fbf10a46bd3dbfded6b521f0ce040470

Sharing

Copy URL Twitter E-mail

General

Target

fbf10a46bd3dbfded6b521f0ce040470
Size

168KB
MD5

fbf10a46bd3dbfded6b521f0ce040470
SHA1

1bd605a37a9b76411200176967ab65e212d517b1
SHA256

e984c8b409d7a34972fd717c50cedad96fc9e67ad43131dce5b374b2397ce597
SHA512

7ba81ad72b0cd1ad3f65b34c61c2f536e9e397cc6b339a9f0dcf4ba7a5b5b5a8578578bba6faf0b19cf7cd810c83c92ab8a2e6cf810f0707e736b9810af925af
SSDEEP

3072:Odmsk9AfvcFJemsSCk9Z52/CwFguyH2OPOlpJYpGNoM9norGClZtAApzE:Od7YAfvYe/SCk9Z52/CCguyHBPipmCdo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbf10a46bd3dbfded6b521f0ce040470

Files

fbf10a46bd3dbfded6b521f0ce040470
.dll windows:4 windows x86 arch:x86

97ed10d291f46744f545ce8b26623493

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
WriteFile
CreateEventA
ReadFile
GetOverlappedResult
ResetEvent
CancelIo
CreateFileA
GetSystemDirectoryA
Sleep
GetModuleFileNameA
GetFileSize
LeaveCriticalSection
DisableThreadLibraryCalls
OpenProcess
FlushFileBuffers
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetStdHandle
LCMapStringW
LCMapStringA
InitializeCriticalSection
lstrcpyA
lstrcatA
ResumeThread
GetCurrentProcessId
GetVersion
CloseHandle
ReleaseMutex
DeleteTimerQueue
GetLastError
GetStdHandle
GetVolumeInformationA
GetTickCount
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
MultiByteToWideChar
SetFilePointer
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
InterlockedExchange
SetUnhandledExceptionFilter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
HeapFree
HeapAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

IsWindow
GetGuiResources
OpenIcon
DestroyWindow
DispatchMessageA
PeekMessageA
TranslateMessage
MsgWaitForMultipleObjects

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenServiceA
RegOpenKeyExA
AdjustTokenPrivileges

ws2_32

bind
gethostbyname
shutdown
setsockopt
recv
closesocket
send
htons
inet_ntoa
connect
accept
listen
WSACleanup
htonl
WSAStartup
inet_addr
WSAStringToAddressA
socket

wininet

InternetCrackUrlA

shlwapi

SHSetValueA
SHGetValueA

Exports

Exports

AnimatedDiskZ
ClientSingleId
ColorIncrement
DescriptorPendingClass
DlgNuma
DllCrypt
ExcludeQueryWide
FramePrintSettingsEffective
InheritanceDrivesGlass
InstalledZ
KeySFormatAdd
NameWideSide
NeedsTargetPrefix
NotificationsAssignModule32
ServiceMain
SidsDlgProfile
StreamFunction035
UIHeadButtons

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97ed10d291f46744f545ce8b26623493

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

wininet

shlwapi

Exports

Exports

Sections

.text Size: 123KB - Virtual size: 123KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 928B

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 123KB - Virtual size: 123KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 14KB - Virtual size: 14KB