3bbc2b95caced2074d3293ef466be1c8

Sharing

Copy URL

Twitter E-mail

General

Target

3bbc2b95caced2074d3293ef466be1c8
Size

348KB
MD5

3bbc2b95caced2074d3293ef466be1c8
SHA1

369b67083eb56db172860d87b45cac4c3a9a37c0
SHA256

3236413e9780875ec4d17cd70045246ec3b293c2218304dd4224fad5cc89a265
SHA512

c60fbd4f583f2bbcc83bc49e97441bcff0e1880ff88a49cb97ad03af78b158f260e95d31c52203f9b8e2ffeed07b8b64d1655766a25ce14408781f1c180bed56
SSDEEP

6144:ILowojVF33t06qk8Bxh61Hqy/9dCaVpJGoTPc:ILoXt060Bxh6KA9dCaVpJG4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bbc2b95caced2074d3293ef466be1c8

Files

3bbc2b95caced2074d3293ef466be1c8
.dll regsvr32 windows:5 windows x86 arch:x86

6f362e861c13e22e82e16a2f07937b31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

HttpQueryInfoA
InternetCrackUrlA
InternetQueryOptionA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
InternetGetConnectedState
HttpAddRequestHeadersA

shlwapi

StrToIntA
StrNCatA
StrRChrA
PathFileExistsA
wvnsprintfA
StrStrA
StrCmpNIA
wnsprintfA
StrStrIA

rpcrt4

UuidCreate
UuidToStringA

comctl32

InitCommonControlsEx

kernel32

GetProcAddress
GetModuleHandleA
lstrlenA
WinExec
IsDBCSLeadByte
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
OpenProcess
CloseHandle
GetCurrentProcess
LocalFree
HeapFree
lstrcmpA
ExpandEnvironmentStringsA
GetModuleHandleW
SetThreadLocale
GetThreadLocale
LockResource
FindResourceExA
WriteFile
CreateFileA
TerminateThread
GetTickCount
TlsSetValue
TlsGetValue
ReleaseMutex
SleepEx
lstrcpyA
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVersionExA
GetVersion
HeapReAlloc
ResetEvent
CreateEventA
SetEvent
OpenEventA
FlushInstructionCache
VirtualAlloc
InterlockedIncrement
LoadLibraryA
VirtualFree
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
Process32Next
Process32First
CreateToolhelp32Snapshot
GlobalFree
GlobalAlloc
GetTempPathA
lstrlenW
GetCurrentProcessId
GetExitCodeProcess
CreateProcessA
DeleteFileA
ExitProcess
SetLastError
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
RtlUnwind
HeapSize
HeapDestroy
GetLastError
lstrcpynA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
GetStdHandle
GetStringTypeA
GetStringTypeW
SetHandleCount
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetStdHandle
GetModuleFileNameA
TlsAlloc
TlsFree
lstrcmpiA
GetProcessHeap
HeapAlloc
GetPrivateProfileStringA
InterlockedDecrement
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
VirtualProtect
FreeEnvironmentStringsW

user32

DestroyWindow
RegisterClassExA
DefWindowProcA
RedrawWindow
SetActiveWindow
DrawAnimatedRects
GetWindowLongA
SetWindowLongA
CreateWindowExA
SetParent
FindWindowA
EnumChildWindows
SystemParametersInfoA
DrawMenuBar
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
RegisterWindowMessageA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
IsWindow
LoadStringA
LoadIconA
LoadImageA
DestroyIcon
SetTimer
KillTimer
GetWindowDC
ReleaseDC
CharNextW
GetShellWindow
GetWindowThreadProcessId
GetUserObjectSecurity
GetClientRect
GetWindowRect
GetCursorPos
SetCursorPos
mouse_event
CharNextA
MessageBoxA
SendMessageA
SetWindowPos
DispatchMessageA
TranslateMessage
GetMessageA
GetActiveWindow
LoadCursorA
GetSysColorBrush
UpdateWindow
ShowWindow
LoadMenuA
GetClassNameA

gdi32

SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDIBSection
CreateCompatibleDC
GetPixel

advapi32

CreateProcessAsUserA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetNamedSecurityInfoA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
SetTokenInformation
GetLengthSid
ConvertStringSidToSidW
DuplicateTokenEx
RegQueryInfoKeyA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
IsValidSid
GetSecurityDescriptorOwner
OpenProcessToken
ConvertSidToStringSidA
RegOpenKeyA
CloseServiceHandle
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA

shell32

SHAppBarMessage
SHGetFolderPathA
Shell_NotifyIconA

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
StringFromGUID2
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
OleSetContainedObject
OleCreate
OleUninitialize
OleInitialize
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
VariantClear
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
RegisterTrayIcon
RunTrayIcon
ShowDoneMessage
ShowWelcomePage
UnregisterTrayIcon

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f362e861c13e22e82e16a2f07937b31

Headers

File Characteristics

Imports

wininet

shlwapi

rpcrt4

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 221KB - Virtual size: 221KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 16KB - Virtual size: 26KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 221KB - Virtual size: 221KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 16KB - Virtual size: 26KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 16KB - Virtual size: 16KB