2bab54e5b50d5963bff188f2c4a822f2

Sharing

Copy URL Twitter E-mail

General

Target

2bab54e5b50d5963bff188f2c4a822f2
Size

35KB
MD5

2bab54e5b50d5963bff188f2c4a822f2
SHA1

0377597b30ffb647ed154744f829c733e3585f29
SHA256

a35f6908ce4bf6e7aefac5b0e836ddd3445696d6dfdd23e090f8bd14978c8443
SHA512

8685b13ed42fedb40e23b962efbeea20ff714acba6021914b42c9a3526bc80ed7c2f0eef55dbd385426fd7e7d41a8badeef0ab8d579653b452af8ae77c9803ea
SSDEEP

768:/lQ8wbX7WLWfmqNLsku7IfrjzdRRS8azkfy/owttpItZYCb:FaCWfmq1CsfTaJsZY8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bab54e5b50d5963bff188f2c4a822f2

Files

2bab54e5b50d5963bff188f2c4a822f2
.dll windows:1 windows x86 arch:x86

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BackupRead
DefineDosDeviceW
EnumCalendarInfoW
ExitProcess
FindClose
GetCommMask
GetCommState
GetCompressedFileSizeA
GetConsoleAliasExesA
GetConsoleAliasesA
GetConsoleAliasesW
GetDefaultCommConfigA
GetFileSize
GetFileType
GetNumberFormatW
GetNumberOfConsoleMouseButtons
GetStringTypeExA
GetStringTypeExW
GlobalUnfix
Heap32First
InterlockedExchangeAdd
OpenMutexA
PeekNamedPipe
SetConsoleCP
SetCurrentDirectoryW
SetFileApisToANSI
SetNamedPipeHandleState
SetThreadAffinityMask
ShowConsoleCursor
Sleep
TlsAlloc
TransmitCommChar
VirtualProtect
WriteConsoleW
WriteFileEx
_lclose
_lopen
lstrcmpA
lstrcmpiA

user32

AttachThreadInput
BlockInput
CheckMenuItem
CloseDesktop
CreateCaret
CreateDialogParamW
DdeDisconnect
DdeUninitialize
DispatchMessageW
EndDeferWindowPos
EnumDesktopsA
EnumWindows
GetClassInfoExW
GetClassWord
GetDlgItem
GetMenuState
GetParent
GetPropA
GetTitleBarInfo
GetUserObjectInformationA
LoadAcceleratorsW
LoadCursorFromFileW
OffsetRect
PeekMessageW
PtInRect
RegisterWindowMessageA
SetFocus
SetMenuItemInfoW
SetUserObjectInformationW
ValidateRect
WindowFromPoint

gdi32

CreateFontW
DeleteEnhMetaFile
EnumFontFamiliesA
GdiComment
GetCharWidthFloatW
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCOrgEx
GetDeviceGammaRamp
GetLogColorSpaceW
GetPath
GetPixel
GetPixelFormat
GetTextFaceA
GetTextFaceW
PolyBezierTo
SelectObject
SetTextJustification

comdlg32

ChooseFontW

comctl32

ImageList_DragLeave

shell32

SHBrowseForFolderA
SHFileOperationW

advapi32

AccessCheck
AddAce
BuildSecurityDescriptorW
BuildTrusteeWithNameA
CryptGenKey
ElfNumberOfRecords
ElfOldestRecord
ElfReportEventW
EncryptFileW
GetCurrentHwProfileA
GetExplicitEntriesFromAclW
GetLengthSid
GetSecurityInfoExW
GetServiceKeyNameW
LsaQueryInfoTrustedDomain
RegCreateKeyW
RegLoadKeyA
RegQueryMultipleValuesW
SetServiceStatus

msvcrt

_callnewh
_chdrive
_execvp
_heapused
_outpd
_spawnvp
_strncoll
_unlock
_wenviron
_wexecle
_wexecv
_wexecvp
fopen
iswalnum
iswctype
perror
realloc
rename
strncpy
tan
towupper
ungetwc

Exports

Exports

AuIGxlp
AyBxcgPhGgCUOEd
Erhnwb
LwesimJvqycI
PuyHbAuCEQGfaai
QihpwwaANLeUjwwzg
QkjOfliofg
SnhicxHNzXm
TVfEpLeBwutDxlf
TopTOXNoehdsfhk
UjFrftmwu

Sections

.text
Size: 7KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

shell32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 83KB

.data Size: 23KB - Virtual size: 31KB

.xdata Size: 512B - Virtual size: 309B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 83KB

.data
Size: 23KB - Virtual size: 31KB

.xdata
Size: 512B - Virtual size: 309B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 1KB - Virtual size: 1KB