11891893977cbb0d60aa6ac290df258d

Sharing

Copy URL Twitter E-mail

General

Target

11891893977cbb0d60aa6ac290df258d
Size

56KB
MD5

11891893977cbb0d60aa6ac290df258d
SHA1

e136b8037660e46eb11032a2cede285163b8ee9c
SHA256

44f096ef66e761a99711b6b9a024ae07ee960c083ed1ca1be3f3625da60e54f9
SHA512

fcf62fec8e180421fd5668788f608c28c2e3953675c28f1a2e0aba573af289ce7e606346e551c41639f91b6c2a172b44ad00498249eac54bb346180b863e21b5
SSDEEP

1536:cZ8v+6RZuLYCG9IEMy66NRvEktAa3MFbn4rr6k7Z:TuLEajAdtDMmf6k7Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11891893977cbb0d60aa6ac290df258d

Files

11891893977cbb0d60aa6ac290df258d
.dll windows:4 windows x86 arch:x86

f551dbb21e755142cb099e86627a66d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SelectObject
SetBkMode
CreateFontA
GetObjectA
GetStockObject
DeleteObject

netapi32

Netbios

setupapi

SetupIterateCabinetA

wininet

InternetOpenA
HttpOpenRequestA
HttpSendRequestA
InternetCrackUrlA
InternetConnectA
InternetReadFile
InternetGetConnectedState
InternetCloseHandle

msvcrt

strcpy
_splitpath
_snprintf
strtok
_beginthreadex
__CxxFrameHandler
sprintf
wcscat
wcscpy
memcpy
wcslen
wcschr
wcscmp
_CxxThrowException
_except_handler3
memset
rand
fclose
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
atoi
_fullpath
_access
memmove
strcat
_mbsstr
strlen
malloc
free
_endthreadex
strcmp
strstr
strncpy
_vsnprintf
sscanf
??2@YAPAXI@Z
_itoa
??3@YAXPAX@Z
fgets
fopen
fseek

shlwapi

PathRemoveBackslashA
PathRemoveExtensionA
PathFindExtensionA
StrStrA
StrStrIA
SHGetValueA
StrChrA
StrRChrA
SHGetValueW
SHSetValueW
SHDeleteValueA
SHSetValueA
PathFindFileNameA
PathRemoveFileSpecA
PathCombineA
StrTrimA
PathStripToRootA
PathAddExtensionA
StrCmpNIA

kernel32

RaiseException
LocalAlloc
InterlockedExchange
MoveFileA
GetExitCodeThread
TerminateThread
CreateThread
InterlockedCompareExchange
Sleep
GetTempPathA
CreateProcessA
ReleaseMutex
GetFileSize
SetFilePointer
FlushFileBuffers
SetEndOfFile
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
WriteFile
GetSystemDirectoryA
CreateFileA
GetFileAttributesA
SetFileAttributesA
GetTempFileNameA
DeleteFileA
MoveFileExA
GetWindowsDirectoryA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcmpA
FreeLibrary
LoadLibraryA
GetProcAddress
SetLastError
GetModuleFileNameW
GetCurrentThreadId
CreateMutexA
GetLastError
CloseHandle
lstrcpyA
WaitForSingleObject
GetLocalTime
GetTickCount
MultiByteToWideChar
lstrcmpiA
DisableThreadLibraryCalls
GetModuleFileNameA
GetShortPathNameA
lstrcatA
GetVersionExA
lstrlenA

user32

InvalidateRect
MessageBoxA
DispatchMessageA
TranslateMessage
GetMessageA
CloseDesktop
CloseWindowStation
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetThreadDesktop
GetProcessWindowStation
PostQuitMessage
DefWindowProcA
ShowWindow
CreateWindowExA
RegisterClassExA
GetClassInfoExA
SendMessageA
FindWindowA
DrawTextA
OffsetRect
SetRect
GetClientRect
SetDlgItemTextA
GetParent
EndPaint
BeginPaint
DialogBoxParamA
LoadCursorA
GetDlgItem
EndDialog
GetDlgItemTextA

shell32

SHGetSpecialFolderPathA

ws2_32

ioctlsocket
send
recv
connect
select
closesocket
htons
WSAStartup
WSACleanup
gethostbyname
WSAGetLastError
inet_addr
socket

Exports

Exports

Service
ServiceMain

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f551dbb21e755142cb099e86627a66d0

Headers

File Characteristics

Imports

gdi32

netapi32

setupapi

wininet

msvcrt

shlwapi

kernel32

user32

shell32

ws2_32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB