5963191dcfbf5553c614f2ef88ad21bc

Sharing

Copy URL Twitter E-mail

General

Target

5963191dcfbf5553c614f2ef88ad21bc
Size

114KB
MD5

5963191dcfbf5553c614f2ef88ad21bc
SHA1

bc8b071320a1e0d9f2c30eaaffe5ea595132ed7f
SHA256

54aa95fec2716cf0e8d12727aeb1e3183dbb20946658d4fe86ec85fead3e5f8b
SHA512

8897713532e2b4de531e4b1295628d759eb44ba6a86f95a409d821cc4318d798842fada41a04b85c7682119a488401a01d7e66338e47e8b66c7cf6b810fb5cfa
SSDEEP

1536:5IcDAdmZyampn6kOjTJdWtdQu6S7ZeWY02c6T7WH0tbZf10KMMiU1aoauY:kCyHSArH7Zk0A7tD10KMMiU1m9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5963191dcfbf5553c614f2ef88ad21bc

Files

5963191dcfbf5553c614f2ef88ad21bc
.dll windows:4 windows x86 arch:x86

725c8bd53776b9acd775ba3593417f71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

VariantCopyInd
VariantClear
SysFreeString
SysAllocStringLen
LoadTypeLib

advapi32

RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegLoadKeyA
RegEnumKeyA

ole32

WriteClassStm
ProgIDFromCLSID
OleSetClipboard
OleLockRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateBindCtx
CoTaskMemAlloc
CoInitialize
ReadClassStg
CoGetMalloc
CLSIDFromString
CLSIDFromProgID

user32

LoadIconA
LoadCursorFromFileA
LoadBitmapA
CharToOemA
BeginPaint
SetCursor

shell32

SHGetMalloc
SHFileOperationA
SHGetFileInfoA
SHBindToParent

shlwapi

PathIsRelativeA
PathIsDirectoryA
PathFindFileNameA
StrChrA
PathFileExistsA
PathCompactPathExA
PathCanonicalizeA
PathAppendA
SHAutoComplete
PathUnquoteSpacesA
PathQuoteSpacesA
PathFindExtensionA
PathIsRootA

msvcrt

strstr
strlen
sprintf
memmove
malloc
free
_errno
__dllonexit
__set_app_type
sscanf

kernel32

lstrcmpiA
lstrcmpA
TlsSetValue
SetEndOfFile
GetModuleHandleA
FlushFileBuffers
CompareStringA
lstrcpyA

Exports

Exports

Afc
Mkf
Xco

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

725c8bd53776b9acd775ba3593417f71

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 28KB

.rdata Size: 28KB - Virtual size: 32KB

.data Size: 31KB - Virtual size: 32KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 26KB - Virtual size: 28KB

.rdata
Size: 28KB - Virtual size: 32KB

.data
Size: 31KB - Virtual size: 32KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 28KB