2f440cf01c2c133c33640b6e2d1887a3

Sharing

Copy URL Twitter E-mail

General

Target

2f440cf01c2c133c33640b6e2d1887a3
Size

204KB
MD5

2f440cf01c2c133c33640b6e2d1887a3
SHA1

0cff329b89e7574f683f76e964eedd160fa4d9b0
SHA256

d3a745e7e1664903766be7510bcc15c4f64624e7a7438c53dc3b126c95f577b6
SHA512

41a199127038ec5e5737a2ce28bf0ddb548225224091e1e653a494abc705f3364df3054f6e3cb9a1ed973cc0902c92b4018d60a311fb96c02614cd6ac4bc262d
SSDEEP

3072:p7bbtLUnif6XhtQ2kVmXdM940gtAzvuXGjf+XDpVbUwJoaOiIIOJIeESeHpKNz:tbbxU66njkIN4gezv4++XzwIuT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f440cf01c2c133c33640b6e2d1887a3

Files

2f440cf01c2c133c33640b6e2d1887a3
.dll regsvr32 windows:4 windows x86 arch:x86

b34e38dcf6c28a762f8527fceeb964d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHDeleteKeyA

setupapi

SetupIterateCabinetA

wintrust

WinVerifyTrust

wininet

InternetOpenA
InternetSetCookieA
InternetGetCookieA
HttpSendRequestA
HttpOpenRequestA
InternetCanonicalizeUrlA
InternetSetOptionA
InternetErrorDlg
HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetQueryOptionA
InternetCloseHandle
InternetConnectA

kernel32

SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
MultiByteToWideChar
GetLastError
WideCharToMultiByte
lstrlenW
InterlockedIncrement
InterlockedDecrement
GetEnvironmentVariableA
GetModuleFileNameA
lstrlenA
CreateDirectoryA
RemoveDirectoryA
OpenFile
GetCurrentThreadId
lstrcpyA
MulDiv
CloseHandle
CreateThread
TerminateThread
WaitForSingleObject
DeleteFileA
WriteFile
CreateFileA
GetVersionExA
GetExitCodeThread
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreA
GetTickCount
LeaveCriticalSection
GetCPInfo
FreeLibrary
GetProcAddress
LoadLibraryA
CreateMutexA
GetSystemTimeAsFileTime
ReleaseMutex
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetModuleHandleA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FlushFileBuffers
HeapSize
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
ExitProcess
LCMapStringW
LCMapStringA
TlsGetValue
SetLastError
EnterCriticalSection
SetEnvironmentVariableA
SetFilePointer
GetACP
GetOEMCP
SetEndOfFile
ReadFile
CompareStringA
CompareStringW
SetEvent
TlsFree
TlsAlloc
TlsSetValue
GetVersion
GetCommandLineA
HeapReAlloc
HeapAlloc
HeapFree
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind

user32

InvalidateRgn
ReleaseDC
GetDC
GetClientRect
SetWindowPos
SetTimer
KillTimer
GetDesktopWindow
InsertMenuA
GetFocus
IsChild
GetClassInfoA
LoadCursorA
RegisterClassA
CreateWindowExA
BeginPaint
EndPaint
GetWindowLongA
UpdateWindow
DefWindowProcA
IsWindow
DestroyWindow
ShowWindow
wsprintfA
MessageBoxA
MapWindowPoints
SetWindowLongA

gdi32

CreateHalftonePalette
DeleteObject
GetDeviceCaps

advapi32

RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegFlushKey
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA

ole32

CoCreateInstance
OleSetContainedObject
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateGuid
StringFromGUID2

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
DispGetParam
SysStringLen
SysAllocString
SysFreeString
VariantInit
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLinkObject

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b34e38dcf6c28a762f8527fceeb964d7

Headers

File Characteristics

Imports

shlwapi

setupapi

wintrust

wininet

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 113KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 28KB - Virtual size: 36KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 116KB - Virtual size: 113KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 28KB - Virtual size: 36KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 12KB - Virtual size: 9KB