b3a5e99d1ae6ca7479eca3a093f87e3b

Sharing

Copy URL Twitter E-mail

General

Target

b3a5e99d1ae6ca7479eca3a093f87e3b
Size

2.0MB
MD5

b3a5e99d1ae6ca7479eca3a093f87e3b
SHA1

a231f3a733dd511299340e86b7e41abe8722e545
SHA256

fdffeaa80b1422b758ccb57ab2fafd393a1e1d1bacbe4a87c05876a9a67957c8
SHA512

ff9ae1268f858667fe5899ae2c25751cb19cb703e8b50604c0d09d187b1d4bf0e16858d7c1d5c6fda4a112944135c80d6d289f7a86dd06dee4289237874f5e55
SSDEEP

12288:hVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:QfP7fWsK5z9A+WGAW+V5SB6Ct4bnb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3a5e99d1ae6ca7479eca3a093f87e3b

Files

b3a5e99d1ae6ca7479eca3a093f87e3b
.dll windows:5 windows x64 arch:x64

6668be91e2c948b183827f040944057f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

LookupIconIdFromDirectoryEx
WaitForInputIdle
GetParent
GetFocus

setupapi

CM_Get_Resource_Conflict_DetailsW

kernel32

DeleteCriticalSection
DeleteTimerQueue
TerminateJobObject
GetFileInformationByHandle
GetThreadLocale
GetNamedPipeServerProcessId
GetConsoleFontSize

