30475525842e7c7dacbe1f8dda6fb0c9

Sharing

Copy URL Twitter E-mail

General

Target

30475525842e7c7dacbe1f8dda6fb0c9
Size

326KB
MD5

30475525842e7c7dacbe1f8dda6fb0c9
SHA1

a899235a7e52fb43be0a23f2b94b5c6bd93d09fe
SHA256

475072101945c0fc131561b64e5b78e2c07bc299a0691c5150f2a499e1fbd96b
SHA512

536f84e7a0117ab33cab990e621ff3854b94245b517effe197b5006fcbc5c29d9dee805bf89616d0cdcf57d96da283d677d568e126397e89acb422fb0ce8e108
SSDEEP

6144:TqnMSoCLzDyiPnj/xMPYgSCR2QgTAn0j2H2efyxirotDsYWwP89C0:TjgPDrfMqgYW48Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30475525842e7c7dacbe1f8dda6fb0c9

Files

30475525842e7c7dacbe1f8dda6fb0c9
.dll windows:4 windows x86 arch:x86

677f17fe22f4e060a0049b9bc8e45f56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetBkMode
SetGraphicsMode
SetTextColor
ModifyWorldTransform
SelectObject
GetStockObject
GetObjectA
SaveDC
RestoreDC
SetWindowOrgEx
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
SetViewportOrgEx

shell32

ShellExecuteA

ddraw

DirectDrawCreateEx
DDGetAttachedSurfaceLcl

oleaut32

SysFreeString
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
SysAllocString
SysAllocStringLen
SysStringByteLen
SysStringLen
VarUI4FromStr
VariantClear
VariantInit

comctl32

ord17

user32

RedrawWindow
PtInRect
MessageBoxA
MapDialogRect
LoadStringA
LoadCursorA
IsWindow
IsChild
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindow
GetSysColor
GetParent
GetFocus
GetDlgItem
RegisterClassExA
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassInfoExA
GetActiveWindow
FillRect
EndPaint
EndDialog
EnableWindow
DialogBoxIndirectParamA
DestroyWindow
DestroyAcceleratorTable
DefWindowProcA
CreateWindowExA
CreateAcceleratorTableA
CharNextA
CallWindowProcA
BeginPaint
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetFocus
SetWindowContextHelpId
SetWindowLongA
SetWindowPos
SetWindowTextA
UnregisterClassA
GetDlgCtrlID
wsprintfA
RegisterWindowMessageA

advapi32

RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA

kernel32

QueryPerformanceCounter
MultiByteToWideChar
RaiseException
SetLastError
MulDiv
LockResource
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
SizeofResource
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
GlobalAlloc
GetVersionExA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
IsProcessorFeaturePresent

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2

Exports

Exports

FrameCalculateBoundingSphere
GetImageInfoFromFileW
GetLoadInfoCallbackData
GetShaderOutputSemantics
LoadCustomFile
MatrixAffineTransformation2D
MatrixLookAtRH
QuaternionSlerp
SetWMFResolution
mpegInCloseSecondary
mpegInOpen
mpegInUpdateFiles
mpegSplitOpenFileTSStream
mpegSplitSeekSample

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

677f17fe22f4e060a0049b9bc8e45f56

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

shell32

ddraw

oleaut32

comctl32

user32

advapi32

kernel32

ole32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 148KB - Virtual size: 148KB

.data Size: 30KB - Virtual size: 31KB

.rsrc Size: 85KB - Virtual size: 85KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 148KB - Virtual size: 148KB

.data
Size: 30KB - Virtual size: 31KB

.rsrc
Size: 85KB - Virtual size: 85KB

.reloc
Size: 3KB - Virtual size: 2KB