29c6062ea8dc25361a9f418f48050abd

Sharing

Copy URL

Twitter E-mail

General

Target

29c6062ea8dc25361a9f418f48050abd
Size

291KB
MD5

29c6062ea8dc25361a9f418f48050abd
SHA1

693177ee95fb6468acd563ed46d300c401aeedd4
SHA256

cb6919c53d3d1605b33d6e3c581b2ed209f316c5cbcb43e6436105b7fe7a00eb
SHA512

c3a8898a695ab94b19e071109cba6013b992be33e9d3ef8bb33a094abbb26c44e5e584b4202062cba2d340c6008e7082f16b8663b6ab10c70609f30a9a66f6c7
SSDEEP

6144:GA1wTB+aXRAiNsZDXdBqEc4gga0NeYhNuOncD6v5xIQrS31:ql+aBANZDXdBm4VakuOcD6hxIR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c6062ea8dc25361a9f418f48050abd

Files

29c6062ea8dc25361a9f418f48050abd
.dll windows:4 windows x86 arch:x86

2b1b6a6c6abe13797b66007cb4f5d8e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
LoadLibraryA
GetCommandLineA
GetModuleHandleA
lstrlenW
ExitThread
GetProcAddress
lstrlenA
IsBadReadPtr
ExitProcess
GetVersionExA
VirtualAlloc
GlobalAlloc

gdi32

GetPaletteEntries
GetObjectA
CreateBitmap
GetBitmapBits
GetCurrentPositionEx
GetPixel
GetDIBits
SelectObject
GetDCOrgEx

comctl32

ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_Remove

user32

GetWindowLongA
RegisterWindowMessageA
MessageBoxA
GetDlgItem
GetMenu
MsgWaitForMultipleObjects
SetWindowsHookExA
EnableWindow
GetLastActivePopup
IsChild
RedrawWindow
DispatchMessageA
EmptyClipboard
CallWindowProcA
GetCapture
IsZoomed
CharNextA
IsDialogMessageW
RegisterClipboardFormatA
IsDialogMessageA
ShowScrollBar
DrawIcon
GetDesktopWindow
DrawIconEx
GetForegroundWindow
OemToCharA
ShowOwnedPopups
DefFrameProcA
InvalidateRect
ClientToScreen
GetCursorPos
GetSysColor
GetSysColorBrush
GetDC
GetTopWindow
SetRect
PeekMessageW
BeginPaint
CloseClipboard
GetSystemMetrics
CreateWindowExA
GetMenuState
GetMenuItemInfoA
ReleaseDC
SetWindowLongA
RemoveMenu
IsWindowEnabled
GetWindowDC
GetWindowThreadProcessId
GetKeyboardState
SetMenu
GetWindowPlacement
ShowWindow
EnableMenuItem
CharLowerBuffA
GetMenuStringA
SetParent
DefWindowProcA
IsWindowUnicode
InsertMenuItemA
RemovePropA
GetCursor
CheckMenuItem
OpenClipboard
WaitMessage
SetClipboardData
CharUpperBuffA
DrawAnimatedRects
GetKeyState
GetScrollPos
GetKeyNameTextA
GetClassInfoA

version

GetFileVersionInfoA
VerQueryValueA

Sections

CODE
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 1KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b1b6a6c6abe13797b66007cb4f5d8e3

Headers

File Characteristics

Imports

kernel32

gdi32

comctl32

user32

version

Sections

CODE Size: 99KB - Virtual size: 98KB

DATA Size: 179KB - Virtual size: 179KB

.rsrc5 Size: 1024B - Virtual size: 686B

.rsrc9 Size: 1KB - Virtual size: 101KB

.rsrc0 Size: 2KB - Virtual size: 1KB

.rsrc4 Size: 3KB - Virtual size: 2KB

.rsrc1 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 988B

.reloc Size: 1024B - Virtual size: 592B

CODE
Size: 99KB - Virtual size: 98KB

DATA
Size: 179KB - Virtual size: 179KB

.rsrc5
Size: 1024B - Virtual size: 686B

.rsrc9
Size: 1KB - Virtual size: 101KB

.rsrc0
Size: 2KB - Virtual size: 1KB

.rsrc4
Size: 3KB - Virtual size: 2KB

.rsrc1
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 988B

.reloc
Size: 1024B - Virtual size: 592B