036a4ac61dc258ca30318a61e370dd2d

Sharing

Copy URL

Twitter E-mail

General

Target

036a4ac61dc258ca30318a61e370dd2d
Size

136KB
MD5

036a4ac61dc258ca30318a61e370dd2d
SHA1

e368dc8f7258f135587e9889d6c4ae5849fd0b9f
SHA256

0c5bcb0b4d6bfd22cf5eb04c3000c41e9f95d504aae37876388ba636b7b79d7f
SHA512

b7c857f109d07bdf14ca009f2bb6064c210d69dd4eeb1d74ba7dc02a0ef7cb17ec761294ce3163487adb5baddb9b5571dc2298ac68f12972e649e6e2851565a9
SSDEEP

3072:cA437PqsWtxW6qzfRaGIrA29aSdjhZpsJ2B8QJteCR:cAq7PWW5zJb29ftrpLPJteo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
036a4ac61dc258ca30318a61e370dd2d

Files

036a4ac61dc258ca30318a61e370dd2d
.dll regsvr32 windows:4 windows x86 arch:x86

9a12857131de5ff31e0c1b4104c898dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidToStringA

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

netapi32

Netbios

ole32

CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateGuid
CoCreateInstance

winmm

timeGetTime

wininet

InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile

msvcrt

_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__dllonexit
strtok
toupper
strstr
isxdigit
ispunct
isspace
isalpha
srand
islower
atoi
tmpnam
fopen
fwrite
fclose
wcscmp
?what@exception@@UBEPBDXZ
wcslen
strchr
__mb_cur_max
wctomb
strncpy
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
tolower
isgraph
printf
isupper
strerror
??3@YAXPAX@Z
free
malloc
_stricmp
isalnum

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
RegOpenKeyExA

user32

DefWindowProcA
SetTimer
KillTimer
SystemParametersInfoA
SetWindowPos
wsprintfA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
OpenClipboard
CloseClipboard
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
DispatchMessageA
TranslateMessage

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

oleaut32

SysFreeString
SysAllocString
VariantClear
GetErrorInfo

shlwapi

StrStrIA
SHGetValueA
SHSetValueA

kernel32

LocalFree
QueryPerformanceFrequency
GetCurrentProcessId
CreateFileA
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetModuleHandleA
GetCurrentThread
InterlockedExchange
GetFullPathNameA
GetWindowsDirectoryA
lstrcpyA
GetTickCount
GetSystemDirectoryA
Sleep
HeapFree
lstrcpynA
FormatMessageA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
CreateProcessA
DeleteFileA
OpenProcess
MultiByteToWideChar
FreeEnvironmentStringsA
GetEnvironmentStrings
GetProcessTimes
GetCurrentProcess
GetSystemInfo
GetLastError
lstrcmpiA
lstrcmpA
SleepEx
GetThreadTimes
lstrlenA
GetVersionExA
GetVersion
QueryPerformanceCounter
HeapSize
HeapAlloc
GetProcessHeap
GetEnvironmentVariableA
GetCurrentDirectoryA
SetLastError
GetLocalTime
GetModuleFileNameA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a12857131de5ff31e0c1b4104c898dc

Headers

File Characteristics

Imports

rpcrt4

psapi

netapi32

ole32

winmm

wininet

msvcrt

advapi32

user32

version

oleaut32

shlwapi

kernel32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 20KB - Virtual size: 24KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 20KB - Virtual size: 24KB

.reloc
Size: 8KB - Virtual size: 6KB