52b8a32a0f44f5c6ea7a19fdac7387cfca3d5fd16755ff9d1a31e515ddb4680a

Sharing

Copy URL Twitter E-mail

General

Target

52b8a32a0f44f5c6ea7a19fdac7387cfca3d5fd16755ff9d1a31e515ddb4680a
Size

60KB
MD5

2a4839e95e542857465b353947f60ccc
SHA1

abddeefee4b6ae667931547e8194aa0dfcb13da9
SHA256

52b8a32a0f44f5c6ea7a19fdac7387cfca3d5fd16755ff9d1a31e515ddb4680a
SHA512

b7de481a1b6641a434e7132d589a8b4370406f0b2dcc21a0bbc03be987f1d0f94723b09d690394143a17aa521f2273be91d268774c55116c15d9d6c46c0e169a
SSDEEP

384:ILftYIg5H4IPcbXa0PquW/4ICSajIFRla77xugFs5SN6HpNZsNGPqX3/BnO+5GoS:IBwRcbqH9jFvKYNinzc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52b8a32a0f44f5c6ea7a19fdac7387cfca3d5fd16755ff9d1a31e515ddb4680a

Files

52b8a32a0f44f5c6ea7a19fdac7387cfca3d5fd16755ff9d1a31e515ddb4680a
.dll windows:4 windows x86

325d065809872f9ce2301ecae29384f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegConnectRegistryW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW

kernel32

DisableThreadLibraryCalls
GetDefaultCommConfigW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
MultiByteToWideChar
SetDefaultCommConfigW
lstrcmpA
lstrcmpiW

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen

user32

DialogBoxParamW
EndDialog
GetDlgItem
GetWindowLongW
GetWindowTextA
GetWindowTextW
MessageBoxA
SendMessageA
SetWindowLongW
SetWindowTextW

Exports

Exports

EnumPropPages
drvCommConfigDialogA
drvCommConfigDialogW
drvGetDefaultCommConfigA
drvGetDefaultCommConfigW
drvSetDefaultCommConfigA
drvSetDefaultCommConfigW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

325d065809872f9ce2301ecae29384f2

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

ntdll

ucrtbase

user32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 456B

.rodata Size: 4KB - Virtual size: 44B

.rdata Size: 4KB - Virtual size: 1KB

.bss Size: - Virtual size: 192B

.edata Size: 4KB - Virtual size: 988B

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 4KB - Virtual size: 536B

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 456B

.rodata
Size: 4KB - Virtual size: 44B

.rdata
Size: 4KB - Virtual size: 1KB

.bss
Size: - Virtual size: 192B

.edata
Size: 4KB - Virtual size: 988B

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 4KB - Virtual size: 536B