62da2f16c249f41b060022128b5f1112a139266a977cae2b2d92096bb0c33fa5

Sharing

Copy URL Twitter E-mail

General

Target

62da2f16c249f41b060022128b5f1112a139266a977cae2b2d92096bb0c33fa5
Size

318KB
MD5

a449a11c79423a4dd8a277ba195bd54d
SHA1

18c5ff2116d0713ec663be67e2c7cb7aaf34e0f3
SHA256

62da2f16c249f41b060022128b5f1112a139266a977cae2b2d92096bb0c33fa5
SHA512

32ee1017f30fd7e511572dcb5e3fd7aeedc0eb24f9cfe37c92f844ea26e3d90a61847ef532fa4f4ca41fa64d86f3abb88a6bea663944ec2796be3abb7e5acf0c
SSDEEP

6144:+RrV5ZAs+KF0DXecrXxH4hb0PpkTo0XIGERMElAFm4WfT:orV5ZAW4rh4h4hTy+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62da2f16c249f41b060022128b5f1112a139266a977cae2b2d92096bb0c33fa5

Files

62da2f16c249f41b060022128b5f1112a139266a977cae2b2d92096bb0c33fa5
.dll regsvr32 windows:5 windows x64

b7b9b9239ceca804dd4f91e1abd5a6f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetFileSizeEx
ReadFile
WriteFile
IsBadReadPtr
IsBadStringPtrW
lstrlenW
GetProcAddress
GetModuleHandleW
lstrcmpiW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
IsBadStringPtrA
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryW
Sleep
GetTickCount
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleA
LoadLibraryA
LockResource
DeleteFileW
QueryDosDeviceW
GetLogicalDrives
VirtualQuery
GetCurrentProcess
CreateProcessW
CreatePipe
GetFullPathNameW
WideCharToMultiByte
DeviceIoControl
GetCurrentProcessId
GetProcessTimes
SetEnvironmentVariableW
GetEnvironmentVariableW
SetThreadLocale
GetThreadLocale
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
LCMapStringW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
FlsAlloc
VirtualFree
CloseHandle
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
VirtualAlloc
PeekNamedPipe
SetLastError
FlsFree
FlsGetValue
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
GetStdHandle
ExitProcess
HeapSize
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCommandLineA
FlsSetValue
GetSystemInfo
SetThreadStackGuarantee
VirtualProtect
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
HeapFree
EncodePointer
DecodePointer
HeapAlloc
WriteConsoleW

user32

TranslateMessage
GetAsyncKeyState
GetKeyState
SendMessageW
PostMessageW
CharNextA
IsWindow
EmptyClipboard
CloseClipboard
SetClipboardData
SetRectEmpty
GetPhysicalCursorPos
SystemParametersInfoW
PtInRect
PostQuitMessage
PeekMessageW
OpenClipboard
DispatchMessageW
IsProcessDPIAware
GetWindowDC
ReleaseDC
EnumDisplayMonitors
GetMonitorInfoW
EnumDisplaySettingsW
GetDesktopWindow
GetTopWindow
CharNextW

gdi32

GetDeviceCaps

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2

oleaut32

SysAllocString
RegisterTypeLi
UnRegisterTypeLi
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
VariantInit
VariantCopyInd
VariantChangeType
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysStringLen
VariantClear
SysFreeString

psapi

GetMappedFileNameW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
HKMCheckPressedKeys
HKMClose
HKMDelayRnd
HKMEnableOSMouseAccelerate
HKMFreeData
HKMGetCursorPos
HKMGetCursorPos2
HKMGetDataCount
HKMGetDataUnitInt
HKMGetDevInfo
HKMGetDevString
HKMGetKeyboardLEDState
HKMGetKeyboardMode
HKMGetMouseMode
HKMGetOSMouseSpeed
HKMGetSerialNumber
HKMGetVersion
HKMIsKeyBusy
HKMIsKeyDown
HKMIsMouseBusy
HKMIsMouseButtonDown
HKMIsOSMouseAccelerateEnabled
HKMIsOpen
HKMKeyDown
HKMKeyPress
HKMKeyUp
HKMLeftClick
HKMLeftDoubleClick
HKMLeftDown
HKMLeftUp
HKMMiddleClick
HKMMiddleDoubleClick
HKMMiddleDown
HKMMiddleUp
HKMMouseWheel
HKMMouseWheelP
HKMMoveR
HKMMoveR2
HKMMoveRP
HKMMoveTo
HKMOpen
HKMOpen2
HKMOutputString
HKMReleaseKeyboard
HKMReleaseMouse
HKMRightClick
HKMRightDoubleClick
HKMRightDown
HKMRightUp
HKMSearchDevice
HKMSearchDevice2
HKMSearchDeviceAll
HKMSetAbsMouseScrnRes
HKMSetKeyInterval
HKMSetLightMode
HKMSetMode
HKMSetMouseInterval
HKMSetMouseMoveTimeout
HKMSetMousePosMaxOffset
HKMSetMousePosPrecision
HKMSetMouseSpeed
HKMSetOSMouseSpeed
HKMSetResetMode
HKMSetResetTime
HKMVerifyUserData
HKMVerifyUserData2
HKMXBtn1Click
HKMXBtn1DoubleClick
HKMXBtn1Down
HKMXBtn1Up
HKMXBtn2Click
HKMXBtn2DoubleClick
HKMXBtn2Down
HKMXBtn2Up

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7b9b9239ceca804dd4f91e1abd5a6f9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

psapi

Exports

Exports

Sections

.text Size: 186KB - Virtual size: 186KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 30KB - Virtual size: 314KB

.pdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 32KB - Virtual size: 32KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 186KB - Virtual size: 186KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 30KB - Virtual size: 314KB

.pdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 32KB - Virtual size: 32KB

.reloc
Size: 4KB - Virtual size: 3KB