0bfb5ca736060e0764c3f2c9a4200bcc

Sharing

Copy URL

Twitter E-mail

General

Target

0bfb5ca736060e0764c3f2c9a4200bcc
Size

124KB
MD5

0bfb5ca736060e0764c3f2c9a4200bcc
SHA1

9212d24e7974aafb714b2e7d6d228148878d9f85
SHA256

d589ebaf74527c99101430b7fd5ba84ce9796d731e68c2c9b89e593c78bd1fcf
SHA512

0884ca620382881cdc58d12f22b22ca97edbfad40f9c8abb3762d080fd088b84d8a430acc33e8368b6309181ef4d177f13b3fee0742daabac8126cc60ef317ea
SSDEEP

1536:kbNnw8+UQ0XamSihz+h5ISICS4AG9qDJh4aX01E5U7ZJLLaHzwtz:gRwhJKSiB+hixE9CJh4/1EGYHz8z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfb5ca736060e0764c3f2c9a4200bcc

Files

0bfb5ca736060e0764c3f2c9a4200bcc
.dll regsvr32 windows:4 windows x86 arch:x86

cd5cc979e59d18156ff3dc90b5200bcc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidToStringA

netapi32

Netbios

shlwapi

SHSetValueA
SHGetValueA
StrStrIA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

msvcrt

_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
_stricmp
??2@YAPAXI@Z
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
strncpy
wctomb
__dllonexit
srand
strstr
atoi
tmpnam
fopen
fwrite
__mb_cur_max
fclose
strtok
toupper
free
wcscmp
wcslen
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@XZ
strchr
_CxxThrowException
__CxxFrameHandler
isgraph
ispunct
isspace
strerror
isalpha
islower
tolower
isxdigit
malloc
printf
isalnum
isupper

advapi32

SetSecurityInfo
CryptGenRandom
CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
SetEntriesInAclA
GetSecurityInfo
CryptAcquireContextA

winmm

timeGetTime

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

oleaut32

SysAllocString
SysFreeString
VariantClear
GetErrorInfo

user32

GetClassNameA
CloseClipboard
OpenClipboard
SetWindowPos
SystemParametersInfoA
wsprintfA
DefWindowProcA
SetTimer
EnumWindows
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
GetWindowThreadProcessId
EnumChildWindows

wininet

InternetCloseHandle
InternetOpenA
HttpQueryInfoA
InternetSetOptionA
InternetOpenUrlA
InternetReadFile

ole32

CoTaskMemAlloc
CoCreateGuid
CoCreateInstance
CoInitialize
CoTaskMemFree

kernel32

GetModuleFileNameA
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetWindowsDirectoryA
MultiByteToWideChar
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentStrings
HeapFree
GetProcessHeap
lstrcpyA
lstrlenA
SetLastError
GetFullPathNameA
GetVersionExA
LocalFree
FormatMessageA
HeapAlloc
GetVersion
lstrcpynA
GetEnvironmentVariableA
InterlockedExchange
lstrcmpiA
lstrcmpA
SleepEx
CloseHandle
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetLocalTime
CreateFileA
MoveFileExA
WaitForSingleObject
CreateProcessA
DeleteFileA
GetCurrentProcessId
DisableThreadLibraryCalls
GetModuleHandleA
GetThreadTimes
GetCurrentThread
GetSystemInfo
GetProcessTimes
GetCurrentProcess
Sleep
GetCurrentDirectoryA
HeapSize
FreeEnvironmentStringsA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd5cc979e59d18156ff3dc90b5200bcc

Headers

File Characteristics

Imports

rpcrt4

netapi32

shlwapi

version

msvcrt

advapi32

winmm

psapi

oleaut32

user32

wininet

ole32

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 20KB - Virtual size: 20KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 20KB - Virtual size: 20KB

.reloc
Size: 8KB - Virtual size: 6KB