62581cbe021224f15bb55a34110a3991973ecbb7ec96180334824c79ed62102e

Sharing

Copy URL Twitter E-mail

General

Target

62581cbe021224f15bb55a34110a3991973ecbb7ec96180334824c79ed62102e
Size

572KB
MD5

928760fa69afe8af99f11add80fc7454
SHA1

e1ee5f92aefcb91a9fa69ad20544d968bace7dbe
SHA256

62581cbe021224f15bb55a34110a3991973ecbb7ec96180334824c79ed62102e
SHA512

d58a872df89b1771afddb37f9ad908163b758a85bf40b1cff4dd6682997aeea342c52e935a8169ce86e1625493c2d1ac5376b6817a69400d46f61fe55d5bc8a0
SSDEEP

12288:ivuyTdUh3EFXj+GjT1AMmAZ65rBBliWxt9qc+K3Kc4ZSY:ivbTSJEpNv1B65rBBliWxHqcR3Kc4ZSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62581cbe021224f15bb55a34110a3991973ecbb7ec96180334824c79ed62102e

Files

62581cbe021224f15bb55a34110a3991973ecbb7ec96180334824c79ed62102e
.dll regsvr32 windows:5 windows x86 arch:x86

f2db9788a032fd0a90cd86e9d79c4586

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
HeapFree
LoadLibraryW
HeapAlloc
GetProcessHeap
GetFileAttributesW
GetCurrentProcess
GetSystemDefaultLangID
SetLastError
GetCurrentThreadId
GetCurrentProcessId
GetACP
GetStartupInfoW
TerminateProcess
lstrlenW
FindFirstFileW
GetLongPathNameW
CreateFileW
GetFileAttributesExW
FindNextFileW
FindClose
CreateMutexW
ReleaseMutex
OpenMutexW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
InitializeCriticalSection
ResumeThread
InterlockedExchangeAdd
FormatMessageW
LocalFree
WriteFile
SetFileTime
SetEndOfFile
GetFileSize
OpenProcess
GetEnvironmentVariableW
CreateDirectoryW
GetFullPathNameW
GetTempPathW
SetFileAttributesW
DeleteFileW
GetWindowsDirectoryW
MoveFileExW
GetTempFileNameW
CreateProcessW
GetFileSizeEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
LCMapStringW
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
GetStringTypeW
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetPrivateProfileStringW
SetStdHandle
GetConsoleMode
FlushFileBuffers
GetConsoleCP
SetFilePointerEx
WriteConsoleW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
GetVersionExW
SetFilePointer
ReadFile
LoadLibraryExW
lstrcmpiW
FreeLibrary
GetModuleHandleW
GetProcAddress
FindResourceW
LoadResource
DisableThreadLibraryCalls
MultiByteToWideChar
GetVersion
LeaveCriticalSection
EncodePointer
GetModuleFileNameW
EnterCriticalSection
SizeofResource
GlobalUnlock
WideCharToMultiByte
InterlockedIncrement
lstrcpynA
DeleteCriticalSection
GlobalLock
DecodePointer
RaiseException
CloseHandle
GetLastError
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
MoveFileW
lstrcpynW

user32

ScreenToClient
BeginPaint
EndDialog
GetMonitorInfoW
EndPaint
MonitorFromWindow
ClientToScreen
GetWindowThreadProcessId
IsWindowVisible
FillRect
CallWindowProcW
EnumWindows
SetWindowLongW
DialogBoxParamW
MessageBoxW
GetIconInfo
SetRect
GetDesktopWindow
DefWindowProcW
wsprintfW
GetWindowLongW
GetWindow
GetWindowRect
SetWindowPos
MapWindowPoints
GetParent
ReleaseDC
LoadStringW
GetPropW
SendMessageW
ShowWindow
IsWindow
SetTimer
SetDlgItemTextW
IsWindowEnabled
SetPropW
GetClientRect
KillTimer
InvalidateRect
EnableWindow
LoadImageW
CharNextW
GetMenuItemInfoW
InsertMenuItemW
GetMenuItemCount
UnregisterClassW
CreatePopupMenu
DestroyIcon
IsMenu
SetMenuItemInfoW
DestroyMenu
GetMenuInfo
AppendMenuW
DrawIconEx
SetWindowTextW
GetDlgItem
GetActiveWindow
GetDC

gdi32

PathToRegion
TextOutW
EndPath
LineTo
CreatePen
MoveToEx
CreateSolidBrush
SetTextColor
SetBkMode
CreateCompatibleBitmap
SelectObject
BeginPath
CreateCompatibleDC
GetDIBits
DeleteDC
SetBkColor
ExtTextOutW
GetStockObject
DeleteObject
FillPath
CreateDIBSection
GetBkColor

advapi32

GetUserNameW
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

DragQueryFileW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW

ole32

CoTaskMemFree
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance

oleaut32

VarUI4FromStr

comctl32

CreatePropertySheetPageW
DestroyPropertySheetPage

msimg32

TransparentBlt

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 423KB - Virtual size: 422KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2db9788a032fd0a90cd86e9d79c4586

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

Exports

Exports

Sections

.text Size: 423KB - Virtual size: 422KB

.rdata Size: 100KB - Virtual size: 100KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 423KB - Virtual size: 422KB

.rdata
Size: 100KB - Virtual size: 100KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 24KB - Virtual size: 23KB