8eee3997058c56bbc6d5705a257faeefeab0b688801184d1b964ed302890eb5f

Sharing

Copy URL Twitter E-mail

General

Target

8eee3997058c56bbc6d5705a257faeefeab0b688801184d1b964ed302890eb5f
Size

256KB
MD5

3b04d7bcd861543e1722776ea5d55d2e
SHA1

29af5dba4f8d79df26bd5642be744d3965bd8f3e
SHA256

8eee3997058c56bbc6d5705a257faeefeab0b688801184d1b964ed302890eb5f
SHA512

39f721784a3aff5c40970ab6eb8f1520f253b48b233991d4a6fad839af0fb62fd3a30f1fd6618aaecab345bc8030aa9bd82f96c311e8e2ffa220169aa4ba5919
SSDEEP

3072:OqEUkkmHhg4gxPFTdnUy3oq6ieU1GVmKT1qu6O8v4yG6v5h7fvCvjkL3a3KS:OqvkX+VtTdUyYq6i1GEKLj6/7UjOa3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eee3997058c56bbc6d5705a257faeefeab0b688801184d1b964ed302890eb5f

Files

8eee3997058c56bbc6d5705a257faeefeab0b688801184d1b964ed302890eb5f
.dll windows:5 windows x64

48146060ec6a5d8a2deb5a0181d1e8e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

RtlLookupFunctionEntry
RtlUnwindEx
Sleep
ExitProcess
RaiseException
RtlPcToFileHeader
HeapSize
HeapQueryInformation
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapFree
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
HeapAlloc
GetCommandLineA
FlsSetValue
lstrlenA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
FormatMessageW
GlobalFlags
WritePrivateProfileStringW
SetErrorMode
lstrlenW
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalUnlock
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GetCurrentProcessId
CloseHandle
GlobalAddAtomW
GlobalFindAtomW
LoadLibraryA
GetLastError
GetVersionExA
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
HeapSetInformation
GetProcAddress

user32

LoadCursorW
GetSysColorBrush
DestroyMenu
ShowWindow
SetWindowTextW
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnregisterClassW
GetWindowThreadProcessId
IsWindowEnabled
SetCursor
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetMenuItemBitmaps
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
IsWindow
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetClassInfoW
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
GetMessageW
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetWindowPos
GetWindowLongW
GetMenu
PtInRect
CopyRect
CallWindowProcW
DefWindowProcW
SendMessageW
GetDlgCtrlID
GetClientRect
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
GetMenuCheckMarkDimensions

gdi32

DeleteDC
GetStockObject
GetDeviceCaps
Escape
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
SelectObject

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48146060ec6a5d8a2deb5a0181d1e8e6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

Sections

.text Size: 139KB - Virtual size: 138KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 10KB - Virtual size: 33KB

.pdata Size: 10KB - Virtual size: 9KB

.rsrc Size: 36KB - Virtual size: 36KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 139KB - Virtual size: 138KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 10KB - Virtual size: 33KB

.pdata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 36KB - Virtual size: 36KB

.reloc
Size: 9KB - Virtual size: 9KB