1c7feb3d22711dbe08a8a4a0bceb3f9c

Sharing

Copy URL Twitter E-mail

General

Target

1c7feb3d22711dbe08a8a4a0bceb3f9c
Size

61KB
MD5

1c7feb3d22711dbe08a8a4a0bceb3f9c
SHA1

6f880a3bdeaeabca46d614111cf2e8404c542cbf
SHA256

e7b5c898b47df3c451a413800987f0a8b64528402a8545799d63c3973ef8524f
SHA512

d3ce382c1d4542c8b375a19555bb369912c8d057a477e9c695c255eb95edf68affbd2c46f46821ed5cfbcefdac9ede29a2c847ebc6db2f2de01e56c133ea949a
SSDEEP

768:iy6BixII3SnnY/B/LNRTclYE/3PLgkcDQOv9YzGMTpC3okAZh+kkLj+EH+noGo14:xEixj+nEBzNami3TgttO6/SEH+nmwm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c7feb3d22711dbe08a8a4a0bceb3f9c

Files

1c7feb3d22711dbe08a8a4a0bceb3f9c
.dll windows:4 windows x86 arch:x86

671dfb93e0ba16566b1656c95492ded8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaDerefAry1
__vbaAryLock

user32

LoadAcceleratorsA
EndDialog
EnableMenuItem
LoadImageA
CreateDesktopA
CloseWindow
CharPrevA
ChangeMenuA
CreateMDIWindowA

advapi32

RegCloseKey
RegEnumKeyA
RegOpenKeyExA
LsaICLookupNames
LsaGetRemoteUserName
LsaEnumerateTrustedDomainsEx
LsaEnumerateTrustedDomains
LsaEnumerateAccounts
LsaCreateTrustedDomain
LsaCreateAccount
LsaEnumeratePrivilegesOfAccount

kernel32

LoadLibraryA
EnumResourceLanguagesA
EnumResourceLanguagesW
lstrcpyA
lstrcmpA
lstrcatA
TlsSetValue
SetUnhandledExceptionFilter
SetCurrentDirectoryA
RtlUnwind
RaiseException
LoadResource
GetModuleHandleA
GetFileSize
GetCommandLineA
FindResourceA
EnterCriticalSection

dinput

DirectInputCreateEx

Exports

Exports

Ahaoo
Ahxgtpzd
Amvdeiq
Avdeu
Ayzcyvsi
Bebxqf
Bhcnvb
Bhuzzz
Cbtbt
Cbylirh
Cxiwgyjdqxn
Dhbolympg
Dhkfzdpffkg
Dplmwewp
Dsncos
Dyez
Dzlegxsrnm
Eduqo
Ehizx
Etbrqk
Ezzzb
Fdxzmxc
Fhfsezezz
Fhoe
Fqghpta
Fuksd
Fzjvrj
Gadkj
Gcpstupt
Gkhgbiwk
Gxilmyagqa
Gyqx
Heatepxsutc
Hejjpuhwqm
Hitxmaxp
Hpmpwwi
Hwgxbmrsrxs
Iafssjngak
Idqywlse
Itlbmqkjqk
Jaxcgcw
Jfvpha
Jtbkeijvp
Jwujyu
Jyqk
Kaegtha
Kcejcuidwsk
Kecvnosly
Kiaxipkwp
Klhbq
Knnhrar
Krkxojlq
Kryhdczn
Kxhuglbr
Kyggunlwq
Lkszmkq
Lnixfmgq
Lqklhiq
Lqmcsri
Lslqcmogzlc
Lurljhxgmb
Mbgghmyp
Mdedewp
Mfovuv
Mlpi
Mmfsy
Mqovc
Mrivqa
Mvtp
Mvuqpzti
Mxwjdl
Nhazwyijh
Nhqfadlju
Nokzwjcvcl
Nrrzbg
Nwboff
Nxghjwqltlh
Ojgxbqbxy
Omizplwk
Owjlzadiolo
Pdpeisw
Pfnegqkhsn
Pitcypck
Pjlviqjfvnx
Pmcezw
Pqfippa
Pwkv
Pwznmoegxa
Qdnqgldzpa
Qjyiuwa
Qkvhhowujau
Qpyhvrp
Qqutb
Qtgqgk
Quxwodekzds
Qzjrqhpsz
Razbynxe
Rfysi
Rojznkvr
Rqoos
Shsv
Sqjuhzsonhr
Srfoce
Sutcrapxu
Swfx
Taptqtqhau
Tblbcimbpx
Tdyqgy
Tjxlht
Tlayobmco
Tudxn
Tymhoccyiv
Ubxsk
Ucgow
Ukkgkadk
Uojudjq
Uphvk
Uvbxrgcgj
Uvlmr
Vfzd
Vltsndzzo
Vnycpswp
Vwkbl
Wcwglfqoo
Wfmbcaaqghj
Wgidn
Wgoaasqxi
Wmblethg
Wmduvbxbq
Wudpclb
Wxbsssbgd
Xytxs
Xztyukmychg
Yjoln
Yqub
Zaktneuog
Zfvclprvgq
Zqbxkmh
Ztezcwr
Ztrhqvmgie
Zugysugw
Zxbxshaf

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

671dfb93e0ba16566b1656c95492ded8

Headers

File Characteristics

Imports

msvbvm60

user32

advapi32

kernel32

dinput

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 16KB

.rdata Size: 11KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 23KB - Virtual size: 24KB

.text
Size: 13KB - Virtual size: 16KB

.rdata
Size: 11KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 23KB - Virtual size: 24KB