7ab8736e3ae3f1a4f3b8ecaa9edf5ffcd86d623459e93a966918f1b7eb9c4e9e

Sharing

Copy URL Twitter E-mail

General

Target

7ab8736e3ae3f1a4f3b8ecaa9edf5ffcd86d623459e93a966918f1b7eb9c4e9e
Size

2.4MB
MD5

604647754802807aeca0de9c60a13068
SHA1

1c0b9c1ffa45ad83ad981cd7b5a3a3f60dca96d5
SHA256

7ab8736e3ae3f1a4f3b8ecaa9edf5ffcd86d623459e93a966918f1b7eb9c4e9e
SHA512

26007cdec0891e816f5b4fcfebcd8832aed7775ecedf4fcf06375d977977eb946d6d81663ac04085b9fd69190b12ad2b70287c9a5e30099732b96ca3f364de12
SSDEEP

12288:0g6DZazFWJR2adPharLp/lN3hYVcSQoH/ygK+8JzL4:0VZGoXi9/P3uWSQeygK+8JzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ab8736e3ae3f1a4f3b8ecaa9edf5ffcd86d623459e93a966918f1b7eb9c4e9e

Files

7ab8736e3ae3f1a4f3b8ecaa9edf5ffcd86d623459e93a966918f1b7eb9c4e9e
.dll regsvr32 windows:5 windows x86

c583f5164e88e6da06d5c86ce2062912

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ksproxy.ax

KsSynchronousDeviceControl

shlwapi

StrToIntExW

gdiplus

GdiplusStartup
GdiplusShutdown

kernel32

GetModuleFileNameA
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
FreeLibrary
LoadLibraryW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
GetTickCount
GetModuleFileNameW
WriteFile
HeapDestroy
GetLastError
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
ExitProcess
HeapSize
HeapFree
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
RtlUnwind
GetConsoleMode
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
DecodePointer
EncodePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetStringTypeW
SetFilePointer
lstrlenA
MultiByteToWideChar
lstrlenW
GetSystemDefaultLangID
OutputDebugStringW
CloseHandle
Sleep
ReadFile
CreateFileW
GetVersionExW
SetStdHandle
Beep
LCMapStringW
WriteConsoleW
GetConsoleCP
HeapCreate
FlushFileBuffers

user32

GetDesktopWindow
GetWindowLongW
SetWindowLongW
InvalidateRect
SetDlgItemTextW
IsWindowVisible
CreateWindowExW
CreateDialogParamW
DestroyWindow
LoadBitmapW
DefWindowProcW
FillRect
GetDC
BeginPaint
ReleaseDC
GetClientRect
MessageBoxW
GetFocus
SetFocus
RegisterHotKey
MoveWindow
ScreenToClient
GetWindowRect
CheckDlgButton
SetTimer
GetDlgCtrlID
EnableWindow
IsDlgButtonChecked
GetDlgItemTextW
ShowWindow
SetWindowTextW
KillTimer
GetParent
GetDlgItem
SendMessageW
EndPaint
LoadStringW

gdi32

DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
LineTo
MoveToEx
SelectObject
CreatePen
SetBkColor
CreateSolidBrush

comdlg32

GetOpenFileNameW

advapi32

RegCreateKeyW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueW

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c583f5164e88e6da06d5c86ce2062912

Headers

DLL Characteristics

File Characteristics

Imports

ksproxy.ax

shlwapi

gdiplus

kernel32

user32

gdi32

comdlg32

advapi32

ole32

Exports

Exports

Sections

.text Size: 110KB - Virtual size: 109KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 110KB - Virtual size: 109KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 17KB - Virtual size: 17KB