182b7c897d7a2c91ee2788ec5cef64de

Sharing

Copy URL Twitter E-mail

General

Target

182b7c897d7a2c91ee2788ec5cef64de
Size

72KB
MD5

182b7c897d7a2c91ee2788ec5cef64de
SHA1

50d633add090204e5640e54aac914e4a5771149f
SHA256

c980c5e25245699b9e6853516f2a5df494f8a01ce39972bc4add820eb68855ba
SHA512

1e7f01aa1e6ab1847419e61e7ddcdf99e729a730e0a1c718e3833ee2162a2135417d8b072bc7a467c11178890d03dd18b00bf8381dbdc2a12ebe7626e52aa9f0
SSDEEP

768:P8qw21H2/QPStPFDp9SSXb+LT0ON7sBW7zuQH9K7E1uocCYDLYmws:P8qwkH2FL+LT09BW7zuIQPo1qLYmw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
182b7c897d7a2c91ee2788ec5cef64de

Files

182b7c897d7a2c91ee2788ec5cef64de
.dll regsvr32 windows:4 windows x86 arch:x86

ff7ccf2d4b6664cc3752e7e0a4fc972f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
CloseHandle
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetProcAddress
lstrcpyA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
DisableThreadLibraryCalls
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
ExitProcess
LCMapStringA
LCMapStringW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer

user32

GetWindowTextA
SetWindowTextA
FindWindowExA

oleaut32

SysAllocStringLen
VariantClear
VariantCopy
VariantChangeType
SysStringLen
LoadRegTypeLi
SysFreeString

atl

ord30
ord58
ord32
ord18
ord15
ord16
ord21
ord57
ord23
ord31

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff7ccf2d4b6664cc3752e7e0a4fc972f

Headers

File Characteristics

Imports

kernel32

user32

oleaut32

atl

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 24KB - Virtual size: 31KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 24KB - Virtual size: 31KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB