25790689aae2a17bfb87384e2f40f94e

Sharing

Copy URL Twitter E-mail

General

Target

25790689aae2a17bfb87384e2f40f94e
Size

890KB
MD5

25790689aae2a17bfb87384e2f40f94e
SHA1

ca0d2318cc272f44519b9794ddb23dc8d198f061
SHA256

0b4d113ee24afec8bc05713848b79bf59bee9c11855125f050d5fe8e20ef18da
SHA512

1dc4ebd041fce936bf31e24c0bf40b3c6938dc824f161d69df94065ef7b9fba1ec4b6ad7ecec840d112f42452389676d45d39c2701acf284083fbb547d13ed84
SSDEEP

12288:Je5gz96uhl8b81jXMqT9zSCdLP64xEel2NAcSdW23n73OaAC5AYjrIV:WA9phlV5LdaNSn73OzYjr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25790689aae2a17bfb87384e2f40f94e

Files

25790689aae2a17bfb87384e2f40f94e
.dll windows:4 windows x86 arch:x86

ab690354da2222c92cdd8b30789bbfca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
_lopen
CreateMutexA
GetProfileStringA
_lclose
_llseek
_lread
LocalFree
lstrcpyA
LocalAlloc
GlobalLock
GlobalReAlloc
GlobalAlloc
GetCurrentThreadId
GlobalUnlock
GlobalFree
WaitForSingleObject
GetModuleHandleA
GetCommandLineA
GetProcAddress
WriteFile
WideCharToMultiByte
LoadLibraryA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
ReleaseMutex
MultiByteToWideChar
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetFileType
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapAlloc
HeapFree
GetLastError
HeapCreate
GetCurrentProcess
GetVersion
HeapDestroy
ExitProcess
VirtualFree
VirtualAlloc
TerminateProcess

user32

IsDialogMessageA
ReleaseDC
GetDC
IsRectEmpty
DestroyWindow
SetDlgItemTextA
LoadStringA
wsprintfA
CreateDialogParamA
GetFocus
DrawTextExA
DispatchMessageA
TranslateMessage
GetClientRect
GetDlgItem
PeekMessageA
SetFocus
ClientToScreen
IntersectRect
GetWindowRect

gdi32

CreateCompatibleDC
StretchDIBits
CreatePalette
StartPage
GetSystemPaletteEntries
RealizePalette
GetDeviceCaps
GetDIBits
GetStockObject
SelectPalette
DeleteDC
SelectObject
GetObjectA
CreateCompatibleBitmap
CreateDCA
BitBlt
SetAbortProc
SetStretchBltMode
DeleteObject
EndDoc
StartDocA
EndPage
AbortDoc

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

AppendPopup
ContinueRunObject
CreateObject
CreateRunObject
DefaultOI
DestroyRunObject
DisplayRunObject
EditParameter
EditorDisplay
EndModifyObject
GetActionCodeFromMenu
GetActionInfos
GetActionMenu
GetActionString
GetActionTitle
GetConditionCodeFromMenu
GetConditionInfos
GetConditionMenu
GetConditionString
GetConditionTitle
GetDesc
GetExpressionCodeFromMenu
GetExpressionInfos
GetExpressionMenu
GetExpressionString
GetExpressionTitle
GetInfos
GetObjInfos
GetObjectCursor
GetObjectRect
GetParameterString
GetRunObjectDataSize
GetRunObjectInfos
HandleRunObject
InitObject
InitParameter
IsTransparent
LoadObject
MakeIcon
ModifyObject
PauseRunObject
PrepareToWriteObject
PutObject
ReInitRunObject
RebuildExt
ReinitObject
RemoveObject
SelectPopup
UnloadObject
UpdateEditStructure
UpdateFileNames

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab690354da2222c92cdd8b30789bbfca

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 5KB - Virtual size: 5KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 24KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 5KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB