616c2fad0f4400979cc83e7a33fd67db

Sharing

Copy URL

Twitter E-mail

General

Target

616c2fad0f4400979cc83e7a33fd67db
Size

301KB
MD5

616c2fad0f4400979cc83e7a33fd67db
SHA1

317e4dcb4c635f7f5aa14ffce79867e98f3d8ca6
SHA256

bd215b0056d379b4ee6fb250ed9f3c741c5016251ec238dda63c1b4e1eac8360
SHA512

c63f9e111534230ddbc6d5503caf94bafb45a2d5018577cf518145a420f0dfecd54494de4458186c497a61b841a42ed84ed7f8e28ff1e02cb24cccb53a4a77f4
SSDEEP

6144:jMNqJ4lOom0dwWxArZNFjvQRUDqCszzdkjrCpc0NwIrpgurS7dB4Fwtw:jMPlOom0dwTrztIRUOCsinCm0NwzurSo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616c2fad0f4400979cc83e7a33fd67db

Files

616c2fad0f4400979cc83e7a33fd67db
.dll windows:4 windows x86 arch:x86

3f27ea5ed40b31b1bc4047c64528d934

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetACP
GlobalFindAtomA
GetThreadLocale
ExitProcess
GlobalDeleteAtom
RaiseException
GetOEMCP
GetProcessHeap
HeapFree
VirtualAllocEx
GetUserDefaultLCID
GetLastError
GetModuleHandleA
GetModuleHandleW
LoadLibraryA
GetProcAddress
GetStringTypeW
InitializeCriticalSection
LockResource
GetLocalTime
LoadResource
GetStdHandle
HeapAlloc
LocalAlloc
GetVersion
ExitThread
GlobalAddAtomA
GlobalAlloc
GetStringTypeA
GetTickCount
LoadLibraryExA
IsBadReadPtr
GetStartupInfoA
GetVersionExA
GetLocaleInfoA
GetCommandLineA
GetSystemDefaultLangID

shlwapi

PathIsDirectoryA
SHQueryInfoKeyA

shell32

SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder
SHGetSpecialFolderLocation

msvcrt

strncmp
fabs

gdi32

SetTextColor
GetPaletteEntries
GetDCOrgEx
CreateCompatibleBitmap
GetPixel
SelectObject
CreateCompatibleDC
GetDIBColorTable
GetObjectA
SaveDC
CreateFontIndirectA
GetRgnBox
GetDIBits
CreatePenIndirect
GetBitmapBits
BitBlt
SelectPalette
LineTo
CopyEnhMetaFileA
CreateBitmap
GetCurrentPositionEx
CreateDIBitmap
CreateBrushIndirect
SetBkMode
RestoreDC
CreateDIBSection
SetBkColor
SetPixel
CreatePalette
GetClipBox

version

VerFindFileA

comdlg32

ChooseColorA

user32

EnableScrollBar
GetDlgItem
DrawIconEx
FrameRect
EnableMenuItem
DrawTextA
GetCapture
GetForegroundWindow
GetClipboardData
EnableWindow
EqualRect
EnumChildWindows
GetClassInfoA
GetDC
FindWindowA
DrawMenuBar
GetActiveWindow
GetCursorPos
GetFocus
GetClassNameA
FillRect
EmptyClipboard
GetCursor
EnumThreadWindows
EndPaint
GetDCEx
GetDesktopWindow
EnumWindows
GetClientRect

ole32

CLSIDFromString
CoDisconnectObject

oleaut32

SafeArrayGetUBound
SysStringLen
OleLoadPicture

comctl32

ImageList_Write
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ImageList_Remove
ImageList_Read
ImageList_GetBkColor
ImageList_Add
ImageList_DragShowNolock

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 174KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f27ea5ed40b31b1bc4047c64528d934

Headers

File Characteristics

Imports

kernel32

shlwapi

shell32

msvcrt

gdi32

version

comdlg32

user32

ole32

oleaut32

comctl32

Sections

.text Size: 113KB - Virtual size: 112KB

DATA Size: 1024B - Virtual size: 972B

.rsrc9 Size: 512B - Virtual size: 91B

.rsrc6 Size: 1KB - Virtual size: 1KB

.rsrc2 Size: 174KB - Virtual size: 205KB

.rsrc8 Size: 1KB - Virtual size: 1KB

.rsrc5 Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 113KB - Virtual size: 112KB

DATA
Size: 1024B - Virtual size: 972B

.rsrc9
Size: 512B - Virtual size: 91B

.rsrc6
Size: 1KB - Virtual size: 1KB

.rsrc2
Size: 174KB - Virtual size: 205KB

.rsrc8
Size: 1KB - Virtual size: 1KB

.rsrc5
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 2KB - Virtual size: 1KB