316e31673458e1abb81d486d91c8c751

Sharing

Copy URL Twitter E-mail

General

Target

316e31673458e1abb81d486d91c8c751
Size

300KB
MD5

316e31673458e1abb81d486d91c8c751
SHA1

063d6781021087bd6af3083033357f709495be1b
SHA256

0a15ba27e64d380830afe0f8ca92b56302e5f679f6fabd1efd07dd3a75f27fa3
SHA512

5abf5db5e8637bd92d135409f093a1de92a72bd9f36fb71ebcd770500f3b467e91f5847a382589cdde7d6c50f26152b30727d5b56131d731676051ec830fc367
SSDEEP

6144:0/PDnGYGGbD7hTO40KhHJ+xxfVTAmzCiH0RXZIBjTnqnxZD:0/LnFHbvdO4rHJ+x5WmzVHC6nqnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
316e31673458e1abb81d486d91c8c751

Files

316e31673458e1abb81d486d91c8c751
.dll windows:4 windows x86 arch:x86

24de9b6b6f3faa49c88c4b770f1b04ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
CreateFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
GetFileAttributesW
GetFileTime
GetTempFileNameW
GetDiskFreeSpaceW
SetErrorMode
GlobalFlags
InterlockedIncrement
UnlockFile
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
ExitProcess
HeapReAlloc
HeapSize
VirtualAlloc
Sleep
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FindClose
InterlockedCompareExchange
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
DeleteFileW
MoveFileW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetProfileIntW
GetModuleHandleA
FreeResource
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
InterlockedDecrement
GetCurrentProcessId
GlobalAddAtomW
GetLastError
SetLastError
CloseHandle
GlobalFree
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
GetProcAddress
GetVersion
GetTickCount
lstrlenW
WideCharToMultiByte
MulDiv
lstrlenA
GetOEMCP
GetACP
GlobalLock
GlobalUnlock
GetModuleFileNameW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
MultiByteToWideChar
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEnvironmentVariableA
SetEndOfFile
SizeofResource
FindResourceW
LoadResource
LockResource

user32

ShowWindow
CharUpperW
IsClipboardFormatAvailable
DestroyMenu
IsRectEmpty
EndDialog
CreateDialogIndirectParamW
GetSysColorBrush
CharLowerW
LoadStringA
UnregisterClassA
DefWindowProcW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
SetMenuItemBitmaps
MoveWindow
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetDialogBaseUnits
SetFocus
MapDialogRect
WindowFromPoint
GetNextDlgTabItem
BeginPaint
PeekMessageW
GetWindowLongW
DrawFocusRect
FrameRect
WindowFromDC
SetRect
CopyRect
SetClassLongW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetRectEmpty
ReleaseDC
InflateRect
GetDC
LoadImageW
InvertRect
FillRect
InvalidateRgn
GetWindowRect
RegisterClipboardFormatW
LoadAcceleratorsW
GetCapture
ReleaseCapture
GetSubMenu
EmptyClipboard
CloseClipboard
GetSystemMetrics
DestroyCaret
GetCursorPos
SetCursor
SetCaretPos
CreateCaret
OpenClipboard
GetFocus
SetCapture
SetActiveWindow
KillTimer
SetTimer
ScreenToClient
ClientToScreen
PostMessageW
LoadMenuW
GetMenuItemID
GetMenuItemCount
TranslateAcceleratorW
GetSysColor
SetWindowTextW
IsDialogMessageW
GetMenuCheckMarkDimensions
EnableScrollBar
GetClassInfoW
LoadCursorW
SendMessageW
PtInRect
GetClassNameW
RegisterClassW
SetWindowLongW
GetWindowDC
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
GetParent
GetKeyState
EnableWindow
ShowCaret
HideCaret
IsWindow
GetUpdateRect
GetClientRect
ValidateRect
UpdateWindow
GetTabbedTextExtentW
InvalidateRect
UnregisterClassW
CallWindowProcW
OffsetRect
GetDlgCtrlID
EndPaint
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollPos
SetForegroundWindow
GetMenu
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
GetScrollInfo
GetDesktopWindow
SetScrollInfo
IsIconic

gdi32

CreateRectRgn
GetObjectW
CombineRgn
InvertRgn
SetPixel
SetPixelV
GetViewportExtEx
GetWindowExtEx
GetDeviceCaps
CreateCompatibleDC
CreatePen
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
CreatePatternBrush
GetBkColor
Ellipse
RoundRect
CreateICW
CreateSolidBrush
Rectangle
DPtoLP
LPtoDP
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateCompatibleBitmap
GetViewportOrgEx
GetWindowOrgEx
BitBlt
CreateBitmap
CreatePalette
GetPaletteEntries
SetPaletteEntries
RealizePalette
Polygon
PatBlt
StretchDIBits
CopyMetaFileW
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetMapMode
ExcludeClipRect
LineTo
MoveToEx
DeleteObject
SelectClipRgn
GetPixel
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SelectPalette
CreateFontW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
ImmSetCompositionFontW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

comdlg32

GetFileTitleW

advapi32

RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
GetFileSecurityW
SetFileSecurityW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW

ole32

OleRun
DoDragDrop
OleSetClipboard
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal

oleaut32

VariantInit
VariantClear
SysFreeString
SysStringLen
SysAllocString
VariantChangeType

comctl32

ord17

Exports

Exports

?SEditFindText@@YAHPB_W0HHAAH1HHH@Z
?SLoadEditLanguage@@YAXPB_W@Z
?SLoadEditLanguages@@YAXXZ
?SSaveEditLanguages@@YAXXZ
PDEDIT_Init

Sections

.text
Size: 220KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.abss
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdat
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 235B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24de9b6b6f3faa49c88c4b770f1b04ee

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shlwapi

imm32

winspool.drv

comdlg32

advapi32

ole32

oleaut32

comctl32

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 524KB

.abss Size: - Virtual size: 556KB

.data Size: 8KB - Virtual size: 8KB

.rdat Size: 8KB - Virtual size: 8KB

.edata Size: 512B - Virtual size: 235B

.idata Size: 10KB - Virtual size: 10KB

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 4KB - Virtual size: 212B

.text
Size: 220KB - Virtual size: 524KB

.abss
Size: - Virtual size: 556KB

.data
Size: 8KB - Virtual size: 8KB

.rdat
Size: 8KB - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 235B

.idata
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 4KB - Virtual size: 212B