064c5337ed2c6f123f5270d7dcec2a40

Sharing

Copy URL

Twitter E-mail

General

Target

064c5337ed2c6f123f5270d7dcec2a40
Size

303KB
MD5

064c5337ed2c6f123f5270d7dcec2a40
SHA1

51efbdc6f795510b84f6c0e3b9796f8720a55983
SHA256

e73b9d938fcccf600d3fa743965b7190f376c830091b05f828b052d1f439d389
SHA512

5c840dfcc346ddc1a4de2ada1ea311cf1ab049866ce9bcf02c9d20422a92f521e35413323d818393ba0b452499c394eadc39a94200afd35cd6fb1e143e11bd7f
SSDEEP

3072:Y5gYOFiiBz0yPYx2yXk+5OqQkkc6ncSQ9vyw8gekwvegplJwwwwww6pZaELk5A:dFDBYyo2yXOqdKcS0Hwjl2JwK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064c5337ed2c6f123f5270d7dcec2a40

Files

064c5337ed2c6f123f5270d7dcec2a40
.dll windows:5 windows x86 arch:x86

41e9a68b1898b32849e51e06864d0592

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
GetConsoleMode
GetPrivateProfileIntA
WriteFile
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
EnterCriticalSection
GetPrivateProfileStringA
GetTickCount
GetCurrentProcessId
GetSystemTime
SystemTimeToFileTime
GetVersionExA
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetVolumeInformationA
CreateFileA
GetLastError
CloseHandle
CreateDirectoryA
GetProcessHeap
HeapAlloc
HeapFree
WritePrivateProfileStringA
GetPrivateProfileSectionA
lstrcpyA
LeaveCriticalSection
QueryPerformanceCounter
VirtualFree
GetConsoleCP
GlobalFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
RaiseException
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA

user32

PostMessageA
GetClientRect
ShowWindow
GetWindowTextA
MoveWindow
ReleaseDC
GetDC
GetWindowRect
LoadCursorA
SetCursor
SetDlgItemTextA
InvalidateRect
FindWindowA
GetSystemMetrics
CreateDialogParamA
SetWindowLongA
SendMessageA
CallWindowProcA
MapWindowPoints
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
IsDlgButtonChecked
DestroyWindow
CheckDlgButton
LoadBitmapA
GetDlgItem

gdi32

GetTextExtentPointA
GetTextExtentPoint32A
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
DeleteDC
GetObjectA

advapi32

RegCloseKey
CryptAcquireContextW
CryptGenRandom
CryptEncrypt
CryptDecrypt
CryptDestroyKey
CryptImportKey
CryptSetKeyParam
CryptAcquireContextA
CryptReleaseContext
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetFolderPathA

ole32

OleInitialize
OleUninitialize

iphlpapi

GetAdaptersInfo

urlmon

URLDownloadToCacheFileA

wininet

DeleteUrlCacheEntry
GetUrlCacheEntryInfoA
InternetAttemptConnect

Exports

Exports

ChangeCaller
GetChannelId
GetRandomPath
GetVolumeID
InitJPDeskSetup
IsInet
MakeTJData
PutChannelId
ShowBarPage
ShowWebPage

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41e9a68b1898b32849e51e06864d0592

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

iphlpapi

urlmon

wininet

Exports

Exports

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 196KB - Virtual size: 196KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 196KB - Virtual size: 196KB

.reloc
Size: 7KB - Virtual size: 7KB