8a27fdf85546da1c17e6a0ea56aec613fe7249a48ea80daeb46b8d5ed14acaa3

Sharing

Copy URL Twitter E-mail

General

Target

8a27fdf85546da1c17e6a0ea56aec613fe7249a48ea80daeb46b8d5ed14acaa3
Size

372KB
MD5

59dc9136b4fbc35433f41fdd71284a38
SHA1

7facaba5d97e4e34feceb06e44bd2188d832915e
SHA256

8a27fdf85546da1c17e6a0ea56aec613fe7249a48ea80daeb46b8d5ed14acaa3
SHA512

836769f587d1cb7b74452f92184bbd38ac3be661afc3013952b61d4b7cf4176b9ab309d5b49333bc8fd3c6baba58b3c47e2ae2ce8f2c2b6e2df710e9a19d7ff2
SSDEEP

3072:lU+UPOaRXdThKptl+bHu/FiPTLFlTkR7IGtg/eo9dfhVclL0NucC9mIyOXTjXI3P:sPdGptlSamvehNElfkPY+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a27fdf85546da1c17e6a0ea56aec613fe7249a48ea80daeb46b8d5ed14acaa3

Files

8a27fdf85546da1c17e6a0ea56aec613fe7249a48ea80daeb46b8d5ed14acaa3
.dll windows x86

987c4d80e5fafff36861f58f3474d4f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

DbgPrint
NtSetDefaultLocale

advapi32

RegCloseKey
RegCreateKeyExW
RegEnumValueW
RegFlushKey
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW

comctl32

PropertySheetW

kernel32

DeleteCriticalSection
EnterCriticalSection
EnumDateFormatsW
EnumSystemCodePagesW
EnumSystemGeoID
EnumSystemLocalesW
EnumTimeFormatsW
GetACP
GetCPInfoExW
GetCalendarInfoW
GetCommandLineW
GetCurrencyFormatW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetGeoInfoW
GetLastError
GetLocaleInfoW
GetModuleHandleA
GetNumberFormatW
GetOEMCP
GetProcessHeap
GetSystemDefaultLCID
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultLangID
GetUserGeoID
HeapAlloc
HeapFree
InitializeCriticalSection
IsValidLocale
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetCalendarInfoW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
lstrcpyW

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_itow
_lock
_onexit
_ultow
_unlock
_wtoi
_wtol
abort
calloc
free
fwrite
iswctype
memmove
strncmp
vfprintf
wcscat
wcscmp
wcscpy
wcslen
wcsncpy
wcsstr
wcstoul

setupapi

IsUserAdmin
SetupCloseInfFile
SetupFindFirstLineW
SetupFindNextLine
SetupGetFieldCount
SetupGetIntField
SetupGetLineCountW
SetupGetStringFieldW
SetupInstallFromInfSectionW
SetupOpenAppendInfFileW
SetupOpenInfFileW

shell32

ShellExecuteExW
ShellExecuteW

shlwapi

PathGetArgsW
PathUnquoteSpacesW

user32

CheckDlgButton
EnableWindow
GetClientRect
GetDlgItem
GetParent
GetSysColor
GetSystemMetrics
GetWindowLongW
IsDlgButtonChecked
LoadIconW
LoadStringW
MessageBoxW
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetWindowLongW
wsprintfW

Exports

Exports

CPlApplet

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1016B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rossym
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

987c4d80e5fafff36861f58f3474d4f4

Headers

File Characteristics

Imports

ntdll

advapi32

comctl32

kernel32

msvcrt

setupapi

shell32

shlwapi

user32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 68B

.rdata Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 1016B

.edata Size: 512B - Virtual size: 69B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 269KB - Virtual size: 268KB

.reloc Size: 1KB - Virtual size: 1KB

.rossym Size: 52KB - Virtual size: 52KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 68B

.rdata
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 1016B

.edata
Size: 512B - Virtual size: 69B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 269KB - Virtual size: 268KB

.reloc
Size: 1KB - Virtual size: 1KB

.rossym
Size: 52KB - Virtual size: 52KB