fc5b16e3062e0247704cb5e5748847c76706e0ea46b21b6e0621cc7a9dc2bca4

Sharing

Copy URL Twitter E-mail

General

Target

fc5b16e3062e0247704cb5e5748847c76706e0ea46b21b6e0621cc7a9dc2bca4
Size

2.3MB
MD5

0e89c4f987931a83165dcbb4e5b7de04
SHA1

4df058f8435b0b9b68fbde515027d32abfcdce89
SHA256

fc5b16e3062e0247704cb5e5748847c76706e0ea46b21b6e0621cc7a9dc2bca4
SHA512

6219718f229230116e952fa044f21b3c42acdc2ed7ddeca05560a62c3c0b32be71ce93eb701667eba1e0201d8eda8d5c4c7a1984c92ddea0f2e1bea42f13e73a
SSDEEP

49152:RMW3FZwnISopqnraVu6CzDlTr4iyTd9XxqMFBgl:mWbs9Tr4nrgl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc5b16e3062e0247704cb5e5748847c76706e0ea46b21b6e0621cc7a9dc2bca4

Files

fc5b16e3062e0247704cb5e5748847c76706e0ea46b21b6e0621cc7a9dc2bca4
.dll windows:6 windows x64

c251ba470b72e6d7eae70284382e4399

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

comctl32

ord17

kernel32

GetProcAddress
GetModuleHandleW
MultiByteToWideChar
DisableThreadLibraryCalls
CopyFileW
Sleep
GetTempPathW
SetFileTime
SetFilePointer
GetTempFileNameW
GetFileTime
DeleteFileW
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteCriticalSection
GetLongPathNameW
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
CloseHandle
DecodePointer
WriteFile
ReadFile
GetFileSize
GetFileAttributesW
CreateFileW
GetFileSizeEx
ExpandEnvironmentStringsA
LocalFree
WideCharToMultiByte
lstrlenW
lstrcpyW
GetLocaleInfoW
lstrcatW
FileTimeToSystemTime
SizeofResource
LockResource
LoadResource
FindResourceW
OutputDebugStringW
FindResourceExW
FindFirstFileW
FindNextFileW
FindClose
GetUserDefaultLCID
GetTickCount
SetEndOfFile
FreeLibrary
GetModuleFileNameW
SystemTimeToFileTime
MoveFileW
QueryPerformanceFrequency
QueryPerformanceCounter
GetShortPathNameW
CompareStringW
GetACP
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CreateSemaphoreA
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
LCMapStringW
GetStringTypeW
GetCPInfo
IsDebuggerPresent
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
LoadLibraryExW
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetStdHandle
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidLocale
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
LoadLibraryExA

user32

GetDlgItemTextW
SetDlgItemTextW
SetRect
MessageBoxW
IsWindow
SetWindowLongPtrW
GetWindowLongPtrW
GetWindowRect
GetSystemMetrics
IsDlgButtonChecked
CheckDlgButton
IsIconic
SendMessageW
EndDialog
DialogBoxParamW
LoadStringA
SetRectEmpty
GetParent
SetWindowPos
GetDesktopWindow
LoadStringW

shlwapi

PathFindExtensionW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

oleaut32

SysFreeString

Exports

Exports

IDP_CloseImage
IDP_GetColorProfile
IDP_GetColorProfileW
IDP_GetImageInfo
IDP_GetMetadataList
IDP_GetPageInfo
IDP_GetPlugInInfo
IDP_GetSupportedMetadata
IDP_Help
IDP_Init
IDP_OpenImage
IDP_OpenImageW
IDP_PageDecode
IDP_PageDecodeStart
IDP_PageDecodeStep
IDP_PageDecodeStop
IDP_ShowPlugInDialog
IEP_GetDefaultEncodeParams
IEP_GetNativelySupportedMetadata
IEP_GetPlugInInfo
IEP_GetSupportedMetadata
IEP_GetValidPixelFormats
IEP_Help
IEP_ImageEncode
IEP_ImageEncodeFinish
IEP_ImageEncodePage
IEP_ImageEncodePageW
IEP_ImageEncodeStart
IEP_ImageEncodeStartW
IEP_ImageEncodeW
IEP_Init
IEP_SetMetadataList
IEP_SetMetadataListW
IEP_ShowEncodeParamsDialog
IEP_ShowPlugInDialog

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 453KB - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c251ba470b72e6d7eae70284382e4399

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

shlwapi

version

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 453KB - Virtual size: 453KB

.data Size: 40KB - Virtual size: 192KB

.pdata Size: 49KB - Virtual size: 48KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 426KB - Virtual size: 425KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 453KB - Virtual size: 453KB

.data
Size: 40KB - Virtual size: 192KB

.pdata
Size: 49KB - Virtual size: 48KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 426KB - Virtual size: 425KB

.reloc
Size: 13KB - Virtual size: 12KB