19ed409e4dd6bc04f0d05d58c18f304d

Sharing

Copy URL Twitter E-mail

General

Target

19ed409e4dd6bc04f0d05d58c18f304d
Size

296KB
MD5

19ed409e4dd6bc04f0d05d58c18f304d
SHA1

2706df37d505cfd3a09eaded0bda5719319509d5
SHA256

4fd350ce894dee7fb90a7475b27d9b08d3c6ab9ab3c7e94bd4de77486a5f1470
SHA512

dde681446d8e565add2ca20fb5c13379ec81d0e6c03077ae4e6f954ecdceb0db9ee0fb6834ba9e03817835fe1406039967546129fe56c59626697cd2f56f8426
SSDEEP

3072:ptN3wLmczwUUvCie8iIKTWxIxafkhZvR5tV/ZmcLJQlE4uZQTlsNsiAVobgKtmxx:lrlUUb40kTvR5bn54uceLAVqvV6+d4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19ed409e4dd6bc04f0d05d58c18f304d

Files

19ed409e4dd6bc04f0d05d58c18f304d
.dll regsvr32 windows:4 windows x86 arch:x86

ca802c82c5f9afed95fb0850774fab07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
GetShortPathNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
DeleteCriticalSection
lstrcpynA
IsDBCSLeadByte
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
lstrcatA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
lstrcmpiA
InterlockedDecrement
SetEndOfFile
CreateFileA
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetTempFileNameA
GetTempPathA
GetACP
QueryDosDeviceA
VirtualFree
VirtualAlloc
LocalFree
RtlUnwind
GetFileAttributesA
HeapReAlloc
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
HeapSize
SetStdHandle
GetFileType
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
CloseHandle
ReadFile
SetHandleCount
GetStdHandle
GetStartupInfoA
SetFilePointer
GetCPInfo
GetOEMCP
IsBadWritePtr
ExitProcess
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

user32

LoadStringA
GetSystemMetrics
CharUpperA
IsCharAlphaA
IsCharAlphaNumericA
CharNextA

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegEnumValueA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
StgCreateDocfile

oleaut32

RegisterTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
SysAllocStringByteLen

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DoubleToFixed16
Fixed16Cos
Fixed16Div
Fixed16Mul
Fixed16Sin
Fixed16ToDouble
InternalDiv32by32
LongDivFixed16
LongMulFixed16
MPtoOS256
MPtoPixel
MatrixCalc

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MOD_INFO
Size: 4KB - Virtual size: 37B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca802c82c5f9afed95fb0850774fab07

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 20KB - Virtual size: 27KB

MOD_INFO Size: 4KB - Virtual size: 37B

.rsrc Size: 108KB - Virtual size: 106KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 20KB - Virtual size: 27KB

MOD_INFO
Size: 4KB - Virtual size: 37B

.rsrc
Size: 108KB - Virtual size: 106KB

.reloc
Size: 12KB - Virtual size: 11KB