4766dee3ce2db5d151886064c461e5e9

Sharing

Copy URL

Twitter E-mail

General

Target

4766dee3ce2db5d151886064c461e5e9
Size

1.8MB
MD5

4766dee3ce2db5d151886064c461e5e9
SHA1

f74df80ba9288ed1baf241fb64b3eae81ce214d1
SHA256

14d9d4130b400b9cc9587b66714a032b52b3abdd3bfd1c24264045185ea7fb04
SHA512

d4ce4e5b9bf777889583c1ca01193c8f887a57196c8df81895385d6316bbbe75762ae06dc4421b24ba2bdc2677ed6491ea6c898fc48caea97a7db484616d8446
SSDEEP

24576:zgP3NwAUYaerlHKKbshk5Ezq1CJDrwHb/IRTv78vvDu1fK9QSNG:Q1ULeMKYho+q1sKIRTD8vcK99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4766dee3ce2db5d151886064c461e5e9

Files

4766dee3ce2db5d151886064c461e5e9
.dll windows:4 windows x86 arch:x86

e12c7c3e4d1b1b0a4fb65609f3198347

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetActiveWindow
GetCapture
GetClipboardOwner
GetClipboardViewer
GetFocus
GetMessagePos
GetCaretPos
GetCursorPos
GetQueueStatus
GetMessageTime

gdi32

CreateDCA
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
DeleteDC
DeleteObject
GetBitmapBits

advapi32

RegQueryValueExA
GetUserNameA

kernel32

GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
UnhandledExceptionFilter
GetModuleFileNameA
GetCurrentThreadId
GetVersionExA
HeapDestroy
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
VirtualAlloc
VirtualFree
GetSystemInfo
CloseHandle
ReadFile
CreateFileA
GetProcessWorkingSetSize
GetCurrentProcess
GlobalMemoryStatus
GetStartupInfoA
GetCurrentProcessId
QueryPerformanceCounter
GetProcessTimes
GetThreadTimes
GetCurrentThread
Sleep
GetLastError
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
HeapSize
GetFullPathNameA
GetCurrentDirectoryA
MultiByteToWideChar
RtlUnwind
WideCharToMultiByte
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
SetFilePointer
InitializeCriticalSection
LoadLibraryA
LCMapStringA
LCMapStringW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStringTypeA

Exports

Exports

R_FIPS140_MODULE_get_supported_interfaces
R_FIPS140_MODULE_set_failure_reason_cb
R_FIPS140_MODULE_set_test_details_cb

Sections

.text
Size: 640KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 948KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 88KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA1
Size: 4KB - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12c7c3e4d1b1b0a4fb65609f3198347

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 640KB - Virtual size: 636KB

.rdata Size: 948KB - Virtual size: 947KB

.data Size: 88KB - Virtual size: 97KB

_RDATA Size: 4KB - Virtual size: 96B

_DATA1 Size: 4KB - Virtual size: 45B

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 52KB - Virtual size: 48KB

.text
Size: 640KB - Virtual size: 636KB

.rdata
Size: 948KB - Virtual size: 947KB

.data
Size: 88KB - Virtual size: 97KB

_RDATA
Size: 4KB - Virtual size: 96B

_DATA1
Size: 4KB - Virtual size: 45B

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 52KB - Virtual size: 48KB