11d520fb8ff7ca1cad513d4d4d59e3d4

Sharing

Copy URL

Twitter E-mail

General

Target

11d520fb8ff7ca1cad513d4d4d59e3d4
Size

152KB
MD5

11d520fb8ff7ca1cad513d4d4d59e3d4
SHA1

1c23d8d5012d512662ba3441b6977f8104fefdbc
SHA256

cb7a2ff157a09f131aa0c177500b23beaa3bd699d2a3e0554c834c229228cb8e
SHA512

da0fd0094f19fede1fd36f6a56598de7ec643d3b16ab3c9a1d5789c859b102a977cd20c018649c5b7d168491398ab5323e4d46fcda99983d8311313847ef00d6
SSDEEP

3072:5QVDlQy2COXMEAtHx7BIDjy3dmSPxor3txt4ot9:8uuEAtHBBBd1orT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11d520fb8ff7ca1cad513d4d4d59e3d4

Files

11d520fb8ff7ca1cad513d4d4d59e3d4
.dll regsvr32 windows:4 windows x86 arch:x86

aa78bbbb6ad92dff543eeb42ea280967

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
DisableThreadLibraryCalls
GetModuleFileNameW
RaiseException
GetLastError
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
LeaveCriticalSection
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileA
WriteConsoleW
lstrcmpiW
FreeLibrary
lstrlenW
InterlockedDecrement
InterlockedIncrement
Sleep
CreateThread
GetWindowsDirectoryW
DeleteCriticalSection
GetTickCount
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetStringTypeA
GetStringTypeW

user32

UnregisterClassA
CharNextW

advapi32

RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW

ole32

StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance

oleaut32

UnRegisterTypeLi
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysFreeString
RegisterTypeLi
VarUI4FromStr
SysStringLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa78bbbb6ad92dff543eeb42ea280967

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 98KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 100KB - Virtual size: 98KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 12KB - Virtual size: 9KB