524ddd2740a6830feebd1cd2e5ae5797

Sharing

Copy URL

Twitter E-mail

General

Target

524ddd2740a6830feebd1cd2e5ae5797
Size

256KB
MD5

524ddd2740a6830feebd1cd2e5ae5797
SHA1

53f721938aecab4d2a4143deebccbb4336c1ec54
SHA256

e868cbb00af043b4a7058f97d02c5ba4985844cb0f69b57ee6c564e111e83b28
SHA512

f3a03283585141711aaad04587e00fc44aca638b511bac7763465f6fe8998fe285f3f751c9cd5a793abaa5c346df325f0b196ec8e9bb70dc2bf7b3f8700d25f2
SSDEEP

6144:xBaQEIfzIVaR9YVWKIsgMlp71ZpCDRPEs1:xBh5MaRKgpRx1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
524ddd2740a6830feebd1cd2e5ae5797

Files

524ddd2740a6830feebd1cd2e5ae5797
.dll windows:4 windows x86 arch:x86

96cfbf3aef66d04b48aee2b7e0c7a086

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_stricmp
_putenv
printf
_adjust_fdiv
_initterm
_onexit
__dllonexit
_ftol
realloc
_strlwr
strrchr
malloc
fclose
strncpy
free
__CxxFrameHandler
?terminate@@YAXXZ
_except_handler3
_purecall
fopen
atoi
vfprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf

ole32

CoTaskMemFree
CoFreeUnusedLibraries
OleLockRunning
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
StringFromCLSID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize

kernel32

FreeLibrary
lstrlenW
SetErrorMode
GetProcAddress
DisableThreadLibraryCalls
GetModuleFileNameA
FindFirstFileA
LoadLibraryA
FindClose
GetCurrentThreadId
lstrcmpA
GetCurrentProcessId
GetCurrentProcess
FlushInstructionCache
InterlockedIncrement
WideCharToMultiByte
DeleteCriticalSection
HeapDestroy
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
MultiByteToWideChar
GetModuleHandleA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement

user32

DestroyWindow
GetWindowTextLengthA
EnableWindow
GetParent
GetActiveWindow
GetWindowThreadProcessId
FindWindowExA
SendMessageA
GetSysColor
GetDlgItem
CallWindowProcA
EndPaint
FillRect
BeginPaint
ReleaseDC
GetDC
SetFocus
GetClientRect
ShowWindow
GetClassNameA
RedrawWindow
GetWindowLongA
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
wsprintfA
RegisterClassA
GetSystemMetrics
CharNextA
UnregisterClassA
CreateWindowExA
IsWindow
IsChild
GetFocus
GetDesktopWindow
GetWindowTextA
SetWindowTextA
SetWindowLongA
GetWindow
RegisterClassExA
DefWindowProcA
SetWindowPos
GetClassInfoExA
RegisterWindowMessageA
LoadCursorA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

olepro32

ord253

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
DispCallFunc
SysStringLen
LoadRegTypeLi
VariantClear

gdi32

BitBlt
DeleteDC
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
CreateSolidBrush
GetDeviceCaps
GetObjectA
GetStockObject

Exports

Exports

MPACreateComponentInstance

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96cfbf3aef66d04b48aee2b7e0c7a086

Headers

File Characteristics

Imports

pncrt

ole32

kernel32

user32

advapi32

olepro32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 952B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 8KB - Virtual size: 4KB