a8a5f3f617e21c8dd14c005c1767900f4c9e4f7015369328cf6c77f3b31e29d7

Sharing

Copy URL

Twitter E-mail

General

Target

a8a5f3f617e21c8dd14c005c1767900f4c9e4f7015369328cf6c77f3b31e29d7
Size

2.7MB
MD5

0d4c0e7718775af09de846dd0bdd1905
SHA1

36978e044ea7848aea1130f4f37fede894a6ade8
SHA256

a8a5f3f617e21c8dd14c005c1767900f4c9e4f7015369328cf6c77f3b31e29d7
SHA512

4ddd5f7743fd9d4af1858f2f315ad5e26a74469283651c3b272da102197ea831550d84bb1d3b8abb8d64dea180b0a6db31b79a7c98238b64ca8af38f5b2a882a
SSDEEP

49152:XrkIDK8ayIE3WFOOpq3ICsNoRREljcojddENfRm/3V+HWe:7kIKXEG03rsNozgQe2We

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8a5f3f617e21c8dd14c005c1767900f4c9e4f7015369328cf6c77f3b31e29d7

Files

a8a5f3f617e21c8dd14c005c1767900f4c9e4f7015369328cf6c77f3b31e29d7
.dll windows:5 windows x86 arch:x86

767cf7fc18d442961cbce58b21dc1b31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTimeZoneInformation
CreateFileW
SetEnvironmentVariableA
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
LCMapStringW
GetStringTypeW
IsProcessorFeaturePresent
IsValidCodePage
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapQueryInformation
HeapSize
HeapReAlloc
HeapAlloc
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
SetHandleCount
SetStdHandle
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
ExitThread
CreateThread
RtlUnwind
IsBadReadPtr
HeapValidate
GetCommandLineA
DecodePointer
EncodePointer
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
Sleep
SearchPathA
GetTickCount
FindResourceExW
GetOEMCP
GetCPInfo
GetACP
FileTimeToSystemTime
GetTempPathA
GetFileAttributesExA
GetFileSizeEx
GetTempFileNameA
GetFileTime
GetFileAttributesA
lstrcmpiA
GetFullPathNameA
GetVolumeInformationA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetProfileIntA
VirtualProtect
lstrcmpW
GlobalFindAtomA
FindResourceA
GetAtomNameA
GlobalGetAtomNameA
lstrlenW
CopyFileA
GlobalSize
FormatMessageA
FreeResource
lstrcpyA
GetVersionExA
LoadLibraryW
DeleteFileA
ResumeThread
SetThreadPriority
GlobalFlags
MulDiv
InterlockedIncrement
GetCurrentDirectoryA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
GlobalAddAtomA
GetModuleHandleA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
SetEvent
WaitForSingleObject
CloseHandle
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
CompareStringA
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
MultiByteToWideChar
InterlockedExchange
GlobalLock
GlobalAlloc
GetModuleHandleW
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetLocaleInfoA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
FindFirstFileA
CompareStringW
ExitProcess
ReadFile
GetFileSize
CreateFileA
LoadLibraryA
OutputDebugStringW
GetProcAddress

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathStripToRootA

crypt32

CryptEnumOIDInfo

gdiplus

GdiplusShutdown
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipGetImageGraphicsContext
GdipDrawImageI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

