05dee7ef72bb0c3aaef863cfd3fc34dc

Sharing

Copy URL Twitter E-mail

General

Target

05dee7ef72bb0c3aaef863cfd3fc34dc
Size

24KB
MD5

05dee7ef72bb0c3aaef863cfd3fc34dc
SHA1

1c0b2b3b60e43d65606a9d6fa24e65dbaa15e7b6
SHA256

dba683736ebb0ad6696f7b0a4be0bf9855b5f78db99a1a3f33b622a8d7d8ece5
SHA512

4951d5ee2e0094aa561760c4c47d311ee7d97d11469b14a5c949b1556ffb1c7b20e45f4b3c5fa73efe945909c7b01356d3b3d2fc3c42123bd4c38adbcb072301
SSDEEP

384:ESbBrwvmuI73i5ktsuqLPWmzSkscWs2PFEZUDCB3SqBtfTQ3K:EuB/7y5FPWmzhSskOsm3SqBRT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05dee7ef72bb0c3aaef863cfd3fc34dc

Files

05dee7ef72bb0c3aaef863cfd3fc34dc
.exe windows:5 windows x86 arch:x86

ba25783c8afff2d38604e5abba1854dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt20

??5istream@@QAEAAV0@AAN@Z
_memccpy
_ismbstrail
??4strstream@@QAEAAV0@AAV0@@Z
_adj_fdivr_m64
_CItanh
??5istream@@QAEAAV0@PAVstreambuf@@@Z
?ends@@YAAAVostream@@AAV1@@Z
?bad@ios@@QBEHXZ
_fileno
??6ostream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
floor
?open@ofstream@@QAEXPBDHH@Z
_findfirst
_tolower
??0strstreambuf@@QAE@XZ
_wutime

opengl32

glClear
glTexCoord1fv
glNormal3fv
glIndexdv
glPopAttrib
glColorMaterial
glTexCoord3f
glTexParameteri
glReadPixels
glNormalPointer
glRasterPos3i
glRotatef
glTexEnviv
glLineWidth
glScaled
glMap1d
glLighti

setupapi

SetupUninstallOEMInfA
CM_Get_HW_Prof_Flags_ExA
SetupQueryFileLogA
SetupDiGetHwProfileFriendlyNameExA
SetupDiCreateDeviceInfoListExW
SetupLogErrorW
SetupDiClassGuidsFromNameExW
CM_Invert_Range_List
CM_Disconnect_Machine
SetupOpenAppendInfFileW
CM_Get_Class_NameW
CM_Query_Remove_SubTree_Ex
CM_Get_Device_Interface_Alias_ExA
SetupInstallFileA
CM_Run_Detection
SetupDiOpenDeviceInterfaceRegKey

winmm

mid32Message
waveOutGetDevCapsW
GetDriverModuleHandle
midiInGetID
WOWAppExit
mciFreeCommandResource
joySetThreshold
midiOutMessage
waveOutGetPosition
waveInGetErrorTextW
waveOutMessage
waveInPrepareHeader
mmioSetBuffer
timeKillEvent
mmTaskCreate
mixerSetControlDetails
sndPlaySoundA

msvcp60

?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBG@Z
?_Term@?$ctype@D@std@@KAXXZ
?_Xran@std@@YAXXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
?epsilon@?$numeric_limits@N@std@@SANXZ
_LDtest
??_F?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?id@?$numpunct@G@std@@2V0locale@2@A
?round_error@?$numeric_limits@D@std@@SADXZ
??Pstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??_F?$complex@M@std@@QAEXXZ

kernel32

WTSGetActiveConsoleSessionId
RegisterConsoleOS2
VirtualAlloc
SetThreadLocale
QueryDosDeviceW
GetTickCount
GetPrivateProfileStringA
CreateTimerQueue
GetConsoleTitleW
GetCurrentThreadId
HeapCompact
GetCommConfig
GetCurrentProcessId
BackupRead
UnhandledExceptionFilter
GetDriveTypeA
QueryPerformanceCounter

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 649B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba25783c8afff2d38604e5abba1854dc

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt20

opengl32

setupapi

winmm

msvcp60

kernel32

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 1024B - Virtual size: 649B

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 1024B - Virtual size: 649B

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 3KB