1eb228f99f60ad68d0bedb1897fd57a57a7b728caf857e12ce55b8b393a1af00

Sharing

Copy URL Twitter E-mail

General

Target

1eb228f99f60ad68d0bedb1897fd57a57a7b728caf857e12ce55b8b393a1af00
Size

784KB
MD5

3d76db3d57581e468d2a2fffe50d8a3b
SHA1

a800e4ee5010697ab86a1c486a5a558b1bb7b0cd
SHA256

1eb228f99f60ad68d0bedb1897fd57a57a7b728caf857e12ce55b8b393a1af00
SHA512

68b5dce7f5df2d1fb1687a5ac3d115becdcd4e1e5c4f161ebf1ecc19a0752a07e07cf6a6e2461c2b09fb7f872cd59316623d013af161354f4caa45b7d97fade3
SSDEEP

12288:yezjI/2FgP+8GAkdTosntRxmmlOtVKo+KBreBd5N2IrlQumUKZm8:bzM/27d5bbOtVKkBCBdH24VKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eb228f99f60ad68d0bedb1897fd57a57a7b728caf857e12ce55b8b393a1af00

Files

1eb228f99f60ad68d0bedb1897fd57a57a7b728caf857e12ce55b8b393a1af00
.dll windows:5 windows x86

bc843efcb0681b03986240d5fdf44e05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

PlaySoundA

kernel32

LocalFileTimeToFileTime
GetFileSizeEx
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
RaiseException
HeapReAlloc
FindNextFileA
GetDriveTypeA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetACP
IsValidCodePage
GetTimeZoneInformation
VirtualFree
HeapCreate
FileTimeToLocalFileTime
GetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA
WritePrivateProfileStringA
SystemTimeToFileTime
FileTimeToSystemTime
GetModuleHandleW
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
GetStringTypeExA
DeleteFileA
MoveFileA
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
CreateFileW
CloseHandle
LocalFree
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
GlobalFree
ExitProcess
Sleep
GetShortPathNameA
GetThreadLocale
IsBadReadPtr
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
MulDiv
GetWindowsDirectoryA
FreeLibrary
HeapFree
InterlockedDecrement
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
MultiByteToWideChar
GetLastError
GetModuleFileNameA
ReleaseMutex
OpenMutexA
CreateMutexA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
FormatMessageA
lstrlenA
GetProcessHeap
HeapAlloc
HeapDestroy

user32

MessageBeep
PostThreadMessageA
WindowFromPoint
IsZoomed
GetMenuItemInfoA
CharUpperA
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetMessageA
ValidateRect
GetMenuStringA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
GetWindowThreadProcessId
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetNextDlgGroupItem
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
TrackPopupMenu
SetMenu
IsWindowVisible
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
SetCapture
InvalidateRgn
CopyAcceleratorTableA
CharNextA
DestroyIcon
TranslateMessage
DispatchMessageA
GetSysColorBrush
SetRect
UnionRect
GetCapture
IsRectEmpty
LockWindowUpdate
MessageBoxExA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
FillRect
GetFocus
LoadBitmapA
PostQuitMessage
ScreenToClient
LoadCursorA
CopyIcon
SetCursor
GetMessagePos
SetWindowLongA
KillTimer
SetTimer
ReleaseDC
GetDC
GetClientRect
GetWindowRect
OffsetRect
InflateRect
PtInRect
GetSystemMetrics
GetSysColor
InvalidateRect
DrawEdge
CopyRect
DrawIconEx
LoadIconA
LoadMenuA
GetSubMenu
GetKeyState
GetCursorPos
UpdateWindow
FindWindowA
ShowWindow
SetForegroundWindow
SendMessageA
EnableWindow
BeginDeferWindowPos

gdi32

DeleteDC
CreatePatternBrush
PtVisible
CreatePen
CreateRectRgnIndirect
ExtSelectClipRgn
GetCharWidthA
CreateFontA
StretchDIBits
GetBkColor
GetTextColor
GetRgnBox
CreateFontIndirectA
GetPixel
GetWindowExtEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
GetStockObject
GetTextMetricsA
CreateSolidBrush
GetViewportExtEx
DeleteObject
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetMapMode
CreateCompatibleBitmap
GetDeviceCaps
SelectObject
GetTextExtentPoint32A
BitBlt
Rectangle
CreateCompatibleDC
GetObjectA
RectVisible

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
GetFileSecurityA
SetFileSecurityA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA

shell32

Shell_NotifyIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA
ShellExecuteA

comctl32

_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecW

oledlg

ord8

ole32

StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoRevokeClassObject
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitializeEx

oleaut32

SysAllocString
GetErrorInfo
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
SysAllocStringLen
OleLoadPicture
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
VariantClear
VariantInit
VariantCopy

Exports

Exports

CacheTimerProc
CompressImage
DecompressImage
DllMain
GetBuffer
IMGAssociateWindow
IMGCacheDiscard
IMGCacheDiscardFileCgbw
IMGCacheFile
IMGCacheFilesInCache
IMGCacheUpdate
IMGClearImageEx
IMGClearWindow
IMGClipboardCgbw
IMGCloseDisplay
IMGConvertImage
IMGConvertRect
IMGDeRegWndw32
IMGDisableScrollBar
IMGDisplayErrorMessage32
IMGDisplayFile
IMGEnableScrollBar
IMGFileListDirNames32
IMGGetFileType32
IMGGetImgCodingCgbw32
IMGGetParmsCgbw
IMGGetProp
IMGGetScalingAlgorithm
IMGGetVersion
IMGLoadAnnotations
IMGOpenDisplayCgbw
IMGOrientDisplay
IMGPaintToDC
IMGReadDisplay
IMGRegWndw32
IMGRemoveProp
IMGRepaintDisplay
IMGSavetoFileEx
IMGScrollDisplay
IMGSeekDisplay
IMGSetDC
IMGSetParmsCgbw
IMGSetProp
IMGSetScalingAlgorithm
IMGUnassociateWindow
IMGUpdateScrollBar
IMGWriteDisplay
LoadLogger
LogEvent
OiAnEmbedAllData
OiAnRenderClipboardFormat
OiAnSelectByMarkAttrib
OiAnSelectByMarkNamedBlock
OiIsPointOverHyperLink
OiIsPointOverSelection
OiOpAbortOperation
OiOpContinueOperation
OiOpEndOperation
OiOpStartOperation
OiReOrderOCRMarks
OiRedo
OiRotateAllPages
OiUndo
OiUndoEndOperation
PrivRenderToDC
SeqfileDeInit
SeqfileDeReg
SeqfileInit
SetSeqfileWnd
StartWatch
StopWatch
Test
TimerClearAll
TimerGetAll

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc843efcb0681b03986240d5fdf44e05

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 532KB - Virtual size: 531KB

.rdata Size: 118KB - Virtual size: 117KB

.data Size: 13KB - Virtual size: 30KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 51KB - Virtual size: 51KB

.text
Size: 532KB - Virtual size: 531KB

.rdata
Size: 118KB - Virtual size: 117KB

.data
Size: 13KB - Virtual size: 30KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 51KB - Virtual size: 51KB