010c2c46630970d215111468b51a880b

Sharing

Copy URL

Twitter E-mail

General

Target

010c2c46630970d215111468b51a880b
Size

252KB
MD5

010c2c46630970d215111468b51a880b
SHA1

59b8ef976efe7e81e4f54cc55e371a1af6e40765
SHA256

e0847a5ea76d9db8a7fe8642c3f8c33b6d67ff6d6309338df6c88e2aa38f175b
SHA512

4c52910d28e4e9fc32432a3677252fe127c0cec6ce11fa6882af7e0d6b872e731a66fee0ee02be55eb11651360532394aaadd5a5624f4f0aed086b73977bfd24
SSDEEP

6144:EKISdlK7NGj11oacXAse4pQutDi7g5lolI:tbduI18eKQuUeo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
010c2c46630970d215111468b51a880b

Files

010c2c46630970d215111468b51a880b
.dll windows:4 windows x86 arch:x86

e6df970b30b749735bbb379daa4ec841

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

StringFromCLSID
StgCreateDocfileOnILockBytes
ReleaseStgMedium
OleUninitialize
OleRegGetUserType
OleInitialize
CreateILockBytesOnHGlobal
CoTaskMemFree
CLSIDFromString

comdlg32

ChooseFontW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

shell32

DragFinish
DragQueryFileW
SHGetSettings
ShellAboutW
ShellExecuteExW
SHGetSpecialFolderPathW

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

msvcrt

_cexit
_c_exit
_adjust_fdiv
__wgetmainargs
__setusermatherr
__set_app_type
__p__fmode
__p__commode
_wcsdup
__CxxFrameHandler
_XcptFilter
exit
memmove
setlocale
wcscmp
wcscoll
wcslen
wcstod
_onexit
_initterm
__dllonexit
_controlfp

gdi32

DPtoLP
CreateSolidBrush
CreatePen
CreateICW
CreateFontIndirectW
CreateDCW
DeleteObject
BitBlt
GetTextMetricsW
PtVisible
RectVisible
Rectangle
ScaleWindowExtEx
Escape
ExtTextOutW
GetBkColor
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetStockObject
CreateCompatibleDC
GetTextExtentPoint32W
SelectObject
SetBkMode
SetDCBrushColor
SetPixel
GetTextColor
SetTextColor
TextOutW

user32

WinHelpW
UpdateWindow
CallNextHookEx
CharToOemBuffA
DefWindowProcW
EnableWindow
FindWindowW
GetActiveWindow
GetAsyncKeyState
GetDC
GetMonitorInfoW
GetNextDlgTabItem
LoadIconW
LoadMenuW
OffsetRect
PeekMessageW
SendDlgItemMessageW
SendMessageTimeoutW
SendMessageW
SetCursor
SetFocus
SetRect

shlwapi

PathFindFileNameW

kernel32

CreateFileW
CreateEventW
AddAtomW
DeleteAtom
ExitProcess
GetCommandLineA
GetDateFormatW
GetLastError
GetModuleHandleA
GetShortPathNameW
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetVersionExA
GlobalAddAtomW
GlobalAlloc
GlobalFree
GlobalGetAtomNameW
HeapAlloc
HeapCreate
InterlockedIncrement
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MulDiv
MultiByteToWideChar
SetThreadPriority
SetUnhandledExceptionFilter
TerminateProcess
lstrcmpW
lstrlenA
lstrlenW
GetCurrentThreadId

Exports

Exports

D3D10ResourceSetMapFlags
D3D11GetDevice
D3D9RegisterVertexBuffer
DVDPRVRPrepareMedium
EjectLoadCD
EnumCustomFunctionSettingRelease
EnumSupportedImageSizeNext
EventDestroy
GetMCCustomCapCount
GetPersonalFunctionSetting
GraphicsUnmapResources
UnregisterFatBinary

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6df970b30b749735bbb379daa4ec841

Headers

File Characteristics

Imports

ole32

comdlg32

shell32

advapi32

msvcrt

gdi32

user32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 168KB

.data Size: 72KB - Virtual size: 108KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 168KB - Virtual size: 168KB

.data
Size: 72KB - Virtual size: 108KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB