3f0fdd082676db24f0a1f303c92c81b5

Sharing

Copy URL Twitter E-mail

General

Target

3f0fdd082676db24f0a1f303c92c81b5
Size

247KB
MD5

3f0fdd082676db24f0a1f303c92c81b5
SHA1

980ab169b934fd8499c94c122dca4656f2d942d1
SHA256

780e86bfcc61bf930f152f31aa585bc8173d33f9ad76386227d6aea28d8d40da
SHA512

43602a7c99dce66c8ea19e27cefaaf791321fc30a981fd9cd8f4736e2f156c30ca49f88693975edaefc7b09337aa8b4f88ef75bbf4c02f60d2d0b41e24a88edb
SSDEEP

6144:AGmWztWCAxdc889mPPe6h+DtZNkUHwAeukpskuuuuuuuuuuuuuuur/lK:AGuZI88sPPRh++CdeukGkuuuuuuuuuuX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f0fdd082676db24f0a1f303c92c81b5

Files

3f0fdd082676db24f0a1f303c92c81b5
.dll windows:5 windows x86 arch:x86

a703b37897695186bd467d2acf54007b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DebugBreak
DeleteFileW
DeleteVolumeMountPointW
DeviceIoControl
DisconnectNamedPipe
DnsHostnameToComputerNameW
DuplicateHandle
EnumCalendarInfoExA
EnumCalendarInfoExW
EnumCalendarInfoW
EnumDateFormatsExA
EnumResourceLanguagesA
EnumSystemLanguageGroupsW
EnumSystemLocalesA
EnumSystemLocalesW
EnumTimeFormatsW
EnumUILanguagesA
FatalAppExitA
FatalAppExitW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstVolumeA
FindFirstVolumeW
FindNextChangeNotification
FindNextVolumeMountPointA
FindNextVolumeMountPointW
FindResourceExA
FindResourceW
FlushConsoleInputBuffer
FlushFileBuffers
FoldStringA
FreeLibraryAndExitThread
FreeResource
GenerateConsoleCtrlEvent
GetBinaryTypeA
GetBinaryTypeW
GetCPInfo
GetCPInfoExW
GetCalendarInfoA
GetCalendarInfoW
GetCommMask
GetConsoleAliasExesLengthW
GetConsoleAliasesW
GetConsoleCP
GetConsoleDisplayMode
GetConsoleFontSize
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentConsoleFont
GetCurrentProcessId
GetCurrentThread
GetDateFormatA
GetDefaultCommConfigA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetEnvironmentStrings
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetLargestConsoleWindowSize
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsW
GetMailslotInfo
GetModuleFileNameA
GetNamedPipeInfo
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetPrivateProfileStructW
GetProcessHeaps
GetProcessPriorityBoost
GetProcessVersion
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetStringTypeA
GetStringTypeExA
GetSystemDefaultUILanguage
GetSystemDirectoryA
GetSystemInfo
GetSystemPowerStatus
GetThreadPriorityBoost
GetTimeFormatA
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersionExA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointA
GetVolumeNameForVolumeMountPointW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAddAtomA
GlobalDeleteAtom
GlobalFindAtomA
GlobalFix
GlobalGetAtomNameA
GlobalMemoryStatus
GlobalWire
Heap32Next
HeapCompact
CreateToolhelp32Snapshot
HeapDestroy
HeapLock
HeapUnlock
HeapWalk
InitializeCriticalSection
InterlockedExchangeAdd
IsBadStringPtrA
IsBadStringPtrW
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LoadLibraryA
LoadLibraryExW
LocalCompact
LocalHandle
LocalSize
LockResource
MapUserPhysicalPages
MapUserPhysicalPagesScatter
MoveFileWithProgressW
MulDiv
OpenFileMappingA
OpenFileMappingW
OpenJobObjectW
OutputDebugStringA
PeekConsoleInputW
PostQueuedCompletionStatus
PrepareTape
Process32First
PurgeComm
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadDirectoryChangesW
ReadFileEx
ReleaseMutex
RemoveDirectoryA
RemoveDirectoryW
ReplaceFileA
RequestWakeupLatency
ResetEvent
ResetWriteWatch
RtlFillMemory
RtlMoveMemory
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathW
SetCommState
SetCommTimeouts
SetComputerNameA
SetConsoleCursorInfo
SetConsoleWindowInfo
SetCurrentDirectoryA
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetFileApisToANSI
SetFileTime
SetHandleInformation
SetLocaleInfoW
SetMailslotInfo
SetMessageWaitingIndicator
SetNamedPipeHandleState
SetSystemTime
SetThreadContext
SetThreadPriorityBoost
SetTimeZoneInformation
SwitchToThread
SystemTimeToFileTime
TerminateThread
Thread32First
Thread32Next
TlsGetValue
Toolhelp32ReadProcessMemory
TransmitCommChar
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnregisterWait
UnregisterWaitEx
UpdateResourceA
VerSetConditionMask
VerifyVersionInfoA
VirtualUnlock
WaitCommEvent
WaitNamedPipeA
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleA
WriteConsoleOutputA
WriteConsoleOutputCharacterW
WriteConsoleW
WriteFile
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WriteProfileSectionA
_hread
_llseek
_lopen
lstrcatW
lstrcmpiA
lstrcpynW
lstrlenA
CreateThread
CreateSemaphoreW
CreateNamedPipeW
CreateNamedPipeA
CreateFileW
CreateDirectoryExW
CreateDirectoryA
CopyFileExA
CopyFileA
ConvertThreadToFiber
ContinueDebugEvent
CompareStringA
ChangeTimerQueueTimer
CallNamedPipeW
CallNamedPipeA
BuildCommDCBAndTimeoutsA
BindIoCompletionCallback
BackupRead
AreFileApisANSI
AddAtomW
CreateFileA
VirtualAllocEx
HeapCreate
ExitProcess

comdlg32

ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
ReplaceTextW

advapi32

RegOpenKeyExW

ole32

CLIPFORMAT_UserUnmarshal
CLSIDFromProgID
CLSIDFromProgIDEx
CLSIDFromString
CoCreateFreeThreadedMarshaler
CoCreateGuid
CoCreateInstance
CoCreateInstanceEx
CoDisableCallCancellation
CoDisconnectObject
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoGetApartmentID
CoGetCallContext
CoGetClassObject
CoGetClassVersion
CoGetCurrentLogicalThreadId
CoGetCurrentProcess
CoGetInterfaceAndReleaseStream
CoGetMarshalSizeMax
CoGetObject
CoGetObjectContext
CoGetPSClsid
CoGetStdMarshalEx
CoInitialize
CoInitializeSecurity
CoInitializeWOW
CoIsHandlerConnected
CoLoadLibrary
CoLockObjectExternal
CoMarshalHresult
CoMarshalInterThreadInterfaceInStream
CoMarshalInterface
CoQueryClientBlanket
CoQueryReleaseObject
CoRegisterChannelHook
CoRegisterClassObject
CoRegisterMallocSpy
CoRegisterMessageFilter
CoRegisterPSClsid
CoRegisterSurrogate
CoRegisterSurrogateEx
CoReleaseMarshalData
CoReleaseServerProcess
CoResumeClassObjects
CoRevokeClassObject
CoRevokeMallocSpy
CoSetCancelObject
CoSuspendClassObjects
CoSwitchCallContext
CoTestCancel
CoTreatAsClass
CoUninitialize
CoUnmarshalInterface
CreateAntiMoniker
CreateClassMoniker
CreateDataAdviseHolder
CreateFileMoniker
CreateILockBytesOnHGlobal
CreateItemMoniker
CreateObjrefMoniker
CreateOleAdviseHolder
CreateStdProgressIndicator
CreateStreamOnHGlobal
DcomChannelSetHResult
DllDebugObjectRPCHook
DllGetClassObjectWOW
DoDragDrop
EnableHookObject
FmtIdToPropStgName
GetClassFile
GetDocumentBitStg
GetHGlobalFromStream
HACCEL_UserFree
HACCEL_UserMarshal
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserUnmarshal
HBRUSH_UserFree
HBRUSH_UserMarshal
HBRUSH_UserUnmarshal
HDC_UserFree
HDC_UserMarshal
HDC_UserSize
HDC_UserUnmarshal
HENHMETAFILE_UserFree
HENHMETAFILE_UserUnmarshal
HGLOBAL_UserFree
HGLOBAL_UserSize
HGLOBAL_UserUnmarshal
CLIPFORMAT_UserMarshal
HICON_UserMarshal
HICON_UserSize
HICON_UserUnmarshal
HMENU_UserFree
HMENU_UserMarshal
HMENU_UserSize
HMETAFILEPICT_UserFree
HMETAFILEPICT_UserMarshal
HMETAFILEPICT_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILE_UserFree
HMETAFILE_UserMarshal
HMETAFILE_UserUnmarshal
HPALETTE_UserFree
HPALETTE_UserSize
HPALETTE_UserUnmarshal
HWND_UserSize
HWND_UserUnmarshal
MonikerCommonPrefixWith
MonikerRelativePathTo
OleBuildVersion
OleConvertIStorageToOLESTREAM
OleConvertOLESTREAMToIStorageEx
OleCreateDefaultHandler
OleCreateEmbeddingHelper
OleCreateFromDataEx
OleCreateFromFile
OleCreateFromFileEx
OleCreateLink
OleCreateLinkFromData
OleCreateLinkToFile
OleCreateMenuDescriptor
OleCreateStaticFromData
OleDestroyMenuDescriptor
OleDraw
OleDuplicateData
OleFlushClipboard
OleGetClipboard
OleGetIconOfFile
OleIsCurrentClipboard
OleLoad
OleLoadFromStream
OleLockRunning
OleQueryLinkFromData
OleRegEnumFormatEtc
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSave
OleSaveToStream
OleSetContainedObject
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
ProgIDFromCLSID
PropStgNameToFmtId
PropVariantClear
ReadClassStg
ReadClassStm
ReadFmtUserTypeStg
ReadOleStg
ReleaseStgMedium
RevokeDragDrop
SNB_UserFree
SNB_UserMarshal
SNB_UserUnmarshal
STGMEDIUM_UserFree
STGMEDIUM_UserMarshal
STGMEDIUM_UserUnmarshal
SetDocumentBitStg
StgConvertVariantToProperty
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgCreatePropStg
StgGetIFillLockBytesOnFile
StgIsStorageILockBytes
StgOpenPropStg
StgOpenStorage
StgOpenStorageEx
StgOpenStorageOnILockBytes
StgPropertyLengthAsVariant
StgSetTimes
StringFromCLSID
StringFromGUID2
UpdateDCOMSettings
UtConvertDvtd32toDvtd16
UtGetDvtd16Info
UtGetDvtd32Info
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserUnmarshal
WriteClassStm
HICON_UserFree
CLIPFORMAT_UserFree

msvcrt

memcpy

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a703b37897695186bd467d2acf54007b

Headers

File Characteristics

Imports

kernel32

comdlg32

advapi32

ole32

msvcrt

Sections

.text Size: 216KB - Virtual size: 215KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 180B

.data2 Size: 1024B - Virtual size: 1000B

.data1 Size: 1024B - Virtual size: 1000B

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 216KB - Virtual size: 215KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 180B

.data2
Size: 1024B - Virtual size: 1000B

.data1
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 3KB - Virtual size: 3KB