32f4e0d33633307f9d6e1ba27702319aefc52116a0c6a3eebf6045ecd1d315fa

Sharing

Copy URL Twitter E-mail

General

Target

32f4e0d33633307f9d6e1ba27702319aefc52116a0c6a3eebf6045ecd1d315fa
Size

865KB
MD5

44f0aad53ffc9004b06129ed653fc39c
SHA1

2a1a8402a28ce6e9f44aa0b42d45e60c121b5afa
SHA256

32f4e0d33633307f9d6e1ba27702319aefc52116a0c6a3eebf6045ecd1d315fa
SHA512

f623503c6a87300142f82bf86f6df7b3512a38d44f6f3872e75ca3c0ff781b6f2e85b022e9558a6f01fdcf4f5ef84b3c1314d830142e837232890389bf6d5df7
SSDEEP

24576:JbvEfI6ZQzeqlqXCeQtmN+/1h9kZzknm:JbvEfxQ9lYAT/1h+Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32f4e0d33633307f9d6e1ba27702319aefc52116a0c6a3eebf6045ecd1d315fa

Files

32f4e0d33633307f9d6e1ba27702319aefc52116a0c6a3eebf6045ecd1d315fa
.dll windows:6 windows x64

abf37a27555876ac386bf82b18f88797

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

comctl32

_TrackMouseEvent

kernel32

InitializeCriticalSectionAndSpinCount
HeapSize
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetProcessHeap
GetCurrentDirectoryW
SetEndOfFile
SetStdHandle
ReadConsoleW
SetFilePointerEx
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
GetModuleFileNameA
HeapReAlloc
HeapFree
ExitThread
HeapAlloc
CreateDirectoryW
GetDriveTypeW
GetFileType
CreateFileW
GetFileAttributesExW
GetModuleHandleExW
ExitProcess
ReadFile
GetFullPathNameW
RtlUnwindEx
RaiseException
RtlPcToFileHeader
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
FindClose
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLocaleInfoA
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
GetModuleHandleA
GetACP
MultiByteToWideChar
VirtualAlloc
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetLastError
WideCharToMultiByte
GetModuleHandleExA
GetModuleFileNameW
CloseHandle
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
GetCurrentThread
GetExitCodeThread
QueryPerformanceCounter
QueryPerformanceFrequency
TryEnterCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask

user32

MsgWaitForMultipleObjects
SetCapture
KillTimer
GetSystemMetrics
GetDC
SetTimer
ReleaseCapture
GetForegroundWindow
SetWindowTextW
GetWindowTextA
GetWindowTextW
GetWindowRect
GetClassNameA
GetKeyboardLayout
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageA
PostMessageA
DefWindowProcA
DefWindowProcW
RegisterClassExA
RegisterClassExW
CreateWindowExA
CreateWindowExW
IsWindow
DestroyWindow
ShowWindow
OpenIcon
SetWindowPos
IsIconic
BringWindowToTop
OpenClipboard
CloseClipboard
GetClipboardOwner
SetClipboardViewer
ChangeClipboardChain
SetClipboardData
GetAsyncKeyState
EmptyClipboard
SetFocus
GetKeyState
SetRect
SetWindowRgn
WindowFromPoint
SetForegroundWindow
MessageBoxA
FillRect
SystemParametersInfoA
CreateIconIndirect
DestroyIcon
LoadIconA
LoadCursorA
GetWindow
GetParent
SetWindowLongA
GetWindowLongA
ClientToScreen
GetCursorPos
SetCursor
AdjustWindowRectEx
ValidateRgn
InvalidateRect
GetUpdateRgn
ReleaseDC

gdi32

StretchDIBits
Polyline
PolyPolygon
Pie
Arc
ExtCreatePen
ExtCreateRegion
TextOutW
GetTextMetricsA
SetTextColor
GetCharacterPlacementW
GetTextExtentPoint32W
GetGlyphOutlineW
CreateFontA
GetDIBits
Polygon
DPtoLP
MoveToEx
SelectClipRgn
RectInRegion
LineTo
GetRgnBox
EqualRgn
RealizePalette
GetStockObject
CreateSolidBrush
CreatePen
CreatePalette
SetPixel
SelectPalette
SelectObject
CreateCompatibleDC
BitBlt
CreateDCA
GdiFlush
LPtoDP
CreatePolygonRgn
CreateDIBSection
UpdateColors
SetTextAlign
SetDIBitsToDevice
SetBkMode
SaveDC
RestoreDC
GetDeviceCaps
DeleteObject
DeleteDC
CreateRectRgn
CreateCompatibleBitmap
CreateBitmap
CombineRgn

shell32

DragQueryFileW

ole32

CoInitialize
OleInitialize
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
CoCreateInstance

advapi32

RegOpenKeyW
RegQueryValueExW
RegCloseKey

Exports

Exports

ZenUvOS_GetMainWindowTitle
ZenUvOS_SetMainWindowTitle
ZenUvOS_SetTaskbarProgress
ZenUvOS_SetTaskbarProgressBounds
ZenUvOS_SetTaskbarProgressTheme
ZenUvOS_SetTaskbarProgressVisible
ZenUvOS_delete
ZenUvOS_new
ZenUv_appendAdj
ZenUv_calc
ZenUv_delete
ZenUv_getErrorStr
ZenUv_new

Sections

.text
Size: 577KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

abf37a27555876ac386bf82b18f88797

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

shell32

ole32

advapi32

Exports

Exports

Sections

.text Size: 577KB - Virtual size: 576KB

.rdata Size: 207KB - Virtual size: 207KB

.data Size: 31KB - Virtual size: 70KB

.pdata Size: 36KB - Virtual size: 36KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 512B - Virtual size: 48B

.rsrc Size: 1024B - Virtual size: 648B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 577KB - Virtual size: 576KB

.rdata
Size: 207KB - Virtual size: 207KB

.data
Size: 31KB - Virtual size: 70KB

.pdata
Size: 36KB - Virtual size: 36KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 512B - Virtual size: 48B

.rsrc
Size: 1024B - Virtual size: 648B

.reloc
Size: 7KB - Virtual size: 6KB