45707794029623487fbb8d9c2b55b38d

Sharing

Copy URL Twitter E-mail

General

Target

45707794029623487fbb8d9c2b55b38d
Size

179KB
MD5

45707794029623487fbb8d9c2b55b38d
SHA1

4d326274cc8e16de03479c268461b7bb750c6f51
SHA256

5933a4e65aad814e6cfde8948013fda598a9a9d16cb76630031a5527f0fe03b4
SHA512

c9f60b48d7169bbd3ac598b242cd62f74e0012dd5e9fb21284ee21b28b9690e179ea2405b4e72edf0ebefd3e38e6caa3c97db98aec4092cb8ff12ff536d2233a
SSDEEP

3072:ayIq09eTpZ+1s9mL3INf0qBqOi66Vv4ljRf7Gb155aKMHrRqTZNm6XevU78pkDLc:a6OcZ+1bL3ef0ADi68cGUKrW6XevR+Do

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45707794029623487fbb8d9c2b55b38d

Files

45707794029623487fbb8d9c2b55b38d
.dll windows:4 windows x86 arch:x86

4539433450aba66affa5c3f6d9238e78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
SetFilePointer
CreateFileW
MoveFileW
RemoveDirectoryW
lstrcmpiA
CreateDirectoryW
LocalAlloc
VirtualProtect
VirtualQuery
LocalLock
LocalReAlloc
LocalUnlock
LocalHandle
LocalFree
SetEndOfFile
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileStringW
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
VirtualAlloc
OpenProcess
VirtualFree
WaitForSingleObject
CreateEventW
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentThreadId
GetCurrentProcessId
DeleteFileW
GetLocalTime
GetVersionExW
GetCurrentProcess
GetLastError
SetSystemPowerState
GetTickCount
lstrcatW
GetModuleFileNameW
FindFirstFileW
FindNextFileW
FindClose
SetErrorMode
WritePrivateProfileStringA
WritePrivateProfileStringW
lstrcmpW
MulDiv
GetStringTypeExW
lstrlenA
CompareStringW
CompareStringA
DeleteCriticalSection
SuspendThread
ResumeThread
CreateThread
InitializeCriticalSection
Sleep
CloseHandle
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
lstrcmpiW
GetModuleHandleW
lstrlenW
LoadLibraryW
FreeLibrary
lstrcpynW
GlobalFree
lstrcpynA
GetVersion
DisableThreadLibraryCalls

user32

PtInRect
GetCursorPos
GetKeyState
GetMenuItemID
GetCapture
GetTabbedTextExtentW
ShowWindow
GetSystemMetrics
GetSystemMenu
SetParent
SetWindowTextW
SetMenuItemInfoW
GetMenuItemInfoW
EnableMenuItem
TrackPopupMenuEx
InsertMenuItemW
CreatePopupMenu
MapDialogRect
CheckMenuItem
ExitWindowsEx
WindowFromPoint
SetFocus
SetMenuDefaultItem
IsMenu
DestroyMenu
ClientToScreen
ReleaseCapture
SetCapture
GetWindow
GetMonitorInfoW
MonitorFromRect
IsChild
SetWindowLongA
CreateAcceleratorTableW
CharPrevA
EnumWindows
CreateDialogParamW
SetActiveWindow
GetWindowThreadProcessId
SendMessageA
GetWindowLongA
CallWindowProcA
DestroyCursor
EnableWindow
CallNextHookEx
DeleteMenu
UnhookWindowsHookEx
CharNextW
GetWindowTextW
InvalidateRect
GetSysColor
FillRect
SendDlgItemMessageW
DrawIconEx
DrawTextW
DrawFocusRect
BeginPaint
ScreenToClient
EndPaint
IsDlgButtonChecked
GetDlgCtrlID
SetWindowLongW
LoadImageW
GetPropW
SetPropW
IsWindow
CreateWindowExW
GetDlgItemTextW
SetDlgItemTextW
GetWindowLongW
EndDialog
DestroyWindow
RemovePropW
CallWindowProcW
SendMessageW
EnumChildWindows
BeginDeferWindowPos
FrameRect
RegisterWindowMessageW
SetTimer
CharPrevW
DeferWindowPos
SetWindowPos
EndDeferWindowPos
InvalidateRgn
IsWindowVisible
GetParent
GetClientRect
GetDlgItem
GetWindowRect
MapWindowPoints
MessageBoxA
GetSubMenu
wsprintfA
SetForegroundWindow
SetDlgItemInt
GetDlgItemInt
LoadStringW
LoadCursorW
CopyRect
SetCursor
CheckDlgButton
SetWindowsHookExW
MessageBoxW
KillTimer
wsprintfW
GetDC
ReleaseDC
IsWindowUnicode
GetDlgItemTextA
IsWindowEnabled
GetFocus
PostMessageW
WindowFromDC
GetActiveWindow
DrawTextA
CheckRadioButton

gdi32

GetPixel
SelectObject
CreateCompatibleDC
MoveToEx
LineTo
CreateBrushIndirect
GetNearestColor
CreatePen
StretchBlt
DeleteDC
SetStretchBltMode
FillRgn
CreateFontIndirectW
GetDeviceCaps
CreateHatchBrush
GetTextExtentPoint32W
GetTextMetricsW
ExcludeClipRect
GetBkColor
CreateSolidBrush
SetBkMode
SetBkColor
SetTextColor
CreateRectRgnIndirect
CreateRectRgn
DeleteObject
BitBlt
CombineRgn
SetRectRgn

comdlg32

ChooseColorW
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegDeleteKeyW
RegNotifyChangeKeyValue

shell32

DragAcceptFiles
SHChangeNotify
DragFinish
ShellExecuteW
DragQueryFileW

shlwapi

PathRemoveExtensionW
PathFileExistsW
PathStripPathW

powrprof

IsPwrHibernateAllowed
IsPwrSuspendAllowed

msvcrt

_onexit
atoi
_vsnprintf
_strdup
_wtoi
_purecall
memset
free
_wcsdup
wcsstr
memcpy
_vsnwprintf
_initterm
malloc
_adjust_fdiv
__dllonexit

Exports

Exports

winampGetGeneralPurposePlugin
winampUninstallPlugin

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 527B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4539433450aba66affa5c3f6d9238e78

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

powrprof

msvcrt

Exports

Exports

Sections

.text Size: 114KB - Virtual size: 114KB

.rdata Size: 1024B - Virtual size: 527B

.data Size: 12KB - Virtual size: 91KB

.idata Size: 7KB - Virtual size: 6KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 114KB - Virtual size: 114KB

.rdata
Size: 1024B - Virtual size: 527B

.data
Size: 12KB - Virtual size: 91KB

.idata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 13KB - Virtual size: 12KB