19e9563ed50117a1d9aaf35e7444c7aa

Sharing

Copy URL

Twitter E-mail

General

Target

19e9563ed50117a1d9aaf35e7444c7aa
Size

190KB
MD5

19e9563ed50117a1d9aaf35e7444c7aa
SHA1

5c189c583c4e16931c10911f1d007678b0a92156
SHA256

617a61a431cc319c8fc24243fbba2a6a51c460ec53c6963c9ff1985d73bdb437
SHA512

7e66e3dbfae44e46979f6025a837995a774d5bc903e65cbb467aaabd605b2e9b5ef392516d6a5cf81222b39a7ca646a965ad1673d0c62d02c5107a08d2c66f72
SSDEEP

3072:hExG7ypdHRiE6NH1CyM5vOBTDsymJ/7x/u5ENGX/5ooMqqDLy/aFP:hEsephRiE0Exo1KJ/1o/yqqDLu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e9563ed50117a1d9aaf35e7444c7aa

Files

19e9563ed50117a1d9aaf35e7444c7aa
.dll windows:4 windows x86 arch:x86

44aafa8853b73e1c60a74e49aed37673

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapFree
GetEnvironmentStringsW
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
ExitProcess
GetVersion
RtlUnwind
WriteFile
IsBadReadPtr
IsBadWritePtr
RemoveDirectoryW
IsBadCodePtr
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
_lclose
_lread
OpenFile
WideCharToMultiByte
_llseek
_lopen
GetModuleFileNameW
DeleteFileW
GetComputerNameW
InterlockedExchange
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
GetCurrentThread
SetFileAttributesW
WritePrivateProfileStringW
GetDriveTypeW
GetVolumePathNameW
GetFileAttributesW
CreateFileW
LoadLibraryW
lstrlenW
CompareFileTime
GetModuleHandleW
GetStringTypeW
SystemTimeToFileTime
GetLocalTime
CopyFileW
lstrcpyW
lstrcmpW
CompareStringA
GetProcAddress
GetModuleHandleA
Sleep
GetTickCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcpyA
lstrlenA
lstrcmpA
lstrcpynA
LocalAlloc
LocalFree
GetVersionExA
GetCommandLineA
VirtualFree
VirtualProtect

user32

EndDialog
SetWindowLongW
SetFocus
DialogBoxParamW
MessageBoxW
SendMessageW
SetWindowTextW
PostMessageW
LoadStringW
GetActiveWindow
PostMessageA
PostThreadMessageA
RedrawWindow
ChangeDisplaySettingsA
ChangeDisplaySettingsExA
SetCursorPos
GetSystemMetrics
GetParent
GetWindowLongA
SetKeyboardState
GetKeyboardState
PtInRect
wsprintfA
SetTimer
SetWindowLongA
CreateWindowExA
DestroyWindow
KillTimer
DefWindowProcA
DestroyIcon
SystemParametersInfoA
GetPropA
SetWindowTextA
GetWindowTextW
ReleaseDC
GetDC
SendDlgItemMessageA
DrawTextA
SendMessageA
DrawIconEx
InflateRect
GetSysColor
SetCursor
LoadCursorA
GetFocus
GetDlgItem
EnumWindows
IsWindowVisible
CheckDlgButton
SetDlgItemTextA
InsertMenuItemA
EnableMenuItem
GetSystemMenu
UpdateWindow
InvalidateRect
CopyImage
GetClassLongA
SendMessageTimeoutA
GetWindowTextA
SetRectEmpty
SetWindowPos
SetForegroundWindow
IsIconic
ShowWindow
IsDlgButtonChecked
RegisterClassExA
GetMenuItemInfoA
LoadMenuA
EnableWindow
SendDlgItemMessageW
LoadCursorW
FindWindowW
GetWindowLongW
LoadStringA
GetDoubleClickTime
ReleaseCapture
SetCapture
MapWindowPoints
DrawFrameControl
OffsetRect
SetScrollInfo
ScreenToClient
ClientToScreen
ScrollWindowEx
SetScrollPos
BeginPaint
EndPaint
AdjustWindowRectEx
GetSubMenu
ModifyMenuA
GetMenuItemCount
DeleteMenu
GetClientRect
InvalidateRgn
ShowOwnedPopups
GetWindowRgn
GetWindowRect
IsWindowEnabled
GetLastActivePopup
IsWindow
GetForegroundWindow
CreateCursor
GetCursorPos
WindowFromPoint
GetCursor
DestroyCursor
CreateDialogParamA
CheckMenuItem
GetDesktopWindow

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
CryptSignHashW
RegDeleteValueW
CryptSetKeyParam
CryptCreateHash
CryptHashData
CryptDestroyHash
RegSetValueExW
CryptGetProvParam
CryptGetUserKey
CryptDestroyKey
CryptAcquireContextW
ImpersonateSelf
RegOpenKeyExW
RegQueryValueExW
CryptReleaseContext
OpenThreadToken
RegOpenKeyA

gdi32

CreateSolidBrush
CreateDIBSection
RealizePalette
SelectPalette
CreateCompatibleBitmap
OffsetRgn
SetRectRgn
CombineRgn
CreateRectRgn
GetRgnBox
GetRegionData
CreatePalette
CreateBitmap
SetDIBColorTable
FillRgn
SetBrushOrgEx
SelectClipRgn
SetBkMode
CreatePatternBrush
SetDIBits
CreateBrushIndirect
SetBitmapBits
CreatePen
SetROP2
SetArcDirection
Rectangle
Ellipse
Arc
PolyBezier
RoundRect
LineTo
MoveToEx
ExtTextOutA
TextOutA
GetCharWidthA
GetCharABCWidthsA
CreateFontA
GetStockObject
SetBkColor
SetTextColor
CreateCompatibleDC
BitBlt
DeleteDC
SelectObject
DeleteObject
CreateHatchBrush
StretchDIBits
GetTextMetricsA
GetObjectW
CreateDIBitmap
GetDeviceCaps
GetDIBits

rpcrt4

RpcBindingFromStringBindingW
RpcStringFreeW
RpcBindingFree
NdrClientCall2
RpcBindingSetAuthInfoW
RpcStringBindingComposeW

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44aafa8853b73e1c60a74e49aed37673

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

rpcrt4

Sections

.text Size: 150KB - Virtual size: 149KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 24KB - Virtual size: 67KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 150KB - Virtual size: 149KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 24KB - Virtual size: 67KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB