60deb8c0e1354594b31e43265b6464ff

Sharing

Copy URL Twitter E-mail

General

Target

60deb8c0e1354594b31e43265b6464ff
Size

57KB
MD5

60deb8c0e1354594b31e43265b6464ff
SHA1

fe5e8945fda753bf3dde88728bbc2cca40affedf
SHA256

774a45ec98da0ec9c386594a77fe62217ed5397d211b806b609c6cd868ee2547
SHA512

c2b608b99892b34e272895164db88ed456bc4bce62ddb15d77494a74e01d96e24caa813edbe5cd65cdf93883455ac25beb1d862cb76668a92a0f7f6b0c3888bd
SSDEEP

1536:E9TYhcGQDf4G7eZG57DIWRBSIeDaAQLZr:mGm49E7D7BSIeDLcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60deb8c0e1354594b31e43265b6464ff

Files

60deb8c0e1354594b31e43265b6464ff
.dll windows:4 windows x86 arch:x86

9994506d0465b11f9c3e77ba44e62e81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

__dllonexit
??1type_info@@UAE@XZ
strcpy
atoi
wcstombs
towlower
tolower
_onexit
srand
_itow
strlen
mbstowcs
strtok
memcpy
memset
free
malloc
_itoa
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
??_U@YAPAXI@Z
memmove
_XcptFilter
_initterm
_CxxThrowException
_amsg_exit
_adjust_fdiv
?terminate@@YAXXZ
??_V@YAXPAX@Z
rand
_except_handler3

kernel32

LocalFree
CreateFileW
GetFileSize
VirtualAlloc
ReadFile
VirtualFree
GetModuleFileNameW
lstrcpyW
CreateMutexW
GetLastError
WaitForSingleObject
WaitForMultipleObjects
GetExitCodeThread
lstrlenW
OpenMutexW
GetProcAddress
GetModuleHandleA
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualFreeEx
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
Process32NextW
GetCurrentProcess
Sleep
FlushFileBuffers
lstrcatW
SetFilePointer
SetEndOfFile
ReleaseMutex
GetModuleFileNameA
DisableThreadLibraryCalls
ExitProcess
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryA
GetLogicalDriveStringsW
GetDriveTypeW
DeleteFileW
GetTickCount
CreateDirectoryW
GetSystemTime
SystemTimeToFileTime
SetFileTime
GetWindowsDirectoryA
GetVolumeInformationA
CreateProcessW
OpenMutexA
WriteFile
GetCurrentThread
Process32First
GetCurrentProcessId
Process32Next
TerminateThread
CreateEventW
TerminateProcess
WideCharToMultiByte
HeapAlloc
GetProcessHeap
HeapFree
SetFileAttributesW
InterlockedIncrement
InterlockedDecrement
GetVersion
InterlockedExchange
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateThread
GetVersionExA
CloseHandle
lstrcatA
lstrcpyA
lstrlenA
OpenEventA

user32

PostMessageA
CallNextHookEx
UnhookWindowsHookEx
GetSystemMetrics
SetWindowsHookExA

advapi32

OpenProcessToken
StartServiceA
QueryServiceStatusEx
QueryServiceConfigA
CloseServiceHandle
SetThreadToken
GetLengthSid
SetTokenInformation
DuplicateTokenEx
SetEntriesInAclA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
ChangeServiceConfigA
ControlService
OpenServiceA
OpenSCManagerA
ConvertSidToStringSidW
IsValidSid
GetTokenInformation
SetSecurityInfo
AdjustTokenPrivileges
RegCreateKeyExW
RegDeleteValueW
RegFlushKey
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
LookupPrivilegeValueA

shell32

SHGetFolderPathW

ole32

CoCreateGuid
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

oleaut32

VariantInit
SysFreeString
VariantClear
SysAllocString
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
s

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9994506d0465b11f9c3e77ba44e62e81

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 44KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 44KB

.reloc
Size: 3KB - Virtual size: 3KB