3d47466c9ac135b0a39f9c5eb84d82f8

Sharing

Copy URL Twitter E-mail

General

Target

3d47466c9ac135b0a39f9c5eb84d82f8
Size

222KB
MD5

3d47466c9ac135b0a39f9c5eb84d82f8
SHA1

a0b5bbd7ebc2bdc0ea95a6da24e35e5f9b873caa
SHA256

47d3ddb0851ee430c42e13ee07afe6b97addb917d7521c281abf120297704722
SHA512

a6b6fd666762840ef0649de9fad7cb40c449a5c1c9c3c53f58b9a15ac0faa7e90793a10ee70066f1a8ee5feb536b36ef6c18d13be78ecccf38dc5beeca59b82c
SSDEEP

3072:PPSPsVtxsXU411i3+oT2cCL453CvBefOqS9ZTM7x7uE+AQgOGK42qtGWDYzpXttV:PPusVKjLi3+k2cCMlgkfko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d47466c9ac135b0a39f9c5eb84d82f8

Files

3d47466c9ac135b0a39f9c5eb84d82f8
.dll windows:4 windows x86 arch:x86

550d8eaa6b803e91bb445d7a2cb77686

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imm32

ImmIsIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetOpenStatus
ImmNotifyIME
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmGetCompositionStringA
ImmSetCompositionFontW
ImmSetCompositionFontA

comctl32

ord17

kernel32

HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
ExitProcess
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapAlloc
HeapFree
GetCommandLineA
GetCurrentThreadId
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetErrorMode
GlobalFlags
lstrcpynA
GetSystemTime
lstrcmpA
GetTickCount
lstrcatA
lstrcpyA
IsBadReadPtr
IsBadHugeWritePtr
FindResourceW
LoadResource
LockResource
GetVersion
SetEndOfFile
WriteFile
SetFilePointer
IsBadHugeReadPtr
ReadFile
GlobalReAlloc
GlobalSize
LocalReAlloc
FreeLibrary
GetProcAddress
DeleteAtom
IsBadWritePtr
MulDiv
LocalLock
LocalUnlock
IsDBCSLeadByte
GetModuleFileNameW
GetModuleFileNameA
GetAtomNameW
GetAtomNameA
AddAtomW
AddAtomA
LoadLibraryW
LoadLibraryA
GetProfileStringW
GetProfileStringA
GetProfileIntW
GetProfileIntA
IsDBCSLeadByteEx
LocalAlloc
GetLocaleInfoA
IsValidCodePage
GetACP
GetVersionExA
GetCPInfo
GetStringTypeW
GetStringTypeA
LocalFree
lstrlenW
WideCharToMultiByte
GlobalLock
lstrlenA
GlobalAlloc
MultiByteToWideChar
GlobalUnlock
GlobalFree
FreeEnvironmentStringsA

gdi32

GetMapMode
CreateCompatibleBitmap
SetBkMode
SetPixel
SelectClipRgn
OffsetRgn
GetTextMetricsW
TranslateCharsetInfo
CreateDCA
CreateDCW
CreateICA
CreateICW
CreateFontIndirectA
CreateFontIndirectW
CreateEnhMetaFileA
CreateEnhMetaFileW
ExtTextOutA
GetTextCharset
ExtTextOutW
EnumFontFamiliesExA
EnumFontFamiliesExW
GetTextFaceA
GetTextFaceW
GetObjectType
GetObjectA
GetObjectW
LPtoDP
DPtoLP
ExcludeClipRect
GetDeviceCaps
SaveDC
SetWindowOrgEx
SetMapMode
SetViewportOrgEx
DeleteObject
GetStockObject
SelectObject
CreateSolidBrush
RestoreDC
SetViewportExtEx
SetWindowExtEx
EnumFontFamiliesW
SetBkColor
SetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
LineTo
MoveToEx
CreatePen
CreatePatternBrush
CreateBitmap
CreateDIBitmap
DeleteDC
BitBlt
CreateCompatibleDC
PolyPolyline
Rectangle
GetCharWidthW
SetBrushOrgEx
UnrealizeObject
SetTextAlign
PatBlt
GetClipBox
GetCharWidth32W
GetWindowExtEx
GetViewportExtEx
GdiComment
GetWindowOrgEx
GetViewportOrgEx
CloseEnhMetaFile
IntersectClipRect
GetTextMetricsA

winspool.drv

DeviceCapabilitiesW

comdlg32

ChooseColorA
ChooseColorW
ChooseFontA
ReplaceTextW
ReplaceTextA
FindTextW
FindTextA

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoCreateInstance
CoInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString
VariantInit
SysAllocString

Exports

Exports

CreateTextControl
CreateTextControlW
DebugTXFormat
FM_EnumFunc
GetErrorCode
ListCharDlg
ListParaDlg
ObjAttrTab1Dlg
ObjAttrTab2Dlg
ObjAttrTab3Dlg
ObjAttrTab4Dlg
PageDataCallBack
ParagraphTab1Dlg
ParagraphTab2Dlg
SectTab1Dlg
SectTab2Dlg
SelectFontDlg
SetDefaultDialogFont
TXGetErrorCode
TXGetVersion
TXInitialize
TXRegisterClass
TX_KBHookFunc
TX_WndProc
TabbedDlg
TblAttrTab1Dlg
TblAttrTab2Dlg
_EnumFontFamExProcU@16
_TD_Proc@16
_WndProcU@16

Sections

.text
Size: 88KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 789B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

550d8eaa6b803e91bb445d7a2cb77686

Headers

File Characteristics

Imports

imm32

comctl32

kernel32

gdi32

winspool.drv

comdlg32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 160KB

.bss Size: - Virtual size: 192KB

.pdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.tls Size: 4KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 789B

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 106KB - Virtual size: 105KB

.reloc Size: 4KB - Virtual size: 260B

.text
Size: 88KB - Virtual size: 160KB

.bss
Size: - Virtual size: 192KB

.pdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.tls
Size: 4KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 789B

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 106KB - Virtual size: 105KB

.reloc
Size: 4KB - Virtual size: 260B