3d32fcc04d0d662d9c7d300c61cf041b

Sharing

Copy URL

Twitter E-mail

General

Target

3d32fcc04d0d662d9c7d300c61cf041b
Size

38KB
MD5

3d32fcc04d0d662d9c7d300c61cf041b
SHA1

68f439aed985223c3c5296e53884c5fddcef5de5
SHA256

6e8021ddb6a2eb0d344a163fc227c1d1da4cbfc9fd8552f378bcfab7a5070956
SHA512

fffff6d14f6934ed070e62f71e22e6485f9f8e7af6b97b6ca0321afb7147a1656610fc66a2302166f575854d14c119e8eb7cd86597542ef30c89c6249ca0cb14
SSDEEP

768:G0o1fFX4Cem+5446wgH2l9SjPMYqR4f2HGRz887i:C1p4CSX3na09R4eHsz887i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d32fcc04d0d662d9c7d300c61cf041b

Files

3d32fcc04d0d662d9c7d300c61cf041b
.dll windows:1 windows x86 arch:x86

48f1cabdfb6169fe6b27be7c915c378f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CommConfigDialogW
ConvertThreadToFiber
CreateEventW
CreateMailslotA
EnumResourceTypesA
ExitProcess
FindAtomA
GetCommMask
GetCommState
GetConsoleCommandHistoryW
GetConsoleFontSize
GetFileSize
GetModuleFileNameA
GetTempPathA
HeapCompact
HeapSize
HeapUnlock
IsBadReadPtr
LocalCompact
LocalHandle
LockFile
OpenSemaphoreA
OutputDebugStringA
Process32Next
RtlFillMemory
RtlMoveMemory
RtlZeroMemory
SetConsoleCursorPosition
SetEndOfFile
SetPriorityClass
Sleep
TlsAlloc
VirtualProtect
WriteFileGather
WritePrivateProfileStructA
lstrcmpA
lstrcmpiA
lstrcpynW

user32

CharUpperBuffA
CopyRect
CreateAcceleratorTableA
CreateCaret
DdeNameService
DialogBoxParamA
DlgDirListComboBoxA
DrawTextW
GetClassInfoExW
GetClassWord
GetDlgCtrlID
GetDoubleClickTime
GetForegroundWindow
GetInputState
GetMenuItemID
GetMessageW
GetUpdateRect
GetWindowWord
InsertMenuA
IsCharLowerA
LockWorkStation
OemToCharA
ReleaseCapture
SendMessageTimeoutA
SetDlgItemTextW
SetLastErrorEx
SetMenu
SetRect
SetWindowContextHelpId
TabbedTextOutA

gdi32

DeleteEnhMetaFile
EnumICMProfilesW
FrameRgn
GetClipBox
GetClipRgn
GetColorSpace
GetDeviceGammaRamp
GetFontData
GetMetaFileW
GetObjectW
GetPath
GetPixel
GetPixelFormat
GetTextCharacterExtra
GetTextFaceA
GetWindowOrgEx
PatBlt
RestoreDC
SetAbortProc
StartPage

comctl32

ImageList_GetIcon
ShowHideMenuCtl

shell32

SHGetInstanceExplorer
SHGetPathFromIDListW
SHLoadInProc
Shell_NotifyIconW

msvcrt

_atoldbl
_dstbias
_dup2
_fdopen
_heapused
_sopen
_spawnle
_strcmpi
_stricmp
_wcsncoll
_wgetenv
_wpgmptr
iscntrl
memmove
strtol
time
vfwprintf
wcscspn
wcstol

Exports

Exports

BDtpWxxvaOjvT
CUrlpHAjn
EFuCeIFezfm
ERiuCq
EaOSfhL
FDOwkQpfvhHi
FmtjscIHa
HrEoiHrbjjq
IQAmlKsrzn
JvynizevAtO
KhRniXX
LlmYavfbxr
Mrzuwqq
NCSeJbgk
NEspbii
OqaKwbbVhgo
QqxMet
RYcuxwLdEmjWxs
SUwvliiRYf
SuXiZbrXp
TUpVGahrBJuu
TimxhKuajmx
UMxdvxu
Zvsfpdjzflv

Sections

.text
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 19KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48f1cabdfb6169fe6b27be7c915c378f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

shell32

msvcrt

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 32KB

.wdata Size: 1024B - Virtual size: 542B

.edata Size: 19KB - Virtual size: 47KB

.rsrc Size: 1024B - Virtual size: 796B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 32KB

.wdata
Size: 1024B - Virtual size: 542B

.edata
Size: 19KB - Virtual size: 47KB

.rsrc
Size: 1024B - Virtual size: 796B

.reloc
Size: 2KB - Virtual size: 1KB