119ce2b122ced11884e65565e70f4566

Sharing

Copy URL Twitter E-mail

General

Target

119ce2b122ced11884e65565e70f4566
Size

1005KB
MD5

119ce2b122ced11884e65565e70f4566
SHA1

147f53c0484eb5fa6bc1936f3b432fe67b9d6a52
SHA256

ba89ad6b8f2d7f372d89ef41000ccb17230bef7cc309e5b1c02e76b76da8dcd6
SHA512

4f3468a1e14e1f3a1c284e7bf3cfb2628934cb6a90143bcde0907879b3b12746d43b0866264dc82a5b873caeb8592e9928f8ba39f904dcaf60d1bb2289f4c4da
SSDEEP

3072:TQuZG/ZMiE61omqY7dtACZrzNp/c3Wh4CyPuf5Vlxl+ROXReazAOF/uIAPX2hjik:EEat3rg3s4CyPuffLvseT/uZ4ji8CA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
119ce2b122ced11884e65565e70f4566

Files

119ce2b122ced11884e65565e70f4566
.dll windows:4 windows x86 arch:x86

e1f1c7d8ae56931d7bcdfffa1af66e75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDC
EnableWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
IsMenu
GetMenu

kernel32

RaiseException
ResetEvent
GetFileType
HeapDestroy
GetStartupInfoA
lstrcmpA
GetProcessHeap
GetCommandLineA
FindFirstFileA
lstrcmpiA
VirtualAllocEx
GetCurrentProcess
ExitProcess
SetEvent
GetLocalTime
GetCurrentThreadId
GetLocaleInfoA
VirtualAlloc
InitializeCriticalSection
Sleep
GetCurrentThread
LoadLibraryExA
GlobalDeleteAtom
LoadResource
SetHandleCount
DeleteFileA
GetEnvironmentStrings
HeapFree
SetFilePointer
IsBadReadPtr
EnumCalendarInfoA
GetFileAttributesA
SetErrorMode
MoveFileA
ExitThread
FindResourceA
HeapAlloc
SetLastError
CreateThread
GetCommandLineW
LoadLibraryA
CompareStringA
lstrlenA
GetTempPathA
SetEndOfFile
WaitForSingleObject
GetTickCount
lstrcatA
GlobalAlloc
MulDiv
SetThreadLocale
GetDiskFreeSpaceA
GetModuleHandleA
VirtualFree
ReadFile

ole32

CoRevokeClassObject
CreateBindCtx
CreateStreamOnHGlobal
CoRegisterClassObject
ReleaseStgMedium
CreateOleAdviseHolder

comctl32

ImageList_Remove
ImageList_Draw
ImageList_Add
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Create
ImageList_GetBkColor

Exports

Exports

yTD1JsjHvLV3wZ@12
tGjiuXTvt@12
KpJXZB0ZWQEFt
uLhLu7V
_R5oWsTd@8
FnJpEjONbuc4ke
_vo0x88qlP7@24
xi7Wyd6XIV
FSwLmRapQGmsU@16
_kZSVbvQP9_@8
fgIxIURbcb@16
_V3SVl@20
NOrFbsKG3Ux
_f32_ouV
1X2fCTnytmo
_Ea5xv23
_CurrbP
_wxYJM3Jc@12
zZ49iUcKuhtZ@24
_eTviw
8npm3jwmzp
_da16albPz@12
N8f7MapE@16
_FNK15_atp@20
_5W11paepL02i
1OONwLl68@16
wegCl@12
tw8lm26M
_iMZ70OHTvxS@24
zycV69HsH@12
o7hq5dgciVM_mq@20
_NP_plFYQ
_UPRjvnYWj3RHHH
MYjjXvOQaZxa8
Xs4tj@12
_oma9c8X
_JBTKyl9ohDO@16
_cGgIbj5Ecv
qILds7XAx
ISX1Ig_yScmA5
NFdwkZEW8@24
_KydcjOMo_5
_oh6HeimlLPRJcY@12
VWnGT8l@8
_gfXO5@12
_VlcFYPH@8
1TZ4h
_lYCpOBt4@16
VcPYk5gobWeFEd
PeRxHyJcZvrx4g@20
_EKMxXyhuv9uly@8
_htab7w3
y8CQAoSExZ9L7j
_KtfnNG@12
WQXgOmZ@8
ipOnN12@4
_YHJDA0zG
_u5IPyiGRG9@16
_lQ6ccxA9V2Z@8
_N5703ONqSUjKE_@24
_SSPrg
_8LwmHT@16
5vU9zMA_qsQZn
_kyTVouaFltrZU@4
_Rp7guJ
NmonPAmYc6

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iudata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1f1c7d8ae56931d7bcdfffa1af66e75

Headers

File Characteristics

Imports

user32

kernel32

ole32

comctl32

Exports

Exports

Sections

CODE Size: 25KB - Virtual size: 24KB

DATA Size: 783KB - Virtual size: 782KB

.iudata Size: 172KB - Virtual size: 171KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 5KB - Virtual size: 5KB

CODE
Size: 25KB - Virtual size: 24KB

DATA
Size: 783KB - Virtual size: 782KB

.iudata
Size: 172KB - Virtual size: 171KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 5KB - Virtual size: 5KB