34dc39d9d151fc7414299d52d509a103

Sharing

Copy URL Twitter E-mail

General

Target

34dc39d9d151fc7414299d52d509a103
Size

166KB
MD5

34dc39d9d151fc7414299d52d509a103
SHA1

85496994ea765f6ab0a6f350979ddef5d4786a08
SHA256

35d17c99b187c6f094b3e99255e15d2f00d0653ba676265203c4d9122316a664
SHA512

c7c73df9a7f8289a3574d1a51211a3b6061cd32890653dec7ab3571c3431e39e7fb5454ced4a42a262996d098a61ad4afc3eeca1ff98505e991d448b4e1b926c
SSDEEP

3072:bRccpvUG4OmCnxYWI5SEsjCkoxNSzQF9e0r1216oLYLlLR62q:WYU7cJcZZNIo321jLYLlLS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34dc39d9d151fc7414299d52d509a103

Files

34dc39d9d151fc7414299d52d509a103
.dll windows:4 windows x86 arch:x86

4a8471176721c0667754c7ab16216f74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
memmove
memcmp
strcmp
free
malloc
strlen
_strnicmp
rename
_mbsrchr
sprintf
strncpy
_except_handler3
_vsnprintf
time
srand
rand
memchr
memset
memcpy
strrchr
strcpy
strcat
__CxxFrameHandler

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

kernel32

CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenMutexA
GlobalMemoryStatus
QueryPerformanceFrequency
QueryPerformanceCounter
lstrlenA
CreateMutexA
ReleaseMutex
VirtualAlloc
CreateProcessA
CreateDirectoryA
ExitProcess
lstrcmpiA
IsBadStringPtrA
GetFileAttributesA
GetModuleFileNameA
IsBadReadPtr
GetProcAddress
WriteProcessMemory
GetCurrentProcess
VirtualProtect
VirtualQuery
GetSystemInfo
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetModuleHandleA
GetVersion
GetCommandLineA
VirtualFree
CloseHandle
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadCodePtr
WaitForSingleObject
CreateThread
DuplicateHandle
GetCurrentThreadId
SetErrorMode
LoadLibraryA
FreeLibrary
TlsAlloc
ReadFile
SetFilePointer
CreateFileA
TlsSetValue
TlsGetValue
Sleep
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
IsBadWritePtr
DeleteFileA
SetEndOfFile
GetFileSize
GetTempFileNameA
GetVersionExA
GetThreadContext
GetLastError
TlsFree
GetTickCount
MoveFileA
GetLongPathNameA
OpenProcess
WideCharToMultiByte
InterlockedExchange
TerminateThread
ReleaseSemaphore
TerminateProcess
CreateSemaphoreA
WriteFile
FindClose
FindFirstFileA
FindNextFileA
CopyFileA
ExpandEnvironmentStringsA

user32

LoadStringA
EnumWindows
GetWindowLongA
GetWindowThreadProcessId
CallWindowProcW
GetForegroundWindow
IsWindowUnicode
SetWindowLongW
IsWindow
SetWindowLongA
GetSystemMenu
AppendMenuA
wsprintfA
CallWindowProcA
KillTimer
SetTimer
UnhookWindowsHookEx
GetMenuItemInfoA
GetClassNameA
CallNextHookEx
SetWindowsHookExA
GetWindowTextA
wvsprintfA
EnumChildWindows
IsWindowVisible

advapi32

AdjustTokenPrivileges
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
LookupPrivilegeValueA
OpenThreadToken
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
GetUserNameA

Exports

Exports

FCAddDataToKey
FCAddDateToKey
FCAddIntToKey
FCAddStringToKey
FCAssert
FCAssertInternal1
FCAssertParam
FCAssertParamInternal1
FCCleanup
FCClearCounters
FCClearKey
FCClearKeys
FCCreateCounter
FCCreateKey
FCCreatePersistentCounter
FCCreatePersistentKey
FCCreateSupportIncidentInternal
FCDecrementCounter
FCDeleteDataFromKey
FCDeleteDateFromKey
FCDeleteIntFromKey
FCDeleteKey
FCDeleteStringFromKey
FCEndTimer
FCExceptionHandler
FCFlushNonSharedPersistentKeys
FCGetCounter
FCGetSessionUniqueID
FCHeartbeatTimer
FCIncrementCounter
FCInitialize
FCInitializeInternal
FCInitializeWithManifestInternal
FCInitializeWithManifestInternalEx
FCLibraryVersion
FCRegisterMemory
FCRunMemTest
FCSetCounter
FCSetKeyOptions
FCSetLocale
FCSetMiniDump
FCSetUIState
FCStartTimer
FCTrace
FCTraceInternal
FCTraceParam
FCTraceParamInternal
FCTrigger
FCTriggerInternal
FCTriggerInternal1
FCUnregisterMemory

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 63KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a8471176721c0667754c7ab16216f74

Headers

File Characteristics

Imports

msvcrt

rpcrt4

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 63KB - Virtual size: 64KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 63KB - Virtual size: 64KB