7596fe9c56d636ebad1f09ce213a1f7a

Sharing

Copy URL Twitter E-mail

General

Target

7596fe9c56d636ebad1f09ce213a1f7a
Size

248KB
MD5

7596fe9c56d636ebad1f09ce213a1f7a
SHA1

90827415dba012e54aec8e44d2bac18e25a1d291
SHA256

e8e3fb7d9710c2c7409f2f3dc7f7fb28be7a5864c18c541aecda4308e8286643
SHA512

c6fc7d008f845f00e09da1f1cf8e32439b9670c1065feb853b9210e16a712082f53399b433866b464722b085724c01eac2e389b196628c842c31e8c5e330c74c
SSDEEP

6144:o8+S/FeVGyJvxgpkzdUl9VPV2JuaDvL0qW7OdRKSnoqf3zzL:MZVG4vTdUlLd2JHWSzKqpfDzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7596fe9c56d636ebad1f09ce213a1f7a

Files

7596fe9c56d636ebad1f09ce213a1f7a
.dll windows:4 windows x86 arch:x86

f9e5ebb5c75f3ef4d54381750e09f561

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ord17
ImageList_ReplaceIcon
ImageList_Create
ord6
InitCommonControlsEx

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyW
RegDeleteValueA
RegDeleteKeyW
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

DeleteDC
SetTextColor
SetBkColor
CreateDCA
CreateFontIndirectA
CreateSolidBrush
DeleteObject
GetTextExtentPoint32A
SelectObject

user32

WinHelpA
WaitMessage
TranslateMessage
TrackPopupMenu
SystemParametersInfoA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetDlgItemTextA
SetDlgItemInt
SetClipboardData
SendMessageA
RedrawWindow
PostQuitMessage
PostMessageA
PeekMessageA
OpenClipboard
MoveWindow
MessageBoxA
MessageBeep
LoadStringA
LoadMenuA
LoadIconA
KillTimer
IsWindow
IsDlgButtonChecked
IsDialogMessageA
InvalidateRect
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindow
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetParent
GetLastActivePopup
GetKeyState
GetDlgItemInt
GetDlgItem
GetDialogBaseUnits
GetDesktopWindow
GetCursorPos
GetClientRect
GetClassNameA
GetAsyncKeyState
GetActiveWindow
FillRect
EndPaint
EndDialog
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextA
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcA
CreateWindowExA
CreateDialogIndirectParamA
CloseClipboard
CheckDlgButton
CallWindowProcA
BeginPaint
GetWindowDC

shell32

ShellExecuteA
DragQueryFileA
DragFinish

kernel32

WriteFile
lstrlenA
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
MapViewOfFile
LockResource
LocalUnlock
LocalLock
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExA
GetTickCount
GetTempPathA
GetTempFileNameA
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileType
GetFileTime
GetFileSize
GetFileAttributesA
GetExitCodeProcess
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FindResourceExA
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess

Exports

Exports

AudioGetFormatInfo
BAOCloseHandle
CopyStrmPrmToRawObj
CreateBlockAccessFromImage
DVDPRVRRestoreVideoRecording
EnumMCCustomItemDataRelease
GLMapBufferObject
GLRegisterBufferObject
GetBaseImageDataPropertyCount
GetDriveModeCount
GetVMSInfo
IsSupportParamItem
MallocArray
Memcpy3D
OpenDevice
RegisterDriveChangeCallback
WGLGetDevice

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9e5ebb5c75f3ef4d54381750e09f561

Headers

File Characteristics

Imports

comctl32

advapi32

comdlg32

gdi32

user32

shell32

kernel32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 140KB

.data Size: 96KB - Virtual size: 140KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 140KB - Virtual size: 140KB

.data
Size: 96KB - Virtual size: 140KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB