff112309

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

winmm

msvfw32

Exports

Exports

Sections

.text Size: 304KB - Virtual size: 300KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 24KB - Virtual size: 42KB

.rsrc Size: 64KB - Virtual size: 60KB

.reloc Size: 36KB - Virtual size: 32KB

.text
Size: 304KB - Virtual size: 300KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 24KB - Virtual size: 42KB

.rsrc
Size: 64KB - Virtual size: 60KB

.reloc
Size: 36KB - Virtual size: 32KB