gdi32

CreateBitmapIndirect
GetPolyFillMode

crypt32

CertGetCTLContextProperty

advapi32

AddAccessDeniedObjectAce

shlwapi

ChrCmpIW

Exports

Exports

GetTapi16CallbackMsg
LAddrParamsInited
LOpenDialAsst
LocWizardDlgProc
MMCAddProvider
MMCConfigProvider
MMCGetAvailableProviders
MMCGetDeviceFlags
MMCGetLineInfo
MMCGetLineStatus
MMCGetPhoneInfo
MMCGetPhoneStatus
MMCGetProviderList
MMCGetServerConfig
MMCInitialize
MMCRemoveProvider
MMCSetLineInfo
MMCSetPhoneInfo
MMCSetServerConfig
MMCShutdown
NonAsyncEventThread
TAPIWndProc
TUISPIDLLCallback
internalConfig
internalCreateDefLocation
internalNewLocationW
internalPerformance
internalRemoveLocation
internalRenameLocationW
lineAccept
lineAddProvider
lineAddProviderA
lineAddProviderW
lineAddToConference
lineAgentSpecific
lineAnswer
lineBlindTransfer
lineBlindTransferA
lineBlindTransferW
lineClose
lineCompleteCall
lineCompleteTransfer
lineConfigDialog
lineConfigDialogA
lineConfigDialogEdit
lineConfigDialogEditA
lineConfigDialogEditW
lineConfigDialogW
lineConfigProvider
lineCreateAgentA
lineCreateAgentSessionA
lineCreateAgentSessionW
lineCreateAgentW
lineDeallocateCall
lineDevSpecific
lineDevSpecificFeature
lineDial
lineDialA
lineDialW
lineDrop
lineForward
lineForwardA
lineForwardW
lineGatherDigits
lineGatherDigitsA
lineGatherDigitsW
lineGenerateDigits
lineGenerateDigitsA
lineGenerateDigitsW
lineGenerateTone
lineGetAddressCaps
lineGetAddressCapsA
lineGetAddressCapsW
lineGetAddressID
lineGetAddressIDA
lineGetAddressIDW
lineGetAddressStatus
lineGetAddressStatusA
lineGetAddressStatusW
lineGetAgentActivityListA
lineGetAgentActivityListW
lineGetAgentCapsA
lineGetAgentCapsW
lineGetAgentGroupListA
lineGetAgentGroupListW
lineGetAgentInfo
lineGetAgentSessionInfo
lineGetAgentSessionList
lineGetAgentStatusA
lineGetAgentStatusW
lineGetAppPriority
lineGetAppPriorityA
lineGetAppPriorityW
lineGetCallInfo
lineGetCallInfoA
lineGetCallInfoW
lineGetCallStatus
lineGetConfRelatedCalls
lineGetCountry
lineGetCountryA
lineGetCountryW
lineGetDevCaps
lineGetDevCapsA
lineGetDevCapsW
lineGetDevConfig
lineGetDevConfigA
lineGetDevConfigW
lineGetGroupListA
lineGetGroupListW
lineGetID
lineGetIDA
lineGetIDW
lineGetIcon
lineGetIconA
lineGetIconW
lineGetLineDevStatus
lineGetLineDevStatusA
lineGetLineDevStatusW
lineGetMessage
lineGetNewCalls
lineGetNumRings
lineGetProviderList
lineGetProviderListA
lineGetProviderListW
lineGetProxyStatus
lineGetQueueInfo
lineGetQueueListA
lineGetQueueListW
lineGetRequest
lineGetRequestA
lineGetRequestW
lineGetStatusMessages
lineGetTranslateCaps
lineGetTranslateCapsA
lineGetTranslateCapsW
lineHandoff
lineHandoffA
lineHandoffW
lineHold
lineInitialize
lineInitializeExA
lineInitializeExW
lineMakeCall
lineMakeCallA
lineMakeCallW
lineMonitorDigits
lineMonitorMedia
lineMonitorTones
lineNegotiateAPIVersion
lineNegotiateExtVersion
lineOpen
lineOpenA
lineOpenW
linePark
lineParkA
lineParkW
linePickup
linePickupA
linePickupW
linePrepareAddToConference
linePrepareAddToConferenceA
linePrepareAddToConferenceW
lineProxyMessage
lineProxyResponse
lineRedirect
lineRedirectA
lineRedirectW
lineRegisterRequestRecipient
lineReleaseUserUserInfo
lineRemoveFromConference
lineRemoveProvider
lineSecureCall
lineSendUserUserInfo
lineSetAgentActivity
lineSetAgentGroup
lineSetAgentMeasurementPeriod
lineSetAgentSessionState
lineSetAgentState
lineSetAgentStateEx
lineSetAppPriority
lineSetAppPriorityA
lineSetAppPriorityW
lineSetAppSpecific
lineSetCallData
lineSetCallParams
lineSetCallPrivilege
lineSetCallQualityOfService
lineSetCallTreatment
lineSetCurrentLocation
lineSetDevConfig
lineSetDevConfigA
lineSetDevConfigW
lineSetLineDevStatus
lineSetMediaControl
lineSetMediaMode
lineSetNumRings
lineSetQueueMeasurementPeriod
lineSetStatusMessages
lineSetTerminal
lineSetTollList
lineSetTollListA
lineSetTollListW
lineSetupConference
lineSetupConferenceA
lineSetupConferenceW
lineSetupTransfer
lineSetupTransferA
lineSetupTransferW
lineShutdown
lineSwapHold
lineTranslateAddress
lineTranslateAddressA
lineTranslateAddressW
lineTranslateDialog
lineTranslateDialogA
lineTranslateDialogW
lineUncompleteCall
lineUnhold
lineUnpark
lineUnparkA
lineUnparkW
phoneClose
phoneConfigDialog
phoneConfigDialogA
phoneConfigDialogW
phoneDevSpecific
phoneGetButtonInfo
phoneGetButtonInfoA
phoneGetButtonInfoW
phoneGetData
phoneGetDevCaps
phoneGetDevCapsA
phoneGetDevCapsW
phoneGetDisplay
phoneGetGain
phoneGetHookSwitch
phoneGetID
phoneGetIDA
phoneGetIDW
phoneGetIcon
phoneGetIconA
phoneGetIconW
phoneGetLamp
phoneGetMessage
phoneGetRing
phoneGetStatus
phoneGetStatusA
phoneGetStatusMessages
phoneGetStatusW
phoneGetVolume
phoneInitialize
phoneInitializeExA
phoneInitializeExW
phoneNegotiateAPIVersion
phoneNegotiateExtVersion
phoneOpen
phoneSetButtonInfo
phoneSetButtonInfoA
phoneSetButtonInfoW
phoneSetData
phoneSetDisplay
phoneSetGain
phoneSetHookSwitch
phoneSetLamp
phoneSetRing
phoneSetStatusMessages
phoneSetVolume
phoneShutdown
tapiGetLocationInfo
tapiGetLocationInfoA
tapiGetLocationInfoW
tapiRequestDrop
tapiRequestMakeCall
tapiRequestMakeCallA
tapiRequestMakeCallW
tapiRequestMediaCall
tapiRequestMediaCallA
tapiRequestMediaCallW

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.qkm
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cvjb
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tlmkv
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wucsxe
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fltwtj
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sfplio
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rpg
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bewzc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vksvaw
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wmhg
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kswemc
Size: 4KB - Virtual size: 877B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kaxfk
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wualk
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qdxz
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hsfs
Size: 4KB - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kihf
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gwiv
Size: 4KB - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rhy
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.meo
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xmlw
Size: 4KB - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fxs
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ubyib
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tylhq
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prthf
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdt
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdjl
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wfhvp
Size: 4KB - Virtual size: 674B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcw
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.odxdpv
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.umfzri
Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eobg
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.glu
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yxxxdy
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.foyeb
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rteqb
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6668be91e2c948b183827f040944057f

