00fb69c2a49d7fb3de6342f19286ae30

General

Target

00fb69c2a49d7fb3de6342f19286ae30
Size

32KB
MD5

00fb69c2a49d7fb3de6342f19286ae30
SHA1

be993dacfae32286806a5d96a29d4e768b2ea50f
SHA256

a1d719ec3d3e44406d1128cb8c9646daa7129f7d373a0f2b3d1d112d07b22773
SHA512

8bfc42381134d7699da02ededc3bdfb959c49c54bab11ade0cbce1502abd0621e5ecc6788d86a7f622df24760b13b2ba0b87acf52aa44c9f1e05356790e2a0d3
SSDEEP

384:Dk8uVeVDkStfx8pIqy9pBM5O9xKOKM20YIcP6J+FQ91y:hIStJ8pIq15ORKM7YIcPCmQ91y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00fb69c2a49d7fb3de6342f19286ae30

Files

00fb69c2a49d7fb3de6342f19286ae30
.dll windows:4 windows x86 arch:x86

b519c54207421532f04ec1e4ef5fa303

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
HeapReAlloc
GetFileAttributesA
GetTempPathA
MultiByteToWideChar
GetTickCount
CloseHandle
WriteFile
ReadFile
CreateFileA
lstrcatA
lstrcmpA
SystemTimeToFileTime
GetSystemTime
HeapAlloc
CreateEventA
GetModuleHandleA
GetProcAddress
PulseEvent
FreeLibrary
GetProcessHeap
LoadLibraryA
GetLastError
GlobalFree
GlobalAlloc
lstrcpynA
lstrcpyA
SetFilePointer

user32

RegisterWindowMessageA
SetWindowLongA
SetDlgItemTextA
MessageBoxA
SetWindowTextA
AnyPopup
IsChild
BeginPaint
EndPaint
ShowWindow
SendMessageA
GetDlgItem
GetFocus
GetClientRect
GetWindowRect
CreateWindowExA
GetWindowLongA
CreateWindowExW
EnableWindow
DestroyWindow
CallWindowProcA
wsprintfA
IsWindowVisible

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

wininet

InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetFilePointer

Exports

Exports

check
copy
run

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b519c54207421532f04ec1e4ef5fa303

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB