32039213b28bd8421213f7001e067797

Sharing

Copy URL

Twitter E-mail

General

Target

32039213b28bd8421213f7001e067797
Size

445KB
MD5

32039213b28bd8421213f7001e067797
SHA1

e05269278b546b2fd6c37bc948bb3af27c0dcf9e
SHA256

43c5c0bc170d8a7136ece6818b985c95b56ad8c02439e09acac2a7d7c0618582
SHA512

7aa3ba4d28a43e3382d71f86ecde5f2dedd91f96fa5ac88b3fe6871a709946d14da432b906667668242de030e45932062b11da73342e459f1aea6c4ebd6c798c
SSDEEP

12288:7r3pbVj+kvqRXvnjLq0w2qZp5WRthP14LSK:7r3povRXvny0iL5WbhP13

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32039213b28bd8421213f7001e067797

Files

32039213b28bd8421213f7001e067797
.dll windows:4 windows x86 arch:x86

823db647e23248a90fc3c3a352bacada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetBkColor
CreateSolidBrush

shlwapi

PathCompactPathExW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

LookupPrivilegeValueW
StartServiceW
SetTokenInformation
SetSecurityDescriptorSacl
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
CloseServiceHandle
ControlService
CreateProcessAsUserW
DuplicateTokenEx
FreeSid
GetUserNameW
InitializeSecurityDescriptor
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW

wininet

HttpAddRequestHeadersA
HttpOpenRequestW
HttpQueryInfoW
HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
InternetQueryOptionW
InternetReadFile
InternetSetOptionW
InternetSetStatusCallbackW

kernel32

WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitNamedPipeW
WaitForSingleObject
WaitForMultipleObjects
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateThread
TerminateProcess
SystemTimeToFileTime
SetUnhandledExceptionFilter
AllocConsole
CancelIo
CloseHandle
CompareStringA
CompareStringW
CopyFileW
CreateEventA
CreateEventW
CreateFileA
CreateMutexW
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExW
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenEventA
OpenMutexW
OpenProcess
OutputDebugStringW
Process32FirstW
Process32NextW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
RtlUnwind
SearchPathW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle

rpcrt4

UuidCreate
UuidFromStringW
UuidToStringW
RpcStringFreeW

user32

SetActiveWindow
SendMessageW
PostMessageW
SetTimer
SetDlgItemTextW
SetWindowPos
SetWindowTextW
ShowWindow
wsprintfW
SetForegroundWindow
BringWindowToTop
CopyRect
CreateDialogParamW
CreateWindowExW
DestroyWindow
DialogBoxParamW
EnableWindow
EndDialog
ExitWindowsEx
OffsetRect
GetDesktopWindow
GetDlgItem
GetDlgItemTextW
GetParent
GetSystemMetrics
GetWindowRect
IsWindow
KillTimer
LoadImageW
LoadStringW
MessageBoxW
GetClientRect

shell32

SHGetFolderPathW
ShellExecuteExW
ShellExecuteW
CommandLineToArgvW
SHCreateDirectoryExW

ole32

CoUninitialize
CoInitializeEx

Exports

Exports

FromObject
FromString
ReadObjectFromFile
SimpleParseFile
State_Delete
StringFlags
String_Fini

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

823db647e23248a90fc3c3a352bacada

Headers

File Characteristics

Imports

gdi32

shlwapi

version

advapi32

wininet

kernel32

rpcrt4

user32

shell32

ole32

Exports

Exports

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 261KB - Virtual size: 260KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 261KB - Virtual size: 260KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 5KB - Virtual size: 5KB