Headers

DLL Characteristics

File Characteristics

Imports

user32

setupapi

kernel32

gdi32

crypt32

advapi32

shlwapi

Exports

Exports

Sections

.text Size: 260KB - Virtual size: 257KB

.rdata Size: 404KB - Virtual size: 403KB

.data Size: 96KB - Virtual size: 94KB

.pdata Size: 4KB - Virtual size: 300B

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 12KB - Virtual size: 8KB

.qkm Size: 4KB - Virtual size: 1KB

.cvjb Size: 8KB - Virtual size: 7KB

.tlmkv Size: 4KB - Virtual size: 2KB

.wucsxe Size: 280KB - Virtual size: 276KB

.fltwtj Size: 8KB - Virtual size: 4KB

.sfplio Size: 4KB - Virtual size: 1KB

.rpg Size: 280KB - Virtual size: 276KB

.bewzc Size: 8KB - Virtual size: 4KB

.vksvaw Size: 4KB - Virtual size: 1KB

.wmhg Size: 8KB - Virtual size: 4KB

.kswemc Size: 4KB - Virtual size: 877B

.kaxfk Size: 8KB - Virtual size: 6KB

.wualk Size: 4KB - Virtual size: 2KB

.qdxz Size: 4KB - Virtual size: 2KB

.hsfs Size: 4KB - Virtual size: 503B

.kihf Size: 280KB - Virtual size: 276KB

.gwiv Size: 4KB - Virtual size: 954B

.rhy Size: 8KB - Virtual size: 7KB

.meo Size: 8KB - Virtual size: 4KB

.xmlw Size: 4KB - Virtual size: 318B

.fxs Size: 8KB - Virtual size: 5KB

.ubyib Size: 4KB - Virtual size: 1KB

.tylhq Size: 8KB - Virtual size: 5KB

.prthf Size: 4KB - Virtual size: 1KB

.mdt Size: 280KB - Virtual size: 276KB

.mdjl Size: 4KB - Virtual size: 2KB

.wfhvp Size: 4KB - Virtual size: 674B

.xcw Size: 4KB - Virtual size: 1KB

.odxdpv Size: 4KB - Virtual size: 1KB

.umfzri Size: 4KB - Virtual size: 431B

.eobg Size: 28KB - Virtual size: 27KB

.glu Size: 4KB - Virtual size: 2KB

.yxxxdy Size: 4KB - Virtual size: 2KB

.foyeb Size: 4KB - Virtual size: 1KB

.rteqb Size: 8KB - Virtual size: 7KB

.text
Size: 260KB - Virtual size: 257KB

.rdata
Size: 404KB - Virtual size: 403KB

.data
Size: 96KB - Virtual size: 94KB

.pdata
Size: 4KB - Virtual size: 300B

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 12KB - Virtual size: 8KB

.qkm
Size: 4KB - Virtual size: 1KB

.cvjb
Size: 8KB - Virtual size: 7KB

.tlmkv
Size: 4KB - Virtual size: 2KB

.wucsxe
Size: 280KB - Virtual size: 276KB

.fltwtj
Size: 8KB - Virtual size: 4KB

.sfplio
Size: 4KB - Virtual size: 1KB

.rpg
Size: 280KB - Virtual size: 276KB

.bewzc
Size: 8KB - Virtual size: 4KB

.vksvaw
Size: 4KB - Virtual size: 1KB

.wmhg
Size: 8KB - Virtual size: 4KB

.kswemc
Size: 4KB - Virtual size: 877B

.kaxfk
Size: 8KB - Virtual size: 6KB

.wualk
Size: 4KB - Virtual size: 2KB

.qdxz
Size: 4KB - Virtual size: 2KB

.hsfs
Size: 4KB - Virtual size: 503B

.kihf
Size: 280KB - Virtual size: 276KB

.gwiv
Size: 4KB - Virtual size: 954B

.rhy
Size: 8KB - Virtual size: 7KB

.meo
Size: 8KB - Virtual size: 4KB

.xmlw
Size: 4KB - Virtual size: 318B

.fxs
Size: 8KB - Virtual size: 5KB

.ubyib
Size: 4KB - Virtual size: 1KB

.tylhq
Size: 8KB - Virtual size: 5KB

.prthf
Size: 4KB - Virtual size: 1KB

.mdt
Size: 280KB - Virtual size: 276KB

.mdjl
Size: 4KB - Virtual size: 2KB

.wfhvp
Size: 4KB - Virtual size: 674B

.xcw
Size: 4KB - Virtual size: 1KB

.odxdpv
Size: 4KB - Virtual size: 1KB

.umfzri
Size: 4KB - Virtual size: 431B

.eobg
Size: 28KB - Virtual size: 27KB

.glu
Size: 4KB - Virtual size: 2KB

.yxxxdy
Size: 4KB - Virtual size: 2KB

.foyeb
Size: 4KB - Virtual size: 1KB

.rteqb
Size: 8KB - Virtual size: 7KB