5e104d6a3cb049362531143b1e4813caacdf5a6a86167bdedca29591eb5cba39

Sharing

Copy URL Twitter E-mail

General

Target

5e104d6a3cb049362531143b1e4813caacdf5a6a86167bdedca29591eb5cba39
Size

243KB
MD5

c19af6ee923cc310a7a7568a2a4db3b5
SHA1

9f51bcbf73e8ac02253793f7b96bd0e5310fca91
SHA256

5e104d6a3cb049362531143b1e4813caacdf5a6a86167bdedca29591eb5cba39
SHA512

aaae134e2d6244518d4d1622f5ce22f8f53857a2d45070c123c021be1666527825595541d9a60a092dbaad2e7f209cf3b3dfe28094032389278f876bc2c6cf28
SSDEEP

3072:1E7hxU8prknXPeWC22SQPauxshzLkaiOmu0gZaAH5ExMZpIZ:CjrprIXPeWC1S+U8OwASx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e104d6a3cb049362531143b1e4813caacdf5a6a86167bdedca29591eb5cba39

Files

5e104d6a3cb049362531143b1e4813caacdf5a6a86167bdedca29591eb5cba39
.dll windows:5 windows x86

e0c789204f3dcbb56bbfd2a784824677

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
FormatMessageA
GlobalUnlock
GlobalFree
SetLastError
GetLastError
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
CreateFileA
lstrlenA
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
WaitForSingleObject
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GlobalAddAtomA
GetCurrentProcessId
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleHandleW
GetCPInfo
GetOEMCP
HeapAlloc
ExitProcess
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
RaiseException
VirtualAlloc
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GetProcAddress
DebugBreak
OutputDebugStringA
Sleep
CloseHandle
GetStartupInfoA
MultiByteToWideChar
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetModuleHandleA
GetCommandLineA

user32

MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetDlgItem
GetForegroundWindow
IsWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
GetSysColorBrush
LoadCursorA
ShowWindow
DestroyMenu
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindow
GetDlgCtrlID
GetWindowRect
GetWindowLongA
GetClassNameA
PtInRect
SetWindowTextA
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
UnhookWindowsHookEx
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
PostMessageA
PostQuitMessage
MessageBoxA
CharLowerA
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
GetWindowTextA

shlwapi

PathFindExtensionA

ws2_32

WSAStartup
socket
ioctlsocket
gethostbyname
ntohs
connect
select
getsockopt
WSACleanup
closesocket
recv
send
setsockopt

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

GetStockObject
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
DeleteDC
DeleteObject
PtVisible
RectVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetDeviceCaps
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

??4Cdemo@@QAEAAV0@ABV0@@Z
RegisterModule

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0c789204f3dcbb56bbfd2a784824677

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

ws2_32

oleacc

gdi32

winspool.drv

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 157KB - Virtual size: 157KB

.rdata Size: 44KB - Virtual size: 44KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 31KB - Virtual size: 30KB

.text
Size: 157KB - Virtual size: 157KB

.rdata
Size: 44KB - Virtual size: 44KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 31KB - Virtual size: 30KB