4630d7966c188373a89a2074a7ca270ce28f14c472ef8d6c38988c8580c457a5

Sharing

Copy URL Twitter E-mail

General

Target

4630d7966c188373a89a2074a7ca270ce28f14c472ef8d6c38988c8580c457a5
Size

1.9MB
MD5

796f2d427e061b81a9cb7be27561a9bc
SHA1

b6fc0e3c729982688ac1cd323dcf8447c64d3ce8
SHA256

4630d7966c188373a89a2074a7ca270ce28f14c472ef8d6c38988c8580c457a5
SHA512

5973f93c83dc81dc288998021c2b630879bd497d77dc8d9a960dc5ab3f58f935a3fe12ddbc65b1ea2e45bf0525bf3369293039fbeadca55f5e1fb636ab608d33
SSDEEP

49152:EcGOyj3Vjo8UsTtyrwUvUfsqOsN73fD4bfBq7EHVM19THA/u9:PG3l8RsTwrTvUf3OsdcbfBq7EHVM19T4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4630d7966c188373a89a2074a7ca270ce28f14c472ef8d6c38988c8580c457a5

Files

4630d7966c188373a89a2074a7ca270ce28f14c472ef8d6c38988c8580c457a5
.dll windows:6 windows x86

ffb03638f2798c090819834e1de53fa5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tcl84

Tcl_GetStringResult
Tcl_NewBooleanObj
Tcl_NewIntObj
Tcl_SetObjResult
TclFreeObj
Tcl_EvalObjEx
Tcl_NewStringObj
Tcl_ListObjAppendElement
Tcl_NewObj
Tcl_GetObjResult
Tcl_NewListObj
Tcl_GetStringFromObj
Tcl_GetIntFromObj
Tcl_ListObjIndex
Tcl_ListObjLength
Tcl_CreateCommand
Tcl_GetString
Tcl_NewDoubleObj
Tcl_SetVar2Ex
Tcl_CreateNamespace
Tcl_FindNamespace
Tcl_PkgProvideEx
Tcl_Eval

kernel32

SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
lstrcpyW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
UnhandledExceptionFilter
GetFileAttributesW
FileTimeToLocalFileTime
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
VirtualProtect
FileTimeToSystemTime
GetFileAttributesExW
OutputDebugStringW
RtlUnwind
InterlockedFlushSList
GetCommandLineA
GetCommandLineW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
GlobalGetAtomNameW
DeleteFileW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
QueryPerformanceFrequency
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetFileSize
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
CreateEventW
WaitForSingleObject
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
GetSystemDirectoryW
EncodePointer
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalSize
lstrcmpW
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeLibrary
GetVersionExW
GetCurrentThread
SetLastError
OutputDebugStringA
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
WideCharToMultiByte
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetLastError
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
MultiByteToWideChar
Sleep
CreateProcessW
LCMapStringW
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW

user32

SetRect
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
BringWindowToTop
GetSystemMenu
DrawFrameControl
DrawEdge
SetParent
SetWindowRgn
SetClassLongW
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetMenuDefaultItem
CreatePopupMenu
TrackMouseEvent
IntersectRect
CharUpperW
DestroyIcon
MapDialogRect
GetAsyncKeyState
OffsetRect
SetRectEmpty
SendDlgItemMessageA
InflateRect
GetMenuItemInfoW
DestroyMenu
LoadCursorW
GetSysColorBrush
GetSystemMetrics
FillRect
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
LockWindowUpdate
DrawTextExW
DrawTextW
InvalidateRect
KillTimer
SetTimer
RealChildWindowFromPoint
ClientToScreen
DeleteMenu
SystemParametersInfoW
CopyImage
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SetCursor
ShowOwnedPopups
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GrayStringW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetFocus
GetDlgCtrlID
DrawMenuBar
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
IsWindow
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
PostQuitMessage
PostMessageW
EnableWindow
ShowWindow
IsZoomed
GetWindowThreadProcessId
IsWindowVisible
UnregisterClassW
GetParent
SetCursorPos
GetClientRect
keybd_event
SetFocus
SetPhysicalCursorPos
GetWindowRect
SetActiveWindow
SetForegroundWindow
SwitchToThisWindow
SendMessageW
MessageBoxW
EnumWindows
FindWindowW
LoadImageW

gdi32

ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
GetTextMetricsW
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
TextOutW
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetTextAlign
MoveToEx
GetDeviceCaps
CreateDCW
GetTextColor
CopyMetaFileW
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
DeleteObject
DeleteDC
CreateBitmap
GetObjectW
SetTextColor
SetBkColor

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHBrowseForFolderW
SHAppBarMessage
DragFinish
DragQueryFileW

shlwapi

PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW
StrFormatKBSizeW
PathIsUNCW
PathFindFileNameW

uxtheme

GetThemePartSize
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent

ole32

RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
OleDuplicateData
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
ReleaseStgMedium

oleaut32

LoadTypeLi
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysFreeString
GetErrorInfo

gdiplus

GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateFromHDC
GdipDrawImageI
GdipCloneImage

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Exports

Exports

AddExtBomProperties
Cirxphub_Init
CloseGlobalMappingFile
CopyInstancePackages
EvalTclCode
EvalTclCodeWithParam
FreeMemPtr
GetDataFromTcl
GetMemPtrFromTcl
GetMemPtrFromTclA
GetSpecPropMemPtrFromTcl
GetSymbolData
GetSymbolDataSF
MarkStuffSelectedMultiPackages
PlaceCXPart
ReplaceCXPart
ReplaceCXmodeParts
Toggle2ndSrcPropMultiPackages
UpdateAuditIdsInSamePagePropsMultiPackages
UpdateAuditIdsPropsMultiPackages
UpdateEffPropStringValue
UpdateIdsInSameSchPageSinglePropMultiPackages
UpdatePartProps
UpdatePartPropsDirectly

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffb03638f2798c090819834e1de53fa5

Headers

DLL Characteristics

File Characteristics

Imports

tcl84

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 324KB - Virtual size: 324KB

.data Size: 21KB - Virtual size: 38KB

.rsrc Size: 13KB - Virtual size: 12KB

.reloc Size: 136KB - Virtual size: 136KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 324KB - Virtual size: 324KB

.data
Size: 21KB - Virtual size: 38KB

.rsrc
Size: 13KB - Virtual size: 12KB

.reloc
Size: 136KB - Virtual size: 136KB