05d9a590729d377b950cded838c40ac7

Sharing

Copy URL Twitter E-mail

General

Target

05d9a590729d377b950cded838c40ac7
Size

128KB
MD5

05d9a590729d377b950cded838c40ac7
SHA1

73234c263879afbef3b14a8d8ee1032bc1ac187a
SHA256

5356000c3349bc7015ef1197d32c61704dcbe63e25859d88e1945eabe7bfe796
SHA512

e118d2d93ee876d7dd36fb7b19922b3e7425b7093a2a2ff25c882e868682867cf2cb982607261ea7c07e68266bd22895b4021569a097832359e2eedc418cb44e
SSDEEP

3072:fq4HP08aIBHWClaAfjFKuvlkswxlYwL9:S4HP0wlWC7FKu9wMw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d9a590729d377b950cded838c40ac7

Files

05d9a590729d377b950cded838c40ac7
.dll windows:4 windows x86 arch:x86

b22d8835cf45d74fe748fbe0a5b274e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
GetFullPathNameA
SetFileAttributesA
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
MulDiv
lstrcmpA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetCPInfo
GetLastError
IsBadCodePtr
IsBadReadPtr
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
ExitProcess
RtlUnwind
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
RaiseException
GetModuleHandleA
lstrlenW
InterlockedDecrement
InterlockedIncrement
SetErrorMode
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
GetOEMCP

user32

PostQuitMessage
GetWindowLongA
CharNextA
DestroyWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
EnumWindows
GetClassNameA
PostMessageA
UnregisterClassA
GetSystemMetrics
LoadImageA
SetWindowLongA
AdjustWindowRectEx
FindWindowExA
CreateAcceleratorTableA
GetParent
RedrawWindow
IsWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
GetDesktopWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
GetClientRect
FillRect
SetCapture
ReleaseCapture
GetSysColor
CallWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassExA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
LoadCursorA
wsprintfA
GetClassInfoExA
SetWindowPos
KillTimer
SetTimer
ShowWindow
UpdateWindow
MoveWindow
SetWindowTextA
SendMessageA

gdi32

GetStockObject
GetObjectA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateSolidBrush
DeleteDC

advapi32

RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

ole32

CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

DispCallFunc
LoadTypeLi
LoadRegTypeLi
VariantInit
OleCreateFontIndirect
SysStringByteLen
VariantClear
SysStringLen
SysAllocString
SysAllocStringLen
VarUI4FromStr
SysFreeString

Exports

Exports

RunIE

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b22d8835cf45d74fe748fbe0a5b274e5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 12KB - Virtual size: 8KB