575275eb4819ecaec42058fb92b70c00

Sharing

Copy URL Twitter E-mail

General

Target

575275eb4819ecaec42058fb92b70c00
Size

257KB
MD5

575275eb4819ecaec42058fb92b70c00
SHA1

7cff263c4ef8a43193b4d7cc12cad79d752ad80f
SHA256

7225bc4b124ecc56f446531e2f412311908c15791d4f4dff5fdbc96af9275b32
SHA512

e95c3ff303df8be56cc1f0bc6c2cae7caeabf9b9e7cb93ad1ec0e6f82123ea528d4959a7e67194bc6eadd3a4d6d21fe0a3503160e2f540d4ee58e2904557348b
SSDEEP

6144:+cTR7vsBMtIoAN9Gm7dPoSPjp1L7pqKAs4LHincW:+6ZEBMqhvdBp1L7pAnCnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
575275eb4819ecaec42058fb92b70c00

Files

575275eb4819ecaec42058fb92b70c00
.dll windows:4 windows x86 arch:x86

2390719234cc4cbc7676653d59778e07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SendMessageA
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RedrawWindow
PtInRect
MessageBoxA
MapDialogRect
LoadStringA
LoadCursorA
IsWindow
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowLongA
GetWindow
GetUpdateRgn
GetSysColor
SetCapture
GetMenuItemID
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassInfoExA
GetCaretPos
GetActiveWindow
FillRect
EnumDesktopWindows
EndPaint
DialogBoxIndirectParamA
DestroyWindow
DestroyAcceleratorTable
DefWindowProcA
SetCursor
SetFocus
SetWindowContextHelpId
SetWindowLongA
SetWindowTextA
wsprintfA
GetParent
CreateWindowExA
CreateAcceleratorTableA
CharNextA
BeginPaint

comctl32

ord17

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA

kernel32

RaiseException
QueryPerformanceCounter
MulDiv
LockResource
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
IsProcessorFeaturePresent
IsDBCSLeadByte
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
HeapFree
SetLastError
GlobalFree
GlobalFix
GlobalAlloc
GetVersionExA
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetProcessPriorityBoost
GetProcessHeaps
GetProcessHeap
GetProcAddress
GetOverlappedResult
GetOEMCP
GetModuleHandleA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
SetMailslotInfo
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
lstrlenW
GlobalLock
DeleteTimerQueueTimer
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FlushInstructionCache
FreeLibrary
GetACP
GetCommTimeouts
GetCurrentProcess

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHFreeNameMappings
SHBindToParent
DuplicateIcon
DragAcceptFiles
SHLoadNonloadedIconOverlayIdentifiers

ddraw

DirectDrawCreateClipper
DirectDrawCreate
DDGetAttachedSurfaceLcl

Exports

Exports

ComputeTangentFrameEx
CreateEffectCompilerFromResourceW
CreateTextureFromFileA
GetDefaultLoadFileOption
GetImageInfoFromResourceA
IntersectTri
QuaternionRotationMatrix
QuaternionToAxisAngle
SetSaveResolution
WeldVertices
mpegInGetNextFrame
mpegSplitClose

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2390719234cc4cbc7676653d59778e07

Headers

File Characteristics

Imports

user32

comctl32

advapi32

kernel32

shell32

ddraw

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 119KB - Virtual size: 119KB

.data Size: 43KB - Virtual size: 43KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 119KB - Virtual size: 119KB

.data
Size: 43KB - Virtual size: 43KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: 3KB - Virtual size: 2KB