634b0481171e00f3114f50e9b939d413

Sharing

Copy URL

Twitter E-mail

General

Target

634b0481171e00f3114f50e9b939d413
Size

1.3MB
MD5

634b0481171e00f3114f50e9b939d413
SHA1

83f7b8ca266fa588e75416192b1050663269b63c
SHA256

972c2e921b7ea8b59402bbbd24bbe628b6ec17f8ddba0faa928d43c0fcea8389
SHA512

f73bda89801b27075a4982592f7b05d6ced340d9e4b6c8fa8f01f03ac039f65c65e3621ce5539125343c9ef0fb54a9bda048c432ac67be5c697492f5b96a4daf
SSDEEP

24576:UbixyFdxE3z7o5crUvD0j3HDXUpO012yovno31/Vyivqih:oixdnBUvIQCGHyivqih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634b0481171e00f3114f50e9b939d413

Files

634b0481171e00f3114f50e9b939d413
.dll windows:6 windows x86 arch:x86

5d265af4cca5fb3c20565d0bfae590ab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ord13

dbghelp

SymCleanup
SymInitialize
SymRegisterFunctionEntryCallback64

imm32

ImmGetGuideLineW
ImmDisableIME
ImmGetCompositionFontA

msimg32

GradientFill

urlmon

CoInternetIsFeatureEnabledForUrl
URLOpenBlockingStreamA
MkParseDisplayNameEx

ws2_32

WSAGetLastError
WSASetLastError
closesocket
connect
htons
inet_addr
recv
send
socket
__WSAFDIsSet
WSAStartup
WSASocketW
WSACleanup
WSAAsyncGetHostByName
WSACancelAsyncRequest
WSAEnumProtocolsW
select
gethostbyname

kernel32

SetFileTime
CloseHandle
GetLocalTime
lstrlenW
LoadLibraryA
GetSystemDirectoryA
GetDiskFreeSpaceExA
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
CreateThread
Process32FirstW
Process32NextW
ReadFile
WriteConsoleW
GetTimeZoneInformation
VirtualFree
VirtualAlloc
GetProcAddress
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
SetEndOfFile
GetFileTime
WriteFile
HeapSize
GetFileSize
CreateToolhelp32Snapshot
InitializeSListHead
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetFullPathNameW
SetLastError
GetLastError
GetSystemTime
SystemTimeToFileTime
SwitchToFiber
DeleteFiber
CreateFiber
FindClose
FindFirstFileW
FindNextFileW
GetStdHandle
GetFileType
GetModuleHandleW
GetCurrentDirectoryW
ConvertFiberToThread
ConvertThreadToFiber
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateFileW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
GetStringTypeW
DecodePointer
CompareStringW
LCMapStringW
HeapReAlloc

user32

GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetDC
WindowFromPoint
ReleaseDC

comdlg32

ReplaceTextA
PageSetupDlgW

advapi32

CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegCreateKeyA
RegEnumValueW
QueryServiceLockStatusW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegCloseKey

crypt32

CertFreeCertificateContext
CertCloseStore
CertOpenStore
CertFindCertificateInStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty

Exports

Exports

EvalBagSND
rdb_check_add_unordered
rtp_receiver_deinit_srtp
rtp_sender_deinit_srtp
srtp_aes_encrypt
srtp_bits_per_second
srtp_cipher_rand
srtp_crypto_policy_set_null_cipher_hmac_null
srtp_dealloc
srtp_get_user_data
srtp_null_auth_dealloc
srtp_print_policy
srtp_rdbx_estimate_index
stat_test_runs
test_error__
v128_left_shift

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d265af4cca5fb3c20565d0bfae590ab

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

dbghelp

imm32

msimg32

urlmon

ws2_32

kernel32

user32

comdlg32

advapi32

crypt32

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 278KB - Virtual size: 277KB

.data Size: 12KB - Virtual size: 27KB

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 278KB - Virtual size: 277KB

.data
Size: 12KB - Virtual size: 27KB

.reloc
Size: 36KB - Virtual size: 36KB