2027915fde9ed04d2a0505ec6823d680

Sharing

Copy URL

Twitter E-mail

General

Target

2027915fde9ed04d2a0505ec6823d680
Size

350KB
MD5

2027915fde9ed04d2a0505ec6823d680
SHA1

6005fdf97aa4f15c6a0212e9f1dc946d85f19dc2
SHA256

54d8846836514d06a1eedfbf4e1eb0ca8b6798902b810f750504ccdbe1f5d077
SHA512

0f43c14ba93cf1057d37e490a2dece27f44b61dc874285c0631dc2a7408cea4ad1f9211e7954ee83b3734aa52676126f784aa7c58411199b88feab28e9550b6c
SSDEEP

6144:kMVJl0JxlQ0N8Pdh+pjpD+SUpqAokwgLIPGJjbEzZ1w0fO1MTJDmkj4:1MQs8PdhYpD2Ukw8a6bu1bfOKtDBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2027915fde9ed04d2a0505ec6823d680

Files

2027915fde9ed04d2a0505ec6823d680
.dll windows:4 windows x86 arch:x86

14ae145e3994a5f498ca81f275541771

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shlwapi

StrStrW
StrRetToBufW
PathAddBackslashW
PathAppendW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathIsDirectoryW
PathMatchSpecW
PathParseIconLocationW
PathRemoveExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
SHStrDupW
StrCSpnW
StrCmpNIW
StrCmpW

gdi32

StretchBlt
SetTextColor
SetStretchBltMode
SetBrushOrgEx
SetBkMode
BitBlt
CreateCompatibleDC
CreateDIBSection
CreateHalftonePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectW
GetStockObject
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor

advapi32

UnregisterTraceGuids
TraceEvent
RegisterTraceGuidsW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
InitializeAcl
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags

ntdll

RtlUnwind
_CIlog
wcstoul
wcsstr
wcsrchr
towupper
qsort
memset
memmove
memcpy
iswspace
ceil
bsearch
_wcsicmp
_vsnwprintf
_vsnprintf

shell32

SHBindToParent
SHBrowseForFolderW
DragQueryFileW
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteExW
CommandLineToArgvW
SHChangeNotify

winmm

PlaySoundW

oleaut32

SysAllocString
VariantTimeToSystemTime
VariantInit
VariantClear
VarUI4FromStr
VarBstrCmp
UnRegisterTypeLi
SysStringLen
SysFreeString
BSTR_UserFree
RegisterTypeLi
LoadTypeLi
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal

ole32

CLSIDFromString
CoAllowSetForegroundWindow
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitialize
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateBindCtx
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HICON_UserFree
HICON_UserSize
HICON_UserUnmarshal
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
PropVariantClear
PropVariantCopy
ReleaseStgMedium
StringFromGUID2
HICON_UserMarshal

msvcrt

malloc
free
calloc
_unlock
_onexit
_lock
realloc
_errno
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIexp
_initterm

user32

GetSystemMenu
GetWindow
GetSystemMetrics
UnregisterDeviceNotification
UnregisterClassA
UnhookWinEvent
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextW
SetWindowPos
SetWindowLongW
SetWinEventHook
SetPropW
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetCursor
SendMessageW
SendDlgItemMessageW
GetSysColorBrush
RemovePropW
ReleaseDC
RegisterWindowMessageW
RegisterDeviceNotificationW
PostThreadMessageW
PostMessageW
PeekMessageW
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
MonitorFromRect
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadCursorW
IsWindowVisible
IsWindowEnabled
IsWindow
IsDlgButtonChecked
InvalidateRect
IntersectRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
AllowSetForegroundWindow
BeginDeferWindowPos
CharNextW
CharUpperBuffW
CharUpperW
CopyImage
CreateDialogParamW
CreatePopupMenu
CreateWindowExW
DeferWindowPos
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EnumWindows
FillRect
GetClassNameW
GetClientRect
GetCursor
GetDC
GetDesktopWindow
GetDlgItem
GetLastActivePopup
GetMessageW
GetMonitorInfoW
GetParent
GetPropW
GetSysColor
GetWindowLongW

rpcrt4

CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
NdrOleFree
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef

setupapi

SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInterfaceW

kernel32

FindResourceW
FindResourceExW
FindNextFileW
FindClose
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateMutexW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CopyFileExW
CompareStringW
CompareFileTime
CloseHandle
lstrlenW
lstrcmpiW
WriteFile
WaitForMultipleObjects
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateProcess
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OutputDebugStringA
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GetVolumeInformationW
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetEnvironmentVariableW
GetDriveTypeW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibraryAndExitThread
FreeLibrary
FormatMessageW
FlushInstructionCache

Exports

Exports

AsEncodedString
AsFileDescriptor
GetDesc
Number_Float
Resize
StopIteration
Warn
get_image_width
vGetFile

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14ae145e3994a5f498ca81f275541771

Headers

File Characteristics

Imports

version

shlwapi

gdi32

advapi32

ntdll

shell32

winmm

oleaut32

ole32

msvcrt

user32

rpcrt4

setupapi

kernel32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 218KB - Virtual size: 217KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 218KB - Virtual size: 217KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 4KB