1cf629d5903bc84bb4e95f581b1bfffb

Sharing

Copy URL Twitter E-mail

General

Target

1cf629d5903bc84bb4e95f581b1bfffb
Size

244KB
MD5

1cf629d5903bc84bb4e95f581b1bfffb
SHA1

d49b0a0f0a2cdd7b78ea0270ffca2b15c5c9c408
SHA256

e51aa33b1c150d2d9b456e0c2b9a7cae40f740622e613ffade8964fa473d181b
SHA512

b983ba5a21007b81f45c1927991a76ea7a3dcc80374c1e3da52606f54ac8969668b9e18a6367c2a0e964a400bbc37f077317bd5cdea12fd1ae48e4e33f129686
SSDEEP

6144:xB4raywVG22mehbSTbdn2uqewgpkmbpbRrysB5:xKDwVxObGdn2uqew5OpbRt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cf629d5903bc84bb4e95f581b1bfffb

Files

1cf629d5903bc84bb4e95f581b1bfffb
.dll windows:4 windows x86 arch:x86

72997927cca328b6e5f8bd8f8e9cd8ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

DragQueryFileW
SHGetSpecialFolderPathW
ShellAboutW
ShellExecuteExW
SHGetSettings
DragFinish

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
CommDlgExtendedError

gdi32

TextOutW
SetTextColor
BitBlt
CreateCompatibleDC
CreateDCW
CreateFontIndirectW
CreateICW
CreatePen
CreateSolidBrush
DPtoLP
DeleteObject
Escape
ExtTextOutW
GetBkColor
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetTextMetricsW
PtVisible
RectVisible
Rectangle
ScaleWindowExtEx
SelectObject
SetBkMode
SetDCBrushColor
SetPixel

msvcrt

__CxxFrameHandler
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_XcptFilter
_cexit
_controlfp
_initterm
_onexit
_wcsdup
exit
memmove
setlocale
wcscmp
wcscoll
wcslen
wcstod
_c_exit

advapi32

RegQueryValueExW
RegSetValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

kernel32

TerminateProcess
lstrcmpW
lstrlenA
SetUnhandledExceptionFilter
SetThreadPriority
MultiByteToWideChar
MulDiv
LoadLibraryW
LoadLibraryExW
LoadLibraryExA
InterlockedIncrement
HeapCreate
HeapAlloc
GlobalGetAtomNameW
GlobalFree
GlobalAlloc
GlobalAddAtomW
GetVersionExA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetShortPathNameW
GetModuleHandleA
GetLastError
GetDateFormatW
GetCurrentThreadId
GetCommandLineA
lstrlenW
DeleteAtom
CreateFileW
CreateEventW
AddAtomW
ExitProcess

shlwapi

PathFindFileNameW

user32

UpdateWindow
SetRect
SetFocus
SetCursor
SendMessageW
SendMessageTimeoutW
SendDlgItemMessageW
PeekMessageW
OffsetRect
WinHelpW
LoadIconW
GetNextDlgTabItem
GetMonitorInfoW
GetDC
GetAsyncKeyState
GetActiveWindow
FindWindowW
EnableWindow
DefWindowProcW
CallNextHookEx
LoadMenuW
CharToOemBuffA

ole32

CLSIDFromString
CoTaskMemFree
CreateILockBytesOnHGlobal
OleInitialize
OleRegGetUserType
OleUninitialize
ReleaseStgMedium
StgCreateDocfileOnILockBytes
StringFromCLSID

Exports

Exports

BAOCloseHandle
D3D9Begin
D3D9UnmapResources
DVDMRWVRIsDiscFinalized
DVDPRVRGetNumVideoRecordings
EnumSupportedImageSizeNext
GetDZoomMagnification
GetFile2
ReadAtCapDevParamFromRAW
RegisterShared
SetAllParamValueToAtCapture
SetMyColorDataProps
UnregisterDriveStatusCallback

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72997927cca328b6e5f8bd8f8e9cd8ab

Headers

File Characteristics

Imports

shell32

comdlg32

gdi32

msvcrt

advapi32

kernel32

shlwapi

user32

ole32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 72KB - Virtual size: 116KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 72KB - Virtual size: 116KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB