0c1c3b2fd046f35512b427d09290a241

General

Target

0c1c3b2fd046f35512b427d09290a241
Size

44KB
MD5

0c1c3b2fd046f35512b427d09290a241
SHA1

41c69442aadde19926f927e5697c13a208a79b71
SHA256

fb119093062e8a36cf937648e8c4142644ba650112cae8b96fe4e5ab085a5fd9
SHA512

4f941188730eef9aa52a8d9d867a5519c4399bba011646ed06d08b3d63ccb80f0b1a87ec32923894f9b038f5c0cf9a922bc0e5869ccd16a53b23b89cb9b3a298
SSDEEP

768:2OEj6l8/Rpkav+qHmX6/U+b6I7HQNanrgLa1j:2OEk8AOPz7Q8kLa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c1c3b2fd046f35512b427d09290a241

Files

0c1c3b2fd046f35512b427d09290a241
.dll regsvr32 windows:4 windows x86 arch:x86

01513e9fd8363cb0ca9bf5a6daad68fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetLastError
CreateThread
VirtualAlloc
GetLocalTime
CreateProcessA
GetSystemDirectoryA
GetWindowsDirectoryA
WinExec
InterlockedIncrement

user32

DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
PostMessageA
FindWindowExA
CreateWindowExA
ShowWindow
RegisterClassExA
KillTimer
SetTimer
DefWindowProcA
UnhookWindowsHookEx
SetWindowsHookExA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shlwapi

SHGetValueA

msvcrt

strchr
_adjust_fdiv
malloc
_initterm
free
_pctype
_except_handler3
strrchr
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
_stricmp
sprintf
fopen
fclose
fwrite

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01513e9fd8363cb0ca9bf5a6daad68fe

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

wininet

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 884B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 884B