3dc562d712365ff3a5f14dc7cbb3b738

Sharing

Copy URL

Twitter E-mail

General

Target

3dc562d712365ff3a5f14dc7cbb3b738
Size

28KB
MD5

3dc562d712365ff3a5f14dc7cbb3b738
SHA1

be9715ad70ce8ea3a5881ce759082a358154a16b
SHA256

e9be2f2251b336883397a117b27f5b2f4df3d6014a280c4c34e5aadf75c37ecb
SHA512

7c04cb620c3a060d3ce522e709213b4e996960ea66c92d0b6419989954bf0a1768a4080b8c0fa904d8f900e0846c6172f96464b37040270f61f876c9c1f87bf0
SSDEEP

768:n4ES7RSOw6hkl90vf+CclZJb0hFXK/iRdj+2MOc:njS1aokl9vlZJghFL7j7Rc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dc562d712365ff3a5f14dc7cbb3b738

Files

3dc562d712365ff3a5f14dc7cbb3b738
.exe windows:4 windows x86 arch:x86

d7e2d3c907a683dbc875b0b950a5f507

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
MakeSelfRelativeSD
InitializeSid
GetUserNameW
SetSecurityDescriptorSacl
MapGenericMask
RegDeleteValueW
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
RegCreateKeyExW
GetSidSubAuthorityCount
OpenThreadToken
RegEnumKeyExW
InitializeAcl
GetSecurityDescriptorDacl
GetLengthSid
GetAclInformation
GetAce
LookupAccountSidW
RegDeleteKeyW
GetSecurityDescriptorLength
LookupAccountNameW
GetSidSubAuthority
AddAccessAllowedAce
GetTokenInