08bedb080824d80a2e3f3c661d0fd7b6

Sharing

Copy URL Twitter E-mail

General

Target

08bedb080824d80a2e3f3c661d0fd7b6
Size

680KB
MD5

08bedb080824d80a2e3f3c661d0fd7b6
SHA1

f06a6c03f8e061ee67b57302693ff0d8225bc874
SHA256

8eb0acf8aec813cbfd4c211b6378c0ef99bab01e8ca96d468bdb6f05545f13f2
SHA512

ccdfd72eaa3273a69141a98f7d3d9f6e5d1df3e5112e48a3e4ba730a50e87bc1da46e89a5ebcdfe6f1bf521eb7a109c6d86ec069945fd88d830b1070e0033ef5
SSDEEP

12288:Tfndx6M581WsGRouyjzC6gn5l0H1Tak8jnGg/xeq7gz3xfsPEb4sk:LdAE81W381Wk8jnYz3dsPEb4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08bedb080824d80a2e3f3c661d0fd7b6

Files

08bedb080824d80a2e3f3c661d0fd7b6
.dll windows:5 windows x64 arch:x64

fdbfc15922661107ed7f5da4af8ccaba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

shlwapi

UrlUnescapeW
StrTrimW

mprapi

MprAdminInterfaceTransportAdd

mscms

AssociateColorProfileWithDeviceW

msvcrt

ldiv

gdi32

SetWindowExtEx
DeleteColorSpace
CreateMetaFileA
CreateDiscardableBitmap
CopyEnhMetaFileW
GetRegionData

rpcrt4

UuidIsNil
RpcBindingSetAuthInfoA

wininet

GetUrlCacheEntryInfoW

wintrust

CryptCATPutAttrInfo

setupapi

SetupLogErrorW
SetupDiSetSelectedDriverA

ole32

HICON_UserMarshal

netapi32

NetShareGetInfo

oleaut32

VarDateFromCy

kernel32

EnumTimeFormatsA
GetLastError
CloseHandle
QueueUserWorkItem
SetEvent
GetNLSVersion

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DwmAttachMilContent
DwmDefWindowProc
DwmDetachMilContent
DwmEnableBlurBehindWindow
DwmEnableComposition
DwmEnableMMCSS
DwmExtendFrameIntoClientArea
DwmFlush
DwmGetColorizationColor
DwmGetCompositionTimingInfo
DwmGetGraphicsStreamClient
DwmGetGraphicsStreamTransformHint
DwmGetTransportAttributes
DwmGetUnmetTabRequirements
DwmGetWindowAttribute
DwmInvalidateIconicBitmaps
DwmIsCompositionEnabled
DwmModifyPreviousDxFrameDuration
DwmQueryThumbnailSourceSize
DwmRegisterThumbnail
DwmRenderGesture
DwmSetDxFrameDuration
DwmSetIconicLivePreviewBitmap
DwmSetIconicThumbnail
DwmSetPresentParameters
DwmSetWindowAttribute
DwmShowContact
DwmTetherContact
DwmTetherTextContact
DwmTransitionOwnedWindow
DwmUnregisterThumbnail
DwmUpdateThumbnailProperties
DwmpAllocateSecurityDescriptor
DwmpDxBindSwapChain
DwmpDxGetWindowSharedSurface
DwmpDxUnbindSwapChain
DwmpDxUpdateWindowRedirectionBltSurface
DwmpDxUpdateWindowSharedSurface
DwmpDxgiIsThreadDesktopComposited
DwmpEnableDDASupport
DwmpFreeSecurityDescriptor
DwmpGetColorizationParameters
DwmpRenderFlick
DwmpSetColorizationParameters

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 524KB - Virtual size: 521KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdbfc15922661107ed7f5da4af8ccaba

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

mprapi

mscms

msvcrt

gdi32

rpcrt4

wininet

wintrust

setupapi

ole32

netapi32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 524KB - Virtual size: 521KB

.data Size: 84KB - Virtual size: 82KB

.pdata Size: 4KB - Virtual size: 2KB

.rsrc Size: 24KB - Virtual size: 22KB

.reloc Size: 4KB - Virtual size: 3KB

Size: 4KB - Virtual size: 431B

Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 524KB - Virtual size: 521KB

.data
Size: 84KB - Virtual size: 82KB

.pdata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 24KB - Virtual size: 22KB

.reloc
Size: 4KB - Virtual size: 3KB