1fb4ddaee523e673da7268c973a46410ce5a86a9d524129f22022a1a3222fd3b

Sharing

Copy URL Twitter E-mail

General

Target

1fb4ddaee523e673da7268c973a46410ce5a86a9d524129f22022a1a3222fd3b
Size

467KB
MD5

b36f8796b4d768a60adb24d3616ff4cb
SHA1

563835ce9920fde93cf08b48afcd7f1f1bee6eb8
SHA256

1fb4ddaee523e673da7268c973a46410ce5a86a9d524129f22022a1a3222fd3b
SHA512

ee271d1d9d3187611a85cd4f650be86352fe4186f76bb3d871a90b5bccb518e7f8c28e90d681b38071cc84dfba07358f658be2a51ad7df1389935e394305d601
SSDEEP

6144:Pd+332S08v0dcywpi6lmafyRBHU5KdOoBUWQo8hiaKyE952d2aP9kHjL:1SGSrvAcyww6kYyRBDqZe9gdpuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fb4ddaee523e673da7268c973a46410ce5a86a9d524129f22022a1a3222fd3b

Files

1fb4ddaee523e673da7268c973a46410ce5a86a9d524129f22022a1a3222fd3b
.dll windows:5 windows x64

edc0feedf5c3ba4226f9eeffd1113300

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidCreate
UuidToStringA
RpcStringFreeA

kernel32

RtlUnwindEx
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
RaiseException
RtlPcToFileHeader
ExitThread
FlsSetValue
GetCommandLineA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitProcess
HeapSize
HeapQueryInformation
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
HeapDestroy
GetStdHandle
RtlLookupFunctionEntry
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
WritePrivateProfileStringA
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
GetModuleHandleW
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SuspendThread
SetThreadPriority
GetModuleFileNameW
GetCurrentProcessId
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
SetLastError
FormatMessageA
LocalFree
lstrlenA
GetLastError
FreeLibrary
GetCurrentThreadId
GetSystemDirectoryA
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
CreateEventA
ResumeThread
GlobalAlloc
SetEvent
WaitForSingleObject
CloseHandle
ResetEvent
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetSystemDefaultLangID
LoadLibraryA
OutputDebugStringA
Sleep
MultiByteToWideChar
CreateThread
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetACP

user32

DestroyMenu
LoadCursorA
GetSysColorBrush
UnregisterClassA
SetCursor
PostQuitMessage
CharUpperA
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetWindowTextLengthA
GetLastActivePopup
GetDlgItem
GetTopWindow
SetWindowLongPtrA
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
IsWindowVisible
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
GetParent
GetDlgCtrlID
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDC
SetActiveWindow
GetDesktopWindow
PtInRect
ScreenToClient
GrayStringA
DrawTextExA
TabbedTextOutA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
UnhookWindowsHookEx
SetWindowsHookExA
RegisterClassA
CreateWindowExA
SetWindowLongA
DestroyWindow
DispatchMessageA
GetWindowRect
ClientToScreen
GetClientRect
CallNextHookEx
GetAsyncKeyState
GetSystemMetrics
ShowWindow
FindWindowA
EnableWindow
GetWindowTextA
SetTimer
KillTimer
SendMessageA
LoadIconA
SetWindowTextA
SetWindowPos
OffsetRect
CopyRect
GetWindowLongA
MessageBoxA
LoadStringA
RegisterWindowMessageA
InvalidateRect
SetFocus
MoveWindow
BeginPaint
DrawTextA
LoadImageA
EndPaint
DefWindowProcA
SetWindowRgn
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
UpdateWindow
PostMessageA
GetForegroundWindow
SetRect
ReleaseDC
GetSysColor
FillRect
GetWindowLongPtrA

gdi32

CreateBitmap
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleDC
CreateCompatibleBitmap
GetBitmapBits
SetBitmapBits
GetObjectA
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
CreatePen
SetBkMode
RoundRect
FillRgn
SetTextColor
MoveToEx
LineTo
CreatePolygonRgn
CombineRgn
CreateRoundRectRgn
CreateFontA
CreateSolidBrush
DeleteObject
DeleteDC
SelectObject
BitBlt
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

ole32

CoDisconnectObject
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleRun

oleaut32

SysAllocString
SysAllocStringByteLen
SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysAllocStringLen
OleLoadPicture
SysStringLen
LoadTypeLi
GetErrorInfo

Exports

Exports

WDGenRSAKeyPair
WDSCardSelectContainer
WDSCardSelectSCR
WDScreenCreateBGDlg
WDScreenDestroyBGDlg
WDScreenLockSetHook
WDScreenLockdelHook
WDScreenShowBGDlg
WDUI_AddUIHWndToArray
WDUI_ChangePin
WDUI_CheckDataForamt
WDUI_CloseAllUI
WDUI_CloseSpecUI
WDUI_GenKeyPair
WDUI_InitDevice
WDUI_InitDeviceForP11
WDUI_OCL_SignHash
WDUI_SetPin
WDUI_VerifyPin
WDVerifyUserPin
WDWaitForDeviceEventEx

Sections

.text
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

edc0feedf5c3ba4226f9eeffd1113300

Headers

File Characteristics

Imports

rpcrt4

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 314KB - Virtual size: 314KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 13KB - Virtual size: 63KB

.pdata Size: 19KB - Virtual size: 19KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 314KB - Virtual size: 314KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 13KB - Virtual size: 63KB

.pdata
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 13KB - Virtual size: 12KB