2f2d068f023e84c5a46af43d331cddf5

Sharing

Copy URL Twitter E-mail

General

Target

2f2d068f023e84c5a46af43d331cddf5
Size

647KB
MD5

2f2d068f023e84c5a46af43d331cddf5
SHA1

efa28393849e699c6c83e7e291700afce60b962c
SHA256

a0d7574545b29243452ad4b0a3b8bcbb479d60674ce74494400669798efbbd98
SHA512

1112513b48578996fd869a43d0ea4d9ad28eeb5554ccbc5d7f8261c5e91657a4430545b144d70c9db7f7d852119355dd36a77678b46884d171255d0852fbc8f3
SSDEEP

12288:fC5kA/E9SHpnab3Lr8KxwMiQuDZ7oX9bHS+U+6TD6O0:fCEQEf8K7iIy+U+66v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f2d068f023e84c5a46af43d331cddf5

Files

2f2d068f023e84c5a46af43d331cddf5
.dll windows:5 windows x86 arch:x86

5f4319984a6fbfee4e387eba876862c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_GetIcon
ImageList_GetImageCount
ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

RaiseException
HeapFree
GetCommandLineA
GetLocalTime
HeapAlloc
VirtualAlloc
HeapReAlloc
Sleep
ExitProcess
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapCreate
GetSystemTimeAsFileTime
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
GetProcessHeap
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
ReadFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
GetModuleHandleW
GlobalFlags
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
FormatMessageA
LocalFree
GlobalFree
FreeResource
CreateFileA
WriteFile
CloseHandle
GetWindowsDirectoryA
LoadLibraryExA
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteFileA
MultiByteToWideChar
IsBadStringPtrA
IsBadReadPtr
lstrcmpiA
MulDiv
GetVersionExA
CopyFileA
GetLastError
SetLastError
GetModuleHandleA
OutputDebugStringA
FreeLibrary
SetEnvironmentVariableW
LoadLibraryA
GetProcAddress
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
HeapDestroy

user32

SetMenu
GetScrollRange
SetForegroundWindow
PostMessageA
MessageBoxA
CreateWindowExA
RegisterClassA
GetScrollInfo
SetWindowPlacement
GetDlgCtrlID
GetMenu
SetWindowPos
IsIconic
GetWindowPlacement
GetWindowTextLengthA
GetScrollPos
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
SetPropA
GetPropA
RemovePropA
CallWindowProcA
IsZoomed
FillRect
CreateIconIndirect
GetIconInfo
DestroyIcon
DestroyCursor
CopyIcon
SystemParametersInfoA
LoadImageA
IsCharAlphaA
IsCharAlphaNumericA
LoadMenuA
GetSubMenu
SetFocus
GetFocus
SetParent
GetMessageA
IsMenu
AdjustWindowRectEx
IsWindowVisible
GetWindowRgn
SetWindowLongA
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
GetSysColor
GetClassInfoA
DefWindowProcA
GetWindowTextA
GetWindowRect
GetMenuItemCount
GetMenuItemID
GetMenuState
ClientToScreen
GetParent
ChildWindowFromPoint
IsWindowEnabled
GetSystemMetrics
GetWindowLongA
IsWindow
GetCursorPos
LoadCursorA
SetCursor
GetClassNameA
WindowFromPoint
ReleaseDC
GetDC
ScreenToClient
SetWindowRgn
EqualRect
CopyRect
OffsetRect
SetRectEmpty
SetRect
PtInRect
IsRectEmpty
LoadAcceleratorsA
ValidateRect
PostQuitMessage
DestroyAcceleratorTable
TranslateAcceleratorA
GetDlgItem
LoadIconA
KillTimer
SetTimer
RedrawWindow
InvalidateRect
UpdateWindow
EndPaint
BeginPaint
MapWindowPoints
GetClientRect
PeekMessageA
TranslateMessage
DispatchMessageA
SendMessageA
EnableWindow
GetSysColorBrush
UnregisterClassA
DestroyMenu
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetForegroundWindow
GetLastActivePopup
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
TrackPopupMenu
GetTopWindow
GetKeyState
GetClassInfoExA

gdi32

SetTextColor
SetBkMode
GetTextMetricsA
CreateFontIndirectA
GetDeviceCaps
GetTextExtentPoint32A
SetTextJustification
LineTo
MoveToEx
CreatePen
TextOutA
GetObjectA
StretchBlt
CreateBitmap
CreateDIBSection
CreateRectRgnIndirect
GetClipBox
SaveDC
RestoreDC
SetMapMode
SetRectRgn
SetBkColor
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
DPtoLP
OffsetRgn
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CombineRgn
BitBlt
CreateSolidBrush
FillRgn
SelectClipRgn
FrameRgn
Polyline
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
StretchDIBits
DeleteDC
DeleteObject

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegQueryValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegCloseKey

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFolderPathA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathAppendA

ole32

OleInitialize
CoTaskMemFree
OleUninitialize
CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

VariantInit
VariantChangeType
VariantClear

urlmon

URLDownloadToCacheFileA

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

Exports

Exports

PluginMain

Sections

.text
Size: 434KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f4319984a6fbfee4e387eba876862c7

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

urlmon

wininet

Exports

Exports

Sections

.text Size: 434KB - Virtual size: 433KB

.rdata Size: 86KB - Virtual size: 85KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 68KB - Virtual size: 67KB

.reloc Size: 45KB - Virtual size: 45KB

.text
Size: 434KB - Virtual size: 433KB

.rdata
Size: 86KB - Virtual size: 85KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 45KB - Virtual size: 45KB