ade375e5c7bd5df44fcca3ead5f58f2b50e7d95736aa5a14f1443651d51c767f

Sharing

Copy URL Twitter E-mail

General

Target

ade375e5c7bd5df44fcca3ead5f58f2b50e7d95736aa5a14f1443651d51c767f
Size

308KB
MD5

ca6765cefe8f72e9afd3e374c90e53ab
SHA1

9c369e97d071a0282c8f70ca20a3746b7136e35c
SHA256

ade375e5c7bd5df44fcca3ead5f58f2b50e7d95736aa5a14f1443651d51c767f
SHA512

5136e082c23ac620a2b155a7da17fac85076e2917c829a5eb9d73b942e071dd02534e634abf092442a4fd754c9a8af8813d53d67b03f9ac2b52cb1f0b5620861
SSDEEP

3072:Z9u3cD4agdHHVX/8R20a73/SrNPXBq4Ezl+CPOEIGZ:Z9XA/w2r/oZGICGEjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ade375e5c7bd5df44fcca3ead5f58f2b50e7d95736aa5a14f1443651d51c767f

Files

ade375e5c7bd5df44fcca3ead5f58f2b50e7d95736aa5a14f1443651d51c767f
.dll regsvr32 windows:4 windows x64 arch:x64

ee52096082137e7b3ce8b71bef939dfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

d3d9

Direct3DCreate9

ddraw

DirectDrawCreateEx

dsound

DirectSoundCaptureEnumerateW
DirectSoundEnumerateW

kernel32

CloseHandle
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
FormatMessageW
GetComputerNameW
GetDateFormatW
GetEnvironmentVariableW
GetLocalTime
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
GetTickCount
GetTimeFormatW
GetVersionExW
GetWindowsDirectoryW
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
K32EnumProcessModules
K32EnumProcesses
K32GetModuleBaseNameW
LoadLibraryW
LoadResource
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
SizeofResource
lstrcmpW

ntdll

_vsnprintf

ole32

CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromGUID2

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantCopy
VariantInit

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcschr
wcsrchr

user32

EnumDisplayDevicesW
LoadStringW
wsprintfW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 400B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee52096082137e7b3ce8b71bef939dfc

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

ddraw

dsound

kernel32

ntdll

ole32

oleaut32

ucrtbase

user32

version

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 176B

.rodata Size: 4KB - Virtual size: 24B

.rdata Size: 48KB - Virtual size: 45KB

.pdata Size: 4KB - Virtual size: 864B

.xdata Size: 4KB - Virtual size: 936B

.bss Size: - Virtual size: 400B

.edata Size: 72KB - Virtual size: 71KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 208B

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 176B

.rodata
Size: 4KB - Virtual size: 24B

.rdata
Size: 48KB - Virtual size: 45KB

.pdata
Size: 4KB - Virtual size: 864B

.xdata
Size: 4KB - Virtual size: 936B

.bss
Size: - Virtual size: 400B

.edata
Size: 72KB - Virtual size: 71KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 208B