1e2408084f5b4e2846e490de2ca3ab6d

General

Target

1e2408084f5b4e2846e490de2ca3ab6d
Size

25KB
MD5

1e2408084f5b4e2846e490de2ca3ab6d
SHA1

968d9fae23dcbebec6f413787e8667b10dbbc8e7
SHA256

a62334576cd024f04a91b454d1120904a85416e04138a01fe51f81de44edf714
SHA512

f401a3e0aaf72300bce019b47a7486051108c5cba89ef2c35fbeac2099b0ef2bdaba097775b7bd2d5b5a1df397ecb4f2d805a3906821a5d03134926a9bb043bd
SSDEEP

384:21kvp4IyZ3AXejg9V5vKuyrb5KtaBUBd6xkz3mhlpfR:24CIyZ3AOjg9rdyhKtKUBMFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e2408084f5b4e2846e490de2ca3ab6d

Files

1e2408084f5b4e2846e490de2ca3ab6d
.dll regsvr32 windows:4 windows x86 arch:x86

543dc62b8dc712b59b692c1ab00ccf69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleFileNameA
OpenProcess
TerminateProcess
GetModuleFileNameW
LoadLibraryA
SetLastError
GetLastError
LoadLibraryW
MultiByteToWideChar
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
CloseHandle
GetModuleHandleA
lstrcmpA
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
RtlUnwind

user32

SetWindowLongA
ShowWindow
CharUpperA
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
LoadBitmapA
GetWindowLongA
CallWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassA
IsWindow
DestroyWindow

gdi32

DeleteObject

advapi32

RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

543dc62b8dc712b59b692c1ab00ccf69

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 184B

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 184B

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB