2256640c93b523edac2d8bd17e4a4874

Sharing

Copy URL

Twitter E-mail

General

Target

2256640c93b523edac2d8bd17e4a4874
Size

381KB
MD5

2256640c93b523edac2d8bd17e4a4874
SHA1

b6702afb23291b1eea711b63173e36c206392a06
SHA256

8dbc22704ca9461313071beb2d1f34c0f166f69c24dc92670767763a4f1e5ce1
SHA512

a220e0a06ead7bb407731d5768e4a7b7bec86865526fa39b803fe8fbd8a845b3755c221a19983ccd2daa56f5eec3beb838b5105ccbba0f64b55a9dd5b8261268
SSDEEP

6144:VtOasyTEBMzM+ExaOgIr1yKZ9GFV37hDjGTsV1XJE97aBxJaZgowyxK+dcySjji0:VsaFqsexhyQGFVr1qsr5EVCJ0gixROb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2256640c93b523edac2d8bd17e4a4874

Files

2256640c93b523edac2d8bd17e4a4874
.dll windows:4 windows x86 arch:x86

8b34c51e67a0861e19835911dfcf4e67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

ExcludeClipRect
GetArcDirection
GetBkColor
GetDeviceCaps
GetStockObject
RestoreDC
ScaleViewportExtEx
DeleteDC
SetDIBits
SetMapMode
SetRectRgn
SetSystemPaletteUse
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
CreateHatchBrush
CreateBitmap
SelectObject
CloseMetaFile

kernel32

FatalExit
FileTimeToLocalFileTime
FillConsoleOutputAttribute
FlushConsoleInputBuffer
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetConsoleWindow
GetCurrentConsoleFont
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetProcessPriorityBoost
GetProcessVersion
GetStartupInfoA
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetTapePosition
GetTickCount
EnterCriticalSection
GetVersion
GetVersionExA
GlobalAddAtomW
GlobalAlloc
GlobalCompact
GlobalFindAtomW
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapWalk
InitializeCriticalSection
IsBadCodePtr
IsBadReadPtr
LCMapStringW
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
MapViewOfFile
MultiByteToWideChar
OpenProcess
Process32FirstW
Process32NextW
QueryPerformanceCounter
RaiseException
ReadConsoleOutputAttribute
RtlMoveMemory
SetCommState
SetErrorMode
SetEvent
SetFileTime
SetSystemPowerState
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFileEx
_lopen
_lread
lstrcatW
lstrcpynW
lstrlenW
CreateToolhelp32Snapshot
ConvertDefaultLocale
AllocConsole
GetUserDefaultLCID

comctl32

ord17

user32

CallWindowProcW
CheckMenuItem
ClientToScreen
CloseClipboard
CloseDesktop
CopyRect
CreatePopupMenu
DdeGetData
DestroyMenu
DispatchMessageW
DrawIconEx
DrawTextW
EnableMenuItem
EnableScrollBar
EnableWindow
EndDeferWindowPos
ExcludeUpdateRgn
FrameRect
GetCapture
GetClassInfoW
GetClipboardSequenceNumber
GetDC
GetDlgItem
GetForegroundWindow
GetKeyState
GetKeyboardLayoutList
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuState
GetNextDlgGroupItem
GetNextDlgTabItem
GetSubMenu
GetSysColor
GetSysColorBrush
GetTopWindow
GetWindowLongW
GetWindowRect
GetWindowTextW
IsIconic
IsWindowEnabled
LoadCursorW
LookupIconIdFromDirectory
MapWindowPoints
ModifyMenuW
PeekMessageW
PostMessageW
PtInRect
RegisterClassW
ReleaseCapture
ReleaseDC
ScrollWindowEx
SendMessageW
SetCursorPos
SetFocus
SetPropW
SetRect
SetShellWindow
SetWindowContextHelpId
SetWindowLongW
SetWindowWord
ShowWindow
SystemParametersInfoW
TabbedTextOutW
TrackMouseEvent
UnregisterClassW
ArrangeIconicWindows
AdjustWindowRectEx

dinput

DirectInputCreateA

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Exports

Exports

AsDecodedObject
BufferError
GetItemString
InPlaceSubtract
NameError
StringFlags
String_FromString
vExecToken

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b34c51e67a0861e19835911dfcf4e67

Headers

File Characteristics

Imports

gdi32

kernel32

comctl32

user32

dinput

winspool.drv

Exports

Exports

Sections

.text Size: 86KB - Virtual size: 86KB

.rdata Size: 194KB - Virtual size: 193KB

.data Size: 69KB - Virtual size: 69KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 86KB - Virtual size: 86KB

.rdata
Size: 194KB - Virtual size: 193KB

.data
Size: 69KB - Virtual size: 69KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 5KB - Virtual size: 4KB