1d03216faddd6e3e1bb5d9ac2e63d693

General

Target

1d03216faddd6e3e1bb5d9ac2e63d693
Size

48KB
MD5

1d03216faddd6e3e1bb5d9ac2e63d693
SHA1

6719a08a0044c60d5d892019013076712e232ee2
SHA256

7bf00016e15354cd2212dee48100f6efa67ad21ea799e19e97be13b2e5249494
SHA512

1e210f49b21988aea6d082d8ed8900a9caf38d27a4a76dcfef4ea9570c9ff76519d964ffaaed7e10e549cd73764be7ed91beb80eafde6372667eefe984af360b
SSDEEP

768:16NDb2GpkavUY/H3HS9IdQqnMXffzgLa1RI:1QDq1xiH3HSa3U0LaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d03216faddd6e3e1bb5d9ac2e63d693

Files

1d03216faddd6e3e1bb5d9ac2e63d693
.dll regsvr32 windows:4 windows x86 arch:x86

48883878624446305b3402d612563afb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetWindowsDirectoryA
GetSystemDirectoryA
GetLocalTime
GetModuleFileNameA
InterlockedIncrement
WinExec
CreateMutexA
CreateProcessA
LoadLibraryA
GetProcAddress
VirtualAlloc
CreateThread
CloseHandle
GetLastError

user32

GetMessageA
RegisterClassExA
DefWindowProcA
PostMessageA
TranslateMessage
SetTimer
SetWindowsHookExA
CreateWindowExA
ShowWindow
UnhookWindowsHookEx
CallNextHookEx
KillTimer
DispatchMessageA
FindWindowExA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

msvcrt

??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
free
__CxxFrameHandler
_pctype
strrchr
??2@YAPAXI@Z
_stricmp
strchr
sprintf
_except_handler3
fclose
fwrite
fopen

wininet

InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA

shlwapi

SHGetValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48883878624446305b3402d612563afb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

wininet

shlwapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 4KB - Virtual size: 892B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 4KB - Virtual size: 892B