37eea44b42e4dd4442404cd00a0acf5d

Sharing

Copy URL Twitter E-mail

General

Target

37eea44b42e4dd4442404cd00a0acf5d
Size

17KB
MD5

37eea44b42e4dd4442404cd00a0acf5d
SHA1

8353bc7b0991a5616d41d84b6ea087640bb6e686
SHA256

496f260bcf2a51ade362a537f5a269ae932db24dce1e30cfcb3485a8451f07bd
SHA512

8244f710ab9f3ee44387c7fa43ab07fdf8684013d3cc593738ac93243023b1998beb713e94ba86f289271a64d5ae18e1a474901c5c860a4cbc3575dbe6a70a7f
SSDEEP

384:J9bgjgLyPhVy1rhbqnQhRRBsufcqZjP+snSBhoqQeGB:JGkePHyDuYRL9fZjPXnGeFeGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37eea44b42e4dd4442404cd00a0acf5d

Files

37eea44b42e4dd4442404cd00a0acf5d
.dll windows:4 windows x86 arch:x86

588ed16e1a201e9fa2b014b05978301a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileW
CreateDirectoryA
CreateSocketHandle
DefineDosDeviceW
EnumCalendarInfoA
EnumDateFormatsA
ExitProcess
GetCommState
GetPrivateProfileStringW
GetProfileIntW
GetStdHandle
GetWindowsDirectoryA
IsDebuggerPresent
ReadConsoleOutputAttribute
ReadConsoleW
RtlZeroMemory
SetCommTimeouts
SetFileApisToOEM
SetStdHandle
SetVolumeLabelA
UnmapViewOfFile
VirtualAllocEx

advapi32

BuildImpersonateExplicitAccessWithNameW
CreatePrivateObjectSecurity
CryptContextAddRef
CryptDuplicateKey
CryptHashSessionKey
GetExplicitEntriesFromAclA
GetKernelObjectSecurity
GetServiceKeyNameA
GetTrusteeTypeA
IsValidSid
LogonUserW
NotifyChangeEventLog
ObjectOpenAuditAlarmA
ReadEventLogW
RegQueryMultipleValuesW
RegSaveKeyA
RegSetValueExA
SetEntriesInAclW
SetKernelObjectSecurity
SetSecurityInfoExW

user32

ChangeDisplaySettingsW
ChildWindowFromPointEx
CreateDesktopW
CreateIconIndirect
DdeAddData
DdeConnectList
DdeGetData
DdeSetQualityOfService
DefFrameProcA
DialogBoxIndirectParamA
GetKeyState
HideCaret
InsertMenuA
LoadCursorFromFileA
LoadImageW
LoadStringA
LockWindowUpdate
MonitorFromPoint
OemToCharBuffA
RegisterLogonProcess
RegisterWindowMessageA
ScrollWindow
SetCursorPos
SetProcessDefaultLayout
SetScrollRange
TileWindows
ToUnicode
UnhookWindowsHook
UserClientDllInitialize

gdi32

CreateICA
CreatePalette
CreatePatternBrush
DeleteObject
ExtTextOutA
FixBrushOrgEx
GdiComment
GetArcDirection
GetBoundsRect
GetCharWidth32A
GetCurrentPositionEx
GetDIBits
GetGraphicsMode
GetLogColorSpaceW
GetSystemPaletteUse
GetTextColor
GetTextExtentPointW
OffsetViewportOrgEx
PathToRegion
PlayMetaFileRecord
PtInRegion
RemoveFontResourceA
RemoveFontResourceW
SetBitmapDimensionEx
SetDIBColorTable
SetICMMode
SetMetaFileBitsEx
SetTextCharacterExtra
StrokePath

Exports

Exports

CmdExec
CmdExecBotID
CmdExecBuild
CmdExecType
CmdExecVersion
CryptKeySet
FileDownload
FileDownloadUnxor
Knock
ModuleDownload
ModuleDownloadUnxor
ModuleLoad
ModuleUnload
ModulesVersionLog
SameFileVersion
SetCmdDelay
SetErrorsURL
SetFileVersion
SetLoadedURL
SetTimeout

Sections

.text
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

588ed16e1a201e9fa2b014b05978301a

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 8KB

.data Size: 16KB - Virtual size: 20KB

.idata Size: - Virtual size: 16KB

.rsrc Size: - Virtual size: 8KB

.text
Size: 512B - Virtual size: 8KB

.data
Size: 16KB - Virtual size: 20KB

.idata
Size: - Virtual size: 16KB

.rsrc
Size: - Virtual size: 8KB