221aacab50811d6b3aa3437980bd67e6

Sharing

Copy URL

Twitter E-mail

General

Target

221aacab50811d6b3aa3437980bd67e6
Size

208KB
MD5

221aacab50811d6b3aa3437980bd67e6
SHA1

a9bd404f576d7bf8911ce6c067c16819d355e2d7
SHA256

17b804e74add38941e154d67481907433c51b92e14decf4cf68e1c4052c6e91c
SHA512

d1940ecf0a0abd0ea3ba8f6b1fb209a19f5762ca96bedaadeb1f1f22a3ff2bfb53319ebeb7b978361421c63eedabd568d3cf15f3ec106de76225d25ed96aff04
SSDEEP

3072:IRDonnJTeXlRwc6619ib2SQgkzW5SsGAvNmft6sKiTgHzv/Q1B2Vyg27WQmo+C+a:YUnnJTeXQcl9i/kzWrGQNImD8nxMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
221aacab50811d6b3aa3437980bd67e6

Files

221aacab50811d6b3aa3437980bd67e6
.dll windows:6 windows x86 arch:x86

4d75ccc802ba88a6c4fb39b87f075529

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_vsnprintf
towupper
_except_handler4_common
_amsg_exit
_initterm
free
malloc
_XcptFilter
memcpy
wcschr
_vsnwprintf
_stricmp
memset

ntdll

RtlInitUnicodeString
RtlNtStatusToDosError
RtlInitString
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
EtwTraceMessage
RtlFreeHeap
RtlAllocateHeap
RtlImageNtHeader
RtlFreeUnicodeString
RtlInitializeCriticalSection
RtlAnsiStringToUnicodeString
RtlInitAnsiString

api-ms-win-core-localregistry-l1-1-0

RegDeleteKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey

user32

GetThreadDesktop
SetThreadDesktop
EnumThreadWindows
GetWindowThreadProcessId
PostMessageW
LoadStringW
SendInput
LoadBitmapW

comctl32

ord386
ord328
ord329
ord335
ord334
ord344

kernel32

RegQueryValueExA
CreateThread
ResumeThread
GetTickCount64
WaitForMultipleObjects
MultiByteToWideChar
GetCurrentThread
GetSystemTime
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
LockResource
LoadResource
FindResourceExW
LocaleNameToLCID
GetSystemDefaultLCID
GetUserDefaultLCID
SystemTimeToFileTime
FreeLibrary
GetModuleFileNameW
HeapAlloc
HeapFree
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
HeapCreate
DisableThreadLibraryCalls
HeapDestroy
DeleteCriticalSection
GetLastError
CloseHandle
UnregisterWaitEx
CancelWaitableTimer
RegisterWaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
lstrlenW
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
CompareFileTime
CreateThreadpoolCleanupGroup
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
WaitForSingleObject
SetEvent
Sleep
SubmitThreadpoolWork
CreateThreadpoolWork
CreateEventW
WideCharToMultiByte
GetCurrentProcessId
GetCurrentThreadId
ResetEvent
DelayLoadFailureHook
GetProcAddress
InterlockedCompareExchange
LoadLibraryExA
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
VirtualProtect
VirtualAlloc
GetModuleHandleW
GetSystemInfo
VirtualQuery
GetVersion
LoadLibraryW
GetThreadLocale

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d75ccc802ba88a6c4fb39b87f075529

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

api-ms-win-core-localregistry-l1-1-0

user32

comctl32

kernel32

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 74KB

.data Size: 63KB - Virtual size: 62KB

.rsrc Size: 66KB - Virtual size: 66KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 75KB - Virtual size: 74KB

.data
Size: 63KB - Virtual size: 62KB

.rsrc
Size: 66KB - Virtual size: 66KB

.reloc
Size: 3KB - Virtual size: 2KB