c65c652bc7588cc3873a111d00be5b16

General

Target

c65c652bc7588cc3873a111d00be5b16
Size

24KB
MD5

c65c652bc7588cc3873a111d00be5b16
SHA1

d1d5e4e1251367a970c1ca6ffd53ec1d0a4a2426
SHA256

0a62fbe0ce669f99c3603f3a8d2c5b9e42a52f97fbb021d1e583e8d5b80eca0d
SHA512

24974e6ecda30129b8b67efe0f6cff4926e898d1cf802db6478f83ab7f12ada79ce0a4d0ab6d7cfede937e9b7c70579dc60a7bdf8ae9b533d47be0d6cda7b705
SSDEEP

192:Xn2iZ5UOC62l2iuTTzOqj1JZ79X2bm3rY:X2ASlIPnv2q3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c65c652bc7588cc3873a111d00be5b16

Files

c65c652bc7588cc3873a111d00be5b16
.dll windows:4 windows x86 arch:x86

ec81ab1d352e7b9975de1fe4f727dda6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetSystemDirectoryA
TerminateProcess
lstrcmpiA
Sleep
CreateThread
GetCurrentProcess
CloseHandle
LoadLibraryA
GetModuleFileNameA

user32

FindWindowExA
PostMessageA
ActivateKeyboardLayout
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
SystemParametersInfoA
GetKeyboardLayout
GetKeyboardLayoutList
MessageBoxA
LoadCursorA
RegisterClassExA
UnregisterClassA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA

imm32

ImmIsIME
ImmInstallIMEA
ImmGetIMEFileNameA

msvcrt

sprintf
strlen
memset
strrchr
strncpy
??3@YAXPAX@Z
_stricmp
??2@YAPAXI@Z
strcpy
__CxxFrameHandler
_EH_prolog

Exports

Exports

CandWndProc
CheckIME
CompWndProc
IMEClearPubString
IMESetPubString
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
SetupFont
StatusWndProc
UIWndProc

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec81ab1d352e7b9975de1fe4f727dda6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

imm32

msvcrt

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 2KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 300B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 630B

.text
Size: 4KB - Virtual size: 2KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 300B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 630B