2cf374113421f23fbca30535fec7f3e1700f567387e99c1ef9e5d50146c353ca

Sharing

Copy URL Twitter E-mail

General

Target

2cf374113421f23fbca30535fec7f3e1700f567387e99c1ef9e5d50146c353ca
Size

217KB
MD5

b40e4206deb68ee461b44d00872b76c8
SHA1

9bbd92f9b7d62ada279d1a443310888aff5ba8a4
SHA256

2cf374113421f23fbca30535fec7f3e1700f567387e99c1ef9e5d50146c353ca
SHA512

afb5df09ea2385bdc21689d197d16a1bbeedb50d9b2f429ebbbcd53a6016d55347400f3ac207d3a40b6059be4934be07a959009fd4a8021c986009891bfe486f
SSDEEP

6144:uoeDcz1F1oSSarzmT9/1lL2m8+cCqtT5L:n2sXXzzmT9tgm8+cXT5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cf374113421f23fbca30535fec7f3e1700f567387e99c1ef9e5d50146c353ca

Files

2cf374113421f23fbca30535fec7f3e1700f567387e99c1ef9e5d50146c353ca
.dll windows x86

274487853882e387be2f31525ea6edfb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
CreateFileW
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetCurrentProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
LCMapStringW
GetStringTypeW
GetFileType
GetStdHandle
ExitProcess
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
HeapQueryInformation
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
WriteFile
FlushFileBuffers
GetCPInfo
GetOEMCP
SetEvent
lstrcmpA
GlobalFlags
GetModuleFileNameA
GetCurrentProcessId
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindResourceW
FormatMessageA
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
SetLastError
OutputDebugStringA
GetACP
WideCharToMultiByte
MultiByteToWideChar
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
LockResource
LoadResource
SizeofResource
FindResourceA
CloseHandle
lstrcmpiA
CreateFileA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetStdHandle

user32

DestroyMenu
GetSystemMetrics
RealChildWindowFromPoint
ClientToScreen
ReleaseDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetWindowThreadProcessId
IsWindowEnabled
GetMonitorInfoA
MonitorFromWindow
WinHelpA
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongA
SetWindowLongA
PtInRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
RemovePropA
GetPropA
SetPropA
PostQuitMessage
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetWindowTextA
MessageBoxA
GetDlgItem
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
GetDlgCtrlID
IsIconic
EndDeferWindowPos
DeferWindowPos
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
GetClassNameA
GetClientRect
SetRectEmpty
OffsetRect
GetParent
SendMessageA
GetScrollPos
GetWindowTextA
GetWindowLongA
GetWindow
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
PostMessageA
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsWindow
IsMenu
DestroyWindow
SetWindowPos
BeginDeferWindowPos
GetSysColorBrush
LoadCursorA

gdi32

GetClipBox
GetStockObject
PtVisible
RectVisible
RestoreDC
SaveDC
SelectObject
SetMapMode
Escape
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
DeleteObject
DeleteDC
CreateBitmap
GetDeviceCaps
SetTextColor
SetBkColor

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

SystemFunction036
RegCloseKey
RegOpenKeyA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

VariantChangeType
VariantClear
VariantInit

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

Module_Entry
Test

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

274487853882e387be2f31525ea6edfb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 135KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 5KB - Virtual size: 15KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 135KB - Virtual size: 135KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 5KB - Virtual size: 15KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 9KB - Virtual size: 9KB