70af0cf0f433dfd88f26a63413a07551

Sharing

Copy URL

Twitter E-mail

General

Target

70af0cf0f433dfd88f26a63413a07551
Size

301KB
MD5

70af0cf0f433dfd88f26a63413a07551
SHA1

e321c899c2c54654ec5d8d8ca5ced388d29fb0f5
SHA256

7de7f3ce2c1c10339d2ab756f29c346159e47bd70ac13c8f1cc747bf8fd69362
SHA512

80e881b623f94d02e638cbe823453adb04f32c8aac815aa21f4efe6f006731680feba831365767ca3ccb659bfa618d35ac23452064ab3ba44de8515e4499dfd4
SSDEEP

6144:jMNqJ4lOom0dwWxArZNFjvQRUDqCszzdkjrCpc0NwIrpgurS7dB4Fwt:jMPlOom0dwTrztIRUOCsinCm0NwzurSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70af0cf0f433dfd88f26a63413a07551

Files

70af0cf0f433dfd88f26a63413a07551
.dll windows:4 windows x86 arch:x86

3f27ea5ed40b31b1bc4047c64528d934

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetACP
GlobalFindAtomA
GetThreadLocale
ExitProcess
GlobalDeleteAtom
RaiseException
GetOEMCP
GetProcessHeap
HeapFree
VirtualAllocEx
GetUserDefaultLCID
GetLastError
GetModuleHandleA
GetModuleHandleW
LoadLibraryA
GetProcAddress
GetStringTypeW
InitializeCriticalSection
LockResource
GetLocalTime
LoadResource
GetStdHandle
HeapAlloc
LocalAlloc
GetVersion
ExitThread
GlobalAddAtomA
GlobalAlloc
GetStringTypeA
GetTickCount
LoadLibraryExA
IsBadReadPtr
GetStartupInfoA
GetVersionExA
GetLocaleInfoA
GetCommandLineA
GetSystemDefaultLangID

shlwapi

PathIsDirectoryA
SHQueryInfoKeyA

shell32

SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder
SHGetSpecialFolderLocation

msvcrt

strncmp
fabs

gdi32

SetTextColor
GetPaletteEntries
GetDCOrgEx
CreateCompatibleBitmap
GetPixel
SelectObject
CreateCompatibleDC
GetDIBColorTable
GetObjectA
SaveDC
CreateFontIndirectA
GetRgnBox
GetDIBits
CreatePenIndirect
GetBitmapBits
BitBlt
SelectPalette
LineTo
CopyEnhMetaFileA
CreateBitmap
GetCurrentPositionEx
CreateDIBitmap
CreateBrushIndirect
SetBkMode
RestoreDC
CreateDIBSection
SetBkColor
SetPixel
CreatePalette
GetClipBox

version

VerFindFileA

comdlg32

ChooseColorA

user32

EnableScrollBar
GetDlgItem
DrawIconEx
FrameRect
EnableMenuItem
DrawTextA
GetCapture
GetForegroundWindow
GetClipboardData
EnableWindow
EqualRect
EnumChildWindows
GetClassInfoA
GetDC
FindWindowA
DrawMenuBar
GetActiveWindow
GetCursorPos
GetFocus
GetClassNameA
FillRect
EmptyClipboard
GetCursor
EnumThreadWindows
EndPaint
GetDCEx
GetDesktopWindow
EnumWindows
GetClientRect

ole32

CLSIDFromString
CoDisconnectObject

oleaut32

SafeArrayGetUBound
SysStringLen
OleLoadPicture

comctl32

ImageList_Write
ImageList_Draw
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ImageList_Remove
ImageList_Read
ImageList_GetBkColor
ImageList_Add
ImageList_DragShowNolock

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 512B - Virtual size: 91B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc6
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc2
Size: 174KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f27ea5ed40b31b1bc4047c64528d934

Headers

File Characteristics

Imports

kernel32

shlwapi

shell32

msvcrt

gdi32

version

comdlg32

user32

ole32

oleaut32

comctl32

Sections

.text Size: 113KB - Virtual size: 112KB

DATA Size: 1024B - Virtual size: 972B

.rsrc9 Size: 512B - Virtual size: 91B

.rsrc6 Size: 1KB - Virtual size: 1KB

.rsrc2 Size: 174KB - Virtual size: 205KB

.rsrc8 Size: 1KB - Virtual size: 1KB

.rsrc5 Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 113KB - Virtual size: 112KB

DATA
Size: 1024B - Virtual size: 972B

.rsrc9
Size: 512B - Virtual size: 91B

.rsrc6
Size: 1KB - Virtual size: 1KB

.rsrc2
Size: 174KB - Virtual size: 205KB

.rsrc8
Size: 1KB - Virtual size: 1KB

.rsrc5
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 2KB - Virtual size: 1KB