user32

DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
GetIconInfo
IsClipboardFormatAvailable
GetDoubleClickTime
IsCharLowerA
MapVirtualKeyExA
WaitMessage
DestroyCursor
SetRect
InflateRect
IntersectRect
UnionRect
SubtractRect
DrawIconEx
MessageBeep
MapVirtualKeyA
GetKeyNameTextA
LoadImageA
ReuseDDElParam
TranslateAcceleratorA
LoadAcceleratorsA
DestroyIcon
CharUpperA
UnpackDDElParam
GetClipboardFormatNameA
ReleaseCapture
SetRectEmpty
GetAsyncKeyState
ShowWindow
MoveWindow
IsDialogMessageA
CheckDlgButton
CreateWindowExA
GetClassInfoExA
RegisterClassA
SendDlgItemMessageA
MonitorFromWindow
SetFocus
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetWindowTextLengthA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
DestroyMenu
LoadAcceleratorsW
GetClassInfoA
DefWindowProcA
SetLayeredWindowAttributes
GetSysColor
GetMonitorInfoA
EnumDisplayMonitors
SystemParametersInfoA
GetSystemMetrics
LoadIconW
LoadIconA
LoadCursorW
LoadCursorA
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
NotifyWinEvent
GetForegroundWindow
SetForegroundWindow
HideCaret
OpenClipboard
WindowFromPoint
SetParent
IsChild
CharUpperBuffA
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
SetCapture
GetCapture
SetActiveWindow
GetActiveWindow
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
ShowOwnedPopups
IsWindowVisible
InvalidateRect
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ScreenToClient
MapWindowPoints
GetClientRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
IsZoomed
IsIconic
GetSystemMenu
DrawMenuBar
GetDesktopWindow
GetWindowTextA
SetWindowTextA
RealChildWindowFromPoint
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
UnregisterClassA
LoadMenuW
LoadMenuA
RemoveMenu
ModifyMenuA
InsertMenuItemA
InsertMenuA
GetSubMenu
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
GrayStringA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
GetSysColorBrush
UnhookWindowsHookEx
MessageBoxA
GetWindowLongA
GetParent
GetLastActivePopup
IsWindowEnabled
IsRectEmpty
CopyIcon
OffsetRect
UpdateLayeredWindow
PtInRect
EnableWindow
GetWindowThreadProcessId
SetCursor
GetKeyState
CallNextHookEx
PeekMessageA
GetCursorPos
SetWindowsHookExA
ValidateRect
GetMessageA
TranslateMessage
DispatchMessageA
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
GetFocus
TabbedTextOutA
PostMessageA
SendMessageA
IsWindow
MapDialogRect
MonitorFromPoint
RegisterClipboardFormatA
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
LoadImageW
SetClassLongA
SetCursorPos
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
CreateAcceleratorTableA
GetTopWindow
DestroyAcceleratorTable
PostQuitMessage
EqualRect

gdi32

CreateFontIndirectA
CreatePatternBrush
CreateCompatibleBitmap
CreatePalette
GetPaletteEntries
SetPaletteEntries
GetNearestPaletteIndex
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
SetRectRgn
CombineRgn
OffsetRgn
GetRgnBox
PtInRegion
RealizePalette
GetBkColor
CreateDCA
GetTextColor
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
PtVisible
RectVisible
Polyline
Ellipse
Polygon
Rectangle
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextFaceA
GetTextMetricsA
Escape
CreateHatchBrush
SetPixelV
DeleteObject
EnumFontFamiliesA
GetTextCharsetInfo
CreateDIBitmap
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetLayout
SetLayout
ExtSelectClipRgn
CopyMetaFileA
CreateDIBSection
EnumFontFamiliesExA
SetDIBColorTable
GetSystemPaletteEntries
CreateCompatibleDC
CreateSolidBrush
CreatePen
GetObjectType
GetStockObject
GetObjectA
CreateBitmap
ExtTextOutA
SelectObject
GetDeviceCaps
GetBoundsRect

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RevertToSelf
SetThreadToken
RegEnumKeyExA
RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenThreadToken

shell32

SHAppBarMessage
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteA
DragQueryFileA
DragFinish
SHGetFileInfoA

ole32

IsAccelerator
OleLockRunning
OleTranslateAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
CoCreateInstance
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
OleDuplicateData
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitialize

oleaut32

VariantClear
VariantChangeType
VariantInit
VarBstrFromDate
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocStringLen
SysFreeString

Exports

Exports

SignalChromeElf

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

767cf7fc18d442961cbce58b21dc1b31

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msimg32

comctl32

shlwapi

crypt32

gdiplus

oleacc

imm32

winmm

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 355KB - Virtual size: 354KB

.data Size: 22KB - Virtual size: 52KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 219KB - Virtual size: 218KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 355KB - Virtual size: 354KB

.data
Size: 22KB - Virtual size: 52KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 219KB - Virtual size: 218KB