3d5479af6fe77cfc7cc2b32d3261288e

Sharing

Copy URL Twitter E-mail

General

Target

3d5479af6fe77cfc7cc2b32d3261288e
Size

248KB
MD5

3d5479af6fe77cfc7cc2b32d3261288e
SHA1

215cff20600695aae7e641ecf51ac4e88a906901
SHA256

e9e28f463447855e8e5d0ddb6fc8080ae3bedf517ae467314b7b807db9a7402b
SHA512

651eea0ca8b5db425d3b8cc52044a157d517a32fb801f26371fd6dad93edbdded35e90c6bbd8ed5a1ab41a63a5adac829e5f7fa7c21b3fd967d828d651446734
SSDEEP

6144:Rr2wcDFwsEjJTXcOXS7HmhrKd9HGCWSqea5:RyvDWDZXcOXSGBKuCWSqea5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d5479af6fe77cfc7cc2b32d3261288e

Files

3d5479af6fe77cfc7cc2b32d3261288e
.dll windows:4 windows x86 arch:x86

eb4c3d58248365af9f12ac19b9bb5fbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLogicalDriveStringsW
GetModuleHandleA
GetPrivateProfileSectionW
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetTimeFormatA
GetVersionExA
GlobalLock
HeapAlloc
GetDateFormatA
LoadResource
LockResource
MoveFileExW
OpenWaitableTimerW
ReadFile
SetLocaleInfoA
SizeofResource
UnlockFileEx
UnmapViewOfFile
WritePrivateProfileSectionA
GetCommandLineA
GetCPInfoExA
FoldStringW
FindAtomA
ExitProcess
EnterCriticalSection
DeviceIoControl
DeleteFiber
CreateMailslotW
CreateEventA
HeapCreate
BeginUpdateResourceW

ole32

StringFromIID
HPALETTE_UserMarshal
CoTaskMemRealloc
CoRegisterMallocSpy
CoGetContextToken
StgCreateStorageEx

user32

LoadCursorW
ShowCaret
DefMDIChildProcA
GetClassInfoExA
GetQueueStatus

imm32

ImmGetGuideLineA
ImmRegisterWordW
ImmLockIMC
ImmGetVirtualKey
ImmSetCompositionStringW
ImmGetCompositionFontW

oleaut32

VariantCopyInd
VariantCopy
VarNeg
VarDateFromUI1
VarBoolFromDate
SysFreeString
SysAllocString

comctl32

PropertySheetA
CreatePropertySheetPageA

advapi32

RegDeleteKeyA

Exports

Exports

AudioGetFormatInfo
BAOCloseHandle
CopyStrmPrmToRawObj
CreateBlockAccessFromImage
DVDPRVRRestoreVideoRecording
EnumMCCustomItemDataRelease
GLMapBufferObject
GLRegisterBufferObject
GetBaseImageDataPropertyCount
GetDriveModeCount
GetVMSInfo
IsSupportParamItem
MallocArray
Memcpy3D
OpenDevice
RegisterDriveChangeCallback
WGLGetDevice

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb4c3d58248365af9f12ac19b9bb5fbb

Headers

File Characteristics

Imports

kernel32

ole32

user32

imm32

oleaut32

comctl32

advapi32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 72KB - Virtual size: 112KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 72KB - Virtual size: 112KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB