71306e0139177adcb9e6c8e8ed2e320124a05ecc03c411f9a05e9059fd4b38f4

Sharing

Copy URL Twitter E-mail

General

Target

71306e0139177adcb9e6c8e8ed2e320124a05ecc03c411f9a05e9059fd4b38f4
Size

1.3MB
MD5

8c88a1e8178c44a62c66e869f7c06cc4
SHA1

9eb92f4a439a400ba952a4ba813c07868201abea
SHA256

71306e0139177adcb9e6c8e8ed2e320124a05ecc03c411f9a05e9059fd4b38f4
SHA512

0264cefbbeb1b7e04e37db5352db5aa336a82f4b37d3c291a1af70cddfcc7d2dcec0f1eeb2ae2daf552d3c7573a34df30c3944f0ff317bd3f03a7ddab43ba864
SSDEEP

12288:IpI5Dv2Ue4L/A3fAO+zKNVBwBw+xrC27+ENtWRvaLeUJZ:I+D/Gf/+/prV7LNt2fq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71306e0139177adcb9e6c8e8ed2e320124a05ecc03c411f9a05e9059fd4b38f4

Files

71306e0139177adcb9e6c8e8ed2e320124a05ecc03c411f9a05e9059fd4b38f4
.dll regsvr32 windows:4 windows x86

2813c8995663eda559b91f6b6f7607be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegEnumKeyW
RegOpenKeyW
RegQueryValueA
RegQueryValueW

kernel32

DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MulDiv
MultiByteToWideChar
RtlUnwind
SizeofResource
WideCharToMultiByte
lstrcmpW

msacm32

acmFormatChooseW
acmFormatDetailsW
acmFormatSuggest
acmFormatTagDetailsW
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamOpen
acmStreamPrepareHeader
acmStreamSize
acmStreamUnprepareHeader

msvfw32

ICClose
ICCompress
ICCompressorChoose
ICCompressorFree
ICDecompress
ICGetDisplayFormat
ICGetInfo
ICLocate
ICOpen
ICSendMessage

ntdll

_vsnprintf

ole32

CoCreateInstance
CoTaskMemAlloc
OleInitialize

rpcrt4

CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
NdrAllocate
NdrCStdStubBuffer_Release
NdrClearOutParameters
NdrConformantArrayBufferSize
NdrConformantArrayFree
NdrConformantArrayMarshall
NdrConformantArrayUnmarshall
NdrConvert
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
NdrPointerBufferSize
NdrPointerFree
NdrPointerMarshall
NdrPointerUnmarshall
NdrProxyErrorHandler
NdrProxyFreeBuffer
NdrProxyGetBuffer
NdrProxyInitialize
NdrProxySendReceive
NdrSimpleStructMarshall
NdrSimpleStructUnmarshall
NdrStubGetBuffer
NdrStubInitialize
RpcRaiseException

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_assert
_strdup
free
fwrite
getenv
memcmp
memcpy
memmove
memset
strchr
strcmp
strcspn
strlen
wcsrchr

user32

CheckDlgButton
DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetDlgItemInt
IsDlgButtonChecked
LoadStringW
SendDlgItemMessageW
SendMessageW
SetDlgItemInt
SetDlgItemTextW
wsprintfA
wsprintfW

winmm

mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioOpenA
mmioOpenW
mmioRead
mmioSeek
mmioWrite

Exports

Exports

AVIBuildFilter
AVIBuildFilterA
AVIBuildFilterW
AVIClearClipboard
AVIFileAddRef
AVIFileCreateStream
AVIFileCreateStreamA
AVIFileCreateStreamW
AVIFileEndRecord
AVIFileExit
AVIFileGetStream
AVIFileInfo
AVIFileInfoA
AVIFileInfoW
AVIFileInit
AVIFileOpen
AVIFileOpenA
AVIFileOpenW
AVIFileReadData
AVIFileRelease
AVIFileWriteData
AVIGetFromClipboard
AVIMakeCompressedStream
AVIMakeFileFromStreams
AVIMakeStreamFromClipboard
AVIPutFileOnClipboard
AVISave
AVISaveA
AVISaveOptions
AVISaveOptionsFree
AVISaveV
AVISaveVA
AVISaveVW
AVISaveW
AVIStreamAddRef
AVIStreamBeginStreaming
AVIStreamCreate
AVIStreamEndStreaming
AVIStreamFindSample
AVIStreamGetFrame
AVIStreamGetFrameClose
AVIStreamGetFrameOpen
AVIStreamInfo
AVIStreamInfoA
AVIStreamInfoW
AVIStreamLength
AVIStreamOpenFromFile
AVIStreamOpenFromFileA
AVIStreamOpenFromFileW
AVIStreamRead
AVIStreamReadData
AVIStreamReadFormat
AVIStreamRelease
AVIStreamSampleToTime
AVIStreamSetFormat
AVIStreamStart
AVIStreamTimeToSample
AVIStreamWrite
AVIStreamWriteData
CLSID_AVISimpleUnMarshal
CreateEditableStream
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EditStreamClone
EditStreamCopy
EditStreamCut
EditStreamPaste
EditStreamSetInfo
EditStreamSetInfoA
EditStreamSetInfoW
EditStreamSetName
EditStreamSetNameA
EditStreamSetNameW
IID_IAVIEditStream
IID_IAVIFile
IID_IAVIStream
IID_IGetFrame

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 228B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 464KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2813c8995663eda559b91f6b6f7607be

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msacm32

msvfw32

ntdll

ole32

rpcrt4

ucrtbase

user32

winmm

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 138KB

.data Size: 4KB - Virtual size: 232B

.rodata Size: 4KB - Virtual size: 372B

.rdata Size: 48KB - Virtual size: 47KB

.bss Size: - Virtual size: 228B

.edata Size: 76KB - Virtual size: 73KB

.idata Size: 8KB - Virtual size: 4KB

.rsrc Size: 44KB - Virtual size: 41KB

.reloc Size: 8KB - Virtual size: 5KB

/4 Size: 4KB - Virtual size: 624B

/19 Size: 464KB - Virtual size: 461KB

/31 Size: 24KB - Virtual size: 20KB

/45 Size: 108KB - Virtual size: 104KB

/57 Size: 24KB - Virtual size: 22KB

/70 Size: 8KB - Virtual size: 5KB

/81 Size: 104KB - Virtual size: 102KB

/92 Size: 16KB - Virtual size: 15KB

.text
Size: 140KB - Virtual size: 138KB

.data
Size: 4KB - Virtual size: 232B

.rodata
Size: 4KB - Virtual size: 372B

.rdata
Size: 48KB - Virtual size: 47KB

.bss
Size: - Virtual size: 228B

.edata
Size: 76KB - Virtual size: 73KB

.idata
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 44KB - Virtual size: 41KB

.reloc
Size: 8KB - Virtual size: 5KB

/4
Size: 4KB - Virtual size: 624B

/19
Size: 464KB - Virtual size: 461KB

/31
Size: 24KB - Virtual size: 20KB

/45
Size: 108KB - Virtual size: 104KB

/57
Size: 24KB - Virtual size: 22KB

/70
Size: 8KB - Virtual size: 5KB

/81
Size: 104KB - Virtual size: 102KB

/92
Size: 16KB - Virtual size: 15KB