695dd7d543f7c0835a2acda2e969dc75

General

Target

695dd7d543f7c0835a2acda2e969dc75
Size

44KB
MD5

695dd7d543f7c0835a2acda2e969dc75
SHA1

1df4ef85fbd018a5b0bd5d620aec4833e67cc35c
SHA256

57f726de5c733967902ac6087ea40d17cbafe7e2379c2472fd88a9111256ad63
SHA512

c61413f983d0bc83eb5684b174bbb4dcd8ef625f269a744e2b7e89061d045e6bba6aee8dbf56bacf1b642c1f533626c9ddbc8ef8d84df0fe5af5d60da2596cfd
SSDEEP

384:JDGq3QPh0bM8sq2h/gUWW3Ub9xDtkav5clFy/jEp99XHUiJpJgLa0Mp1STT:nJns9hYUNEPpkavB/jQ9XUSgLa1O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
695dd7d543f7c0835a2acda2e969dc75

Files

695dd7d543f7c0835a2acda2e969dc75
.dll regsvr32 windows:4 windows x86 arch:x86

848f879a832cdb0da48dd62db5155d69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetWindowsDirectoryA
GetSystemDirectoryA
GetLastError
CreateMutexA
WinExec
CreateProcessA
GetLocalTime
GetProcAddress
VirtualAlloc
InterlockedIncrement
GetModuleFileNameA
LoadLibraryA
CreateThread
CloseHandle

user32

RegisterClassExA
PostMessageA
FindWindowExA
ShowWindow
CallNextHookEx
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
DefWindowProcA
SetWindowsHookExA
GetMessageA
UnhookWindowsHookEx
CreateWindowExA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

msvcrt

??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
free
_except_handler3
__CxxFrameHandler
atoi
??2@YAPAXI@Z
_stricmp
strchr
sprintf
strrchr
fclose
fwrite
fopen

shlwapi

SHGetValueA

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

848f879a832cdb0da48dd62db5155d69

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

shlwapi

wininet

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 886B

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 886B