383fd45605fa824ea59405f9bbf631c0

Sharing

Copy URL Twitter E-mail

General

Target

383fd45605fa824ea59405f9bbf631c0
Size

17KB
MD5

383fd45605fa824ea59405f9bbf631c0
SHA1

40a2d70b24321c6df78423ff0fb6a911dec2596d
SHA256

41a4c9b7ecf8e56cb21d99bab69eebf6e30d8708f50f4f6322c9054800cef314
SHA512

c94b823d5a869bcd6207360fb21f0cf01e70d6a8344f3a938a18eb43d212a9344fe78e40c22a8370c552586e7844533845955bfd56b352561134910ea392d3af
SSDEEP

384:SwfVPBpT6V6hACzy+FrY/Bsvb+KmltKecF0N1Ss6pb3XQWoW:rPBpT6EA2ABsvb+Kml4M1sb3X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
383fd45605fa824ea59405f9bbf631c0

Files

383fd45605fa824ea59405f9bbf631c0
.dll windows:4 windows x86 arch:x86

c8897324fbea995d1c294d4d587813b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CopyFileA
ExitProcess
GetDevicePowerState
GetLocaleInfoW
GetShortPathNameW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalFree
IsDBCSLeadByte
LoadModule
LocalCompact
LocalFileTimeToFileTime
ReadConsoleOutputAttribute
RemoveDirectoryA
SetupComm
TlsSetValue
TryEnterCriticalSection
VirtualAllocEx
WideCharToMultiByte

user32

ArrangeIconicWindows
CharPrevW
CheckDlgButton
CreateCaret
DdeConnectList
DdeFreeDataHandle
DdeInitializeA
DefDlgProcW
DestroyCaret
DrawCaptionTempA
EnumWindows
EqualRect
GetKeyNameTextA
GetUserObjectInformationA
GetWindowLongW
GetWindowTextLengthW
MapVirtualKeyW
MonitorFromRect
OemToCharBuffA
OffsetRect
SendIMEMessageExA
SendMessageTimeoutW
SetCursor
SetPropW
ShowWindow
UnregisterDeviceNotification
VkKeyScanA
VkKeyScanW
wsprintfW
wvsprintfA

gdi32

Arc
ArcTo
CloseMetaFile
ColorCorrectPalette
CreateCompatibleBitmap
CreateDIBPatternBrush
CreateFontW
DescribePixelFormat
GdiSetBatchLimit
GetBitmapBits
GetBkColor
GetCharABCWidthsFloatW
GetDCOrgEx
GetKerningPairsW
GetStretchBltMode
GetTextExtentExPointA
PlayEnhMetaFile
PolyBezierTo
ScaleWindowExtEx
SetDIBitsToDevice
SetICMProfileA

Exports

Exports

CmdExec
CmdExecBotID
CmdExecBuild
CmdExecType
CmdExecVersion
CryptKeySet
FileDownload
FileDownloadUnxor
Knock
ModuleDownload
ModuleDownloadUnxor
ModuleLoad
ModuleUnload
ModulesVersionLog
SameFileVersion
SetCmdDelay
SetErrorsURL
SetFileVersion
SetLoadedURL
SetTimeout

Sections

.text
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8897324fbea995d1c294d4d587813b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 12KB

.data Size: 15KB - Virtual size: 28KB

.idata Size: - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 8KB

.text
Size: 512B - Virtual size: 12KB

.data
Size: 15KB - Virtual size: 28KB

.idata
Size: - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 8KB