0afbaf3309461726c04ce9643c01f36e

Sharing

Copy URL

Twitter E-mail

General

Target

0afbaf3309461726c04ce9643c01f36e
Size

518KB
MD5

0afbaf3309461726c04ce9643c01f36e
SHA1

63f7057a205b3970f8715cca07873b30783aa0b0
SHA256

9a207f1d4d4e8efb45d9696cc8f9f014d10cf6d200acf2883462922c4af4332b
SHA512

abf1990623452e315b22c4e37e4309bf940ad67c278d7a954d305759f72a388d201aca6eca1481474d56789ed73cbcfbb1660a5017549dcd813217a9b0d3ddf6
SSDEEP

12288:6ATdYOR+auARMlpwF1eBPP6BzYbXqSGFUV4ThZbmG68:6OVR+5lpwzIPPYYbXTaTHbB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0afbaf3309461726c04ce9643c01f36e

Files

0afbaf3309461726c04ce9643c01f36e
.dll windows:6 windows x86 arch:x86

7d4029a21f99a8861d644c6ec93355ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
ExitProcess
FreeLibrary
CreateDirectoryA
GetProcAddress
CreateFileW
CloseHandle
DeleteFileA
LoadLibraryA
GetLastError
WriteConsoleW
SetFilePointerEx
Sleep
FindClose
FindNextFileA
SetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
HeapReAlloc
GetACP
GetStringTypeW
GetFileType
GetStdHandle
HeapSize
FindFirstFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
LCMapStringW
DecodePointer

dbghelp

SymInitialize
SymGetSearchPath
SymCleanup

comctl32

ImageList_Create
ImageList_Destroy
ImageList_GetImageInfo

shlwapi

StrNCatW

imm32

ImmGetCandidateListW
ImmAssociateContext

oleacc

AccessibleObjectFromWindow
GetStateTextA

msimg32

TransparentBlt

urlmon

CoInternetIsFeatureEnabledForUrl

user32

DestroyIcon
GetDoubleClickTime
DestroyMenu
TranslateMessage
wsprintfA
wsprintfW
PeekMessageA
GetDC
CreateMenu
ReleaseDC
CharToOemW
EnumDisplaySettingsW
WindowFromPoint

winspool.drv

OpenPrinterA
FlushPrinter
ClosePrinter
WritePrinter

advapi32

SetServiceStatus

shell32

ExtractIconW

Exports

Exports

HPDF_CMapEncoder_ToUnicode
ServiceMain
cs_sha1_final
failing_calloc
is_space
test_dns_reply_encode

Sections

.text
Size: 225KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d4029a21f99a8861d644c6ec93355ec

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

dbghelp

comctl32

shlwapi

imm32

oleacc

msimg32

urlmon

user32

winspool.drv

advapi32

shell32

Exports

Exports

Sections

.text Size: 225KB - Virtual size: 224KB

.rdata Size: 275KB - Virtual size: 274KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 225KB - Virtual size: 224KB

.rdata
Size: 275KB - Virtual size: 274KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 11KB - Virtual size: 10KB