020b88bc17883d4969ad9314196532ec

Sharing

Copy URL Twitter E-mail

General

Target

020b88bc17883d4969ad9314196532ec
Size

136KB
MD5

020b88bc17883d4969ad9314196532ec
SHA1

33c1e684e54354d9e2525c4faf0f664baa9d84da
SHA256

526040eb887dc5d3d74f35f2f08876702230bb2211fc2fabf26eb878f0afb68d
SHA512

b9da21806e12724e40d89cf45703f5209b7eaafa728f124bc0cc25157013c6034ee4cf8ed81733317faef769a5c8bbf0a7899e9b5fa33b5cfde069cf7304f336
SSDEEP

3072:H8e5Dn4VIN9I+EIz2y/DZVHJUtFmJXwHV2t:H8e5D4oI+EIz3DatFvHV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020b88bc17883d4969ad9314196532ec

Files

020b88bc17883d4969ad9314196532ec
.dll regsvr32 windows:4 windows x86 arch:x86

c091be2694ceab746784d3b778fa254b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA
DefWindowProcA
SetTimer
KillTimer
EnumChildWindows
GetClassNameA
GetWindowThreadProcessId
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassExA
CloseClipboard
OpenClipboard
EnumWindows
SetWindowPos
SystemParametersInfoA

winmm

timeGetTime

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
strerror
ispunct
isalpha
strtol
atoi
fopen
fwrite
fclose
strtok
toupper
__mb_cur_max
wctomb
wcscmp
?what@exception@@UBEPBDXZ
wcslen
isgraph
srand
isupper
islower
isxdigit
isalnum
malloc
free
strstr
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
tolower
printf
__CxxFrameHandler
isspace
strncpy
_stricmp
tmpnam

advapi32

SetSecurityInfo
GetSecurityInfo
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegOpenKeyExA
SetEntriesInAclA

psapi

EnumProcessModules
EnumProcesses
GetModuleBaseNameA

ole32

CoInitialize
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

netapi32

Netbios

rpcrt4

UuidToStringA

wininet

InternetReadFile
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA

shlwapi

StrStrIA
SHSetValueA
SHGetValueA

oleaut32

SysFreeString
SysAllocString
VariantClear
GetErrorInfo

kernel32

WriteProcessMemory
CreateRemoteThread
DeleteFileA
CreateProcessA
WaitForSingleObject
MoveFileExA
SleepEx
CreateFileA
lstrcmpA
lstrcmpiA
lstrcpynA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTickCount
GetModuleFileNameA
GetModuleHandleA
lstrlenA
GetThreadTimes
GetCurrentThread
GetVersion
HeapSize
VirtualAllocEx
GetProcessHeap
GetEnvironmentVariableA
GetLastError
SetLastError
InterlockedExchange
GetFullPathNameA
GetSystemDirectoryA
lstrcpyA
CloseHandle
GetProcessTimes
LocalFree
FormatMessageA
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
Sleep
GetCurrentDirectoryA
OpenProcess
GetSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcessId
GetVersionExA
HeapFree
MultiByteToWideChar
HeapAlloc
GetWindowsDirectoryA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c091be2694ceab746784d3b778fa254b

Headers

File Characteristics

Imports

user32

winmm

version

msvcrt

advapi32

psapi

ole32

netapi32

rpcrt4

wininet

shlwapi

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 77KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 20KB - Virtual size: 22KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 80KB - Virtual size: 77KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 20KB - Virtual size: 22KB

.reloc
Size: 8KB - Virtual size: 6KB