382bec2db373ee8a0febbef410ae1425

Sharing

Copy URL Twitter E-mail

General

Target

382bec2db373ee8a0febbef410ae1425
Size

136KB
MD5

382bec2db373ee8a0febbef410ae1425
SHA1

88e259d5505533d7e2d2e3588be58441d1c4acf3
SHA256

28fd5b549c50ca4eb6a91810dec30cb3c84792e0955af0d90c6db66f2993be26
SHA512

89c3b6a74c4aa14700e3478a67cb90e3210f5f4256ec107a9c8a889684d15d9c72e276b0f1b834222446554cf740ff1437cfe00ddf55ddeb56ea77652959072f
SSDEEP

3072:DxrgnGBbqxcXY9Wx0tmG1pHSZSaMZjy50pRkJW3YlBHpf:DNgnwbqxfWxjG1p/aMs/JVHpf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
382bec2db373ee8a0febbef410ae1425

Files

382bec2db373ee8a0febbef410ae1425
.dll windows:4 windows x86 arch:x86

7f3844de161ab2abb10a15e4a7d8f612

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

DeleteUrlCacheEntry

kernel32

TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleA
Sleep
VirtualProtect
CreateProcessA
LoadLibraryA
FreeLibrary
GetPrivateProfileStringA
DeleteFileA
GetPrivateProfileIntA
CreateThread
GetModuleFileNameA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetVersionExA
LCMapStringA
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
CloseHandle
GetSystemInfo
VirtualQuery
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale

user32

GetAsyncKeyState
SetCursorPos

opengl32

glClearColor
glColor3f
glIsEnabled
glDisable
glGetFloatv
glEnable
glBlendFunc
glColor4f
glDepthRange
glTexEnvi

Exports

Exports

CreateInterface

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f3844de161ab2abb10a15e4a7d8f612

Headers

File Characteristics

Imports

wininet

kernel32

user32

opengl32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 8KB - Virtual size: 17KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 17KB

.reloc
Size: 12KB - Virtual size: 8KB