1164d29bc489bcf74b2ef0583daa7e21

General

Target

1164d29bc489bcf74b2ef0583daa7e21
Size

44KB
MD5

1164d29bc489bcf74b2ef0583daa7e21
SHA1

2c671afba1e96503757d257ad6571205f0447322
SHA256

ee71dcc490de7945233704b35c5df71aa28d2be57ebc78d1b07469c17cb35394
SHA512

3cfd72ab73de8cc4485c8b6f372def60d195bc20fa04e97cfc123faa154101be4baa59f1f416fe4834680f5e0fbbea08cbb0818266e2ec5fcc1a063bb3db5299
SSDEEP

768:HZewcu1xf8uifVolVyqI6ItpkavE2F1r50UgLa1b:5ewcu1xUuzl/I0Cp61La9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1164d29bc489bcf74b2ef0583daa7e21

Files

1164d29bc489bcf74b2ef0583daa7e21
.dll regsvr32 windows:4 windows x86 arch:x86

b0e2b56363d0174b236389812a4c8414

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateMutexA
GetLocalTime
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
InterlockedIncrement
CreateThread
VirtualAlloc
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
WinExec

user32

ShowWindow
CreateWindowExA
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowsHookExA
UnhookWindowsHookEx
KillTimer
SetTimer
RegisterClassExA
FindWindowExA
PostMessageA
DefWindowProcA
CallNextHookEx

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

SHGetValueA

msvcrt

fclose
_adjust_fdiv
malloc
_initterm
free
_except_handler3
strrchr
atoi
strchr
fopen
fwrite
_stricmp
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
__CxxFrameHandler

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0e2b56363d0174b236389812a4c8414

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

wininet

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 874B

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 874B