362efdb462f7563b069081e0de821389

Sharing

Copy URL Twitter E-mail

General

Target

362efdb462f7563b069081e0de821389
Size

696KB
MD5

362efdb462f7563b069081e0de821389
SHA1

3d2f676e15b6d677c2e77edd2b5d4aae009423de
SHA256

36cce483a655202788e541b658a2c9afe18d4b1868199231874dd1c10fb8962c
SHA512

4afa497167ff9b93001d04052f4757e0376c6fd088a1d531691132ca53581bf0f0cb4047b942abafafb3c06e110eee9e02f4ffb50d28795ff7d3bd2e8fbe0362
SSDEEP

12288:MEwgKnIhABTW0HcD5a1PKxdZhC+k+V9Hgeb/tf/B9P632vHAA:MEwXnOAx5HcDM1Sxd3ChCHg2/P9yGo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
362efdb462f7563b069081e0de821389

Files

362efdb462f7563b069081e0de821389
.dll windows:5 windows x64 arch:x64

2c7ac544fcd6ecab988338d331a4a875

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcrt

ldiv

gdi32

SetWindowExtEx
CreateDiscardableBitmap
DeleteColorSpace
GetRegionData
CreateMetaFileW
CopyEnhMetaFileW

oleaut32

VarDateFromCy
VarR8FromDec

rpcrt4

RpcBindingSetAuthInfoExA
UuidIsNil
NdrUserMarshalUnmarshall

ole32

HICON_UserMarshal

netapi32

NetShareGetInfo

wininet

GetUrlCacheEntryInfoW

mscms

AssociateColorProfileWithDeviceW

wintrust

CryptCATPutAttrInfo

kernel32

GetLastError
GetNLSVersion
FindActCtxSectionStringW
EnumTimeFormatsA
UnregisterWaitEx
CloseHandle
SetEvent

shlwapi

StrTrimW
UrlUnescapeA

mprapi

MprAdminInterfaceTransportAdd

setupapi

SetupDiSetSelectedDriverA
SetupLogErrorA

Exports

Exports

AddGadgetMessageHandler
AttachWndProcA
AttachWndProcW
AutoTrace
BuildAnimation
BuildDropTarget
BuildInterpolation
CreateAction
CreateGadget
DUserBuildGadget
DUserCastClass
DUserCastDirect
DUserCastHandle
DUserDeleteGadget
DUserFindClass
DUserFlushDeferredMessages
DUserFlushMessages
DUserGetAlphaPRID
DUserGetGutsData
DUserGetRectPRID
DUserGetRotatePRID
DUserGetScalePRID
DUserInstanceOf
DUserPostEvent
DUserPostMethod
DUserRegisterGuts
DUserRegisterStub
DUserRegisterSuper
DUserSendEvent
DUserSendMethod
DUserStopAnimation
DeleteHandle
DetachWndProc
DisableContainerHwnd
DllMain
DrawGadgetTree
EnumGadgets
FindGadgetFromPoint
FindGadgetMessages
FindStdColor
FireGadgetMessages
ForwardGadgetMessage
GetActionTimeslice
GetDUserModule
GetDebug
GetGadget
GetGadgetAnimation
GetGadgetBufferInfo
GetGadgetCenterPoint
GetGadgetFocus
GetGadgetMessageFilter
GetGadgetProperty
GetGadgetRect
GetGadgetRgn
GetGadgetRootInfo
GetGadgetRotation
GetGadgetScale
GetGadgetSize
GetGadgetStyle
GetGadgetTicket
GetMessageExA
GetMessageExW
GetStdColorBrushF
GetStdColorBrushI
GetStdColorF
GetStdColorI
GetStdColorName
GetStdColorPenF
GetStdColorPenI
GetStdPalette
InitGadgetComponent
InitGadgets
InvalidateGadget
IsGadgetParentChainStyle
IsInsideContext
IsStartDelete
LookupGadgetTicket
MapGadgetPoints
PeekMessageExA
PeekMessageExW
RegisterGadgetMessage
RegisterGadgetMessageString
RegisterGadgetProperty
RemoveGadgetMessageHandler
RemoveGadgetProperty
SetActionTimeslice
SetGadgetBufferInfo
SetGadgetCenterPoint
SetGadgetFillF
SetGadgetFillI
SetGadgetFocus
SetGadgetFocusEx
SetGadgetMessageFilter
SetGadgetOrder
SetGadgetParent
SetGadgetProperty
SetGadgetRect
SetGadgetRootInfo
SetGadgetRotation
SetGadgetScale
SetGadgetStyle
UnregisterGadgetMessage
UnregisterGadgetMessageString
UnregisterGadgetProperty
UtilBuildFont
UtilDrawBlendRect
UtilDrawOutlineRect
UtilGetColor
UtilSetBackground
WaitMessageEx

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 524KB - Virtual size: 521KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c7ac544fcd6ecab988338d331a4a875

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

gdi32

oleaut32

rpcrt4

ole32

netapi32

wininet

mscms

wintrust

kernel32

shlwapi

mprapi

setupapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 524KB - Virtual size: 521KB

.data Size: 96KB - Virtual size: 95KB

.pdata Size: 4KB - Virtual size: 324B

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 8KB - Virtual size: 6KB

Size: 4KB - Virtual size: 503B

Size: 4KB - Virtual size: 503B

Size: 4KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 524KB - Virtual size: 521KB

.data
Size: 96KB - Virtual size: 95KB

.pdata
Size: 4KB - Virtual size: 324B

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 8KB - Virtual size: 6KB