06de53bafd5dcd1156e8270a20511f8c

Sharing

Copy URL Twitter E-mail

General

Target

06de53bafd5dcd1156e8270a20511f8c
Size

124KB
MD5

06de53bafd5dcd1156e8270a20511f8c
SHA1

70ebc202ca9e9fb2aa688c36d325e9d69d5967e8
SHA256

caa802b0f74672b755cf3b7c09d9ced902364b7aaf5f41d2028c7131ac6feba6
SHA512

dd4055277b55c09f4116ab1aad58235800d5b9edf89f3d4672baee3dd513fe7d392258c9ea767332270bafc57d79e77b0774ea59040a468afcfc4ef475e7c134
SSDEEP

3072:rA1YFt0F+B0ZgPbP1DXnLE7otqJjtFABEZJL9njGeUu:rA2Ft0F80ZgPb9DXL0oceEn9njLUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06de53bafd5dcd1156e8270a20511f8c

Files

06de53bafd5dcd1156e8270a20511f8c
.dll regsvr32 windows:4 windows x86 arch:x86

e7483163b6c4923d33d68d2a4fb88761

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_stricmp
strerror
srand
wctomb
malloc
__mb_cur_max
tolower
??0exception@@QAE@ABV0@@Z
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
atoi
??3@YAXPAX@Z
isalpha
strncpy
tmpnam
fopen
fwrite
fclose
strtok
toupper
strstr
free
ispunct
isxdigit
islower
isalnum
isgraph
strchr
printf
isupper
??2@YAPAXI@Z
wcscmp
wcslen
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
isspace

user32

wsprintfA
SetTimer
KillTimer
CloseClipboard
OpenClipboard
EnumWindows
EnumChildWindows
GetWindowThreadProcessId
GetClassNameA
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
SetWindowPos
SystemParametersInfoA
DefWindowProcA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

oleaut32

VariantClear
SysAllocString
SysFreeString
GetErrorInfo

shlwapi

StrStrIA
SHSetValueA
SHGetValueA

psapi

GetModuleBaseNameA
EnumProcesses
EnumProcessModules

winmm

timeGetTime

netapi32

Netbios

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoCreateGuid

wininet

InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA

rpcrt4

UuidToStringA

kernel32

QueryPerformanceCounter
GetTickCount
GetModuleFileNameA
GetVersion
GetLocalTime
CloseHandle
OpenProcess
Sleep
HeapFree
GetProcessHeap
lstrlenA
GetLastError
HeapSize
QueryPerformanceFrequency
WriteProcessMemory
SetLastError
GetFullPathNameA
LocalFree
FormatMessageA
GetProcessTimes
GetCurrentProcess
GetVersionExA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemInfo
GetWindowsDirectoryA
GetThreadTimes
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCurrentDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
GetEnvironmentVariableA
GetModuleHandleA
InterlockedExchange
lstrcpynA
lstrcmpiA
lstrcmpA
DeleteFileA
CreateProcessA
WaitForSingleObject
MoveFileExA
CreateFileA
SleepEx
VirtualAllocEx
HeapAlloc
CreateRemoteThread
GetCurrentProcessId

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7483163b6c4923d33d68d2a4fb88761

Headers

File Characteristics

Imports

msvcrt

user32

version

oleaut32

shlwapi

psapi

winmm

netapi32

ole32

wininet

advapi32

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 16KB - Virtual size: 18KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 16KB - Virtual size: 18KB

.reloc
Size: 8KB - Virtual size: 5KB