21052d3148a3fc9f9529632849a66ddc

Sharing

Copy URL Twitter E-mail

General

Target

21052d3148a3fc9f9529632849a66ddc
Size

1005KB
MD5

21052d3148a3fc9f9529632849a66ddc
SHA1

05472477dd3d353f9e3b8e67a795cd2938310bea
SHA256

72a719f65fae417661ba5c6cefa5ccd3b287de96822dbbe24fa34e3f4ad8da03
SHA512

943edff9332fa1eea8567ed6f8e59bfc7711d774159322d125cd0a6c8a36b7b315c6d77142cbcc7302852a60438d7a565072af39b2573ae768cd58bcfce7116b
SSDEEP

3072:TQuZG/ZMiE61oqqY7dtACZrzNp/c3Wh4CyPuf5Vlxl+ROXReazAOF/uIAPX2hjik:EE2t3rg3s4CyPuffLvseT/uZ4ji8CA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21052d3148a3fc9f9529632849a66ddc

Files

21052d3148a3fc9f9529632849a66ddc
.dll windows:4 windows x86 arch:x86

e1f1c7d8ae56931d7bcdfffa1af66e75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDC
EnableWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
IsMenu
GetMenu

kernel32

RaiseException
ResetEvent
GetFileType
HeapDestroy
GetStartupInfoA
lstrcmpA
GetProcessHeap
GetCommandLineA
FindFirstFileA
lstrcmpiA
VirtualAllocEx
GetCurrentProcess
ExitProcess
SetEvent
GetLocalTime
GetCurrentThreadId
GetLocaleInfoA
VirtualAlloc
InitializeCriticalSection
Sleep
GetCurrentThread
LoadLibraryExA
GlobalDeleteAtom
LoadResource
SetHandleCount
DeleteFileA
GetEnvironmentStrings
HeapFree
SetFilePointer
IsBadReadPtr
EnumCalendarInfoA
GetFileAttributesA
SetErrorMode
MoveFileA
ExitThread
FindResourceA
HeapAlloc
SetLastError
CreateThread
GetCommandLineW
LoadLibraryA
CompareStringA
lstrlenA
GetTempPathA
SetEndOfFile
WaitForSingleObject
GetTickCount
lstrcatA
GlobalAlloc
MulDiv
SetThreadLocale
GetDiskFreeSpaceA
GetModuleHandleA
VirtualFree
ReadFile

ole32

CoRevokeClassObject
CreateBindCtx
CreateStreamOnHGlobal
CoRegisterClassObject
ReleaseStgMedium
CreateOleAdviseHolder

comctl32

ImageList_Remove
ImageList_Draw
ImageList_Add
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Create
ImageList_GetBkColor

Exports

Exports

yTD1JsjHvLV3wZ@12
tGjiuXTvt@12
KpJXZB0ZWQEFt
uLhLu7V
_R5oWsTd@8
FnJpEjONbuc4ke
_vo0x88qlP7@24
xi7Wyd6XIV
FSwLmRapQGmsU@16
_kZSVbvQP9_@8
fgIxIURbcb@16
_V3SVl@20
NOrFbsKG3Ux
_f32_ouV
1X2fCTnytmo
_Ea5xv23
_CurrbP
_wxYJM3Jc@12
zZ49iUcKuhtZ@24
_eTviw
8npm3jwmzp
_da16albPz@12
N8f7MapE@16
_FNK15_atp@20
_5W11paepL02i
1OONwLl68@16
wegCl@12
tw8lm26M
_iMZ70OHTvxS@24
zycV69HsH@12
o7hq5dgciVM_mq@20
_NP_plFYQ
_UPRjvnYWj3RHHH
MYjjXvOQaZxa8
Xs4tj@12
_oma9c8X
_JBTKyl9ohDO@16
_cGgIbj5Ecv
qILds7XAx
ISX1Ig_yScmA5
NFdwkZEW8@24
_KydcjOMo_5
_oh6HeimlLPRJcY@12
VWnGT8l@8
_gfXO5@12
_VlcFYPH@8
1TZ4h
_lYCpOBt4@16
VcPYk5gobWeFEd
PeRxHyJcZvrx4g@20
_EKMxXyhuv9uly@8
_htab7w3
y8CQAoSExZ9L7j
_KtfnNG@12
WQXgOmZ@8
ipOnN12@4
_YHJDA0zG
_u5IPyiGRG9@16
_lQ6ccxA9V2Z@8
_N5703ONqSUjKE_@24
_SSPrg
_8LwmHT@16
5vU9zMA_qsQZn
_kyTVouaFltrZU@4
_Rp7guJ
NmonPAmYc6

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iudata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1f1c7d8ae56931d7bcdfffa1af66e75

Headers

File Characteristics

Imports

user32

kernel32

ole32

comctl32

Exports

Exports

Sections

CODE Size: 25KB - Virtual size: 24KB

DATA Size: 783KB - Virtual size: 782KB

.iudata Size: 172KB - Virtual size: 171KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 5KB - Virtual size: 5KB

CODE
Size: 25KB - Virtual size: 24KB

DATA
Size: 783KB - Virtual size: 782KB

.iudata
Size: 172KB - Virtual size: 171KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 5KB - Virtual size: 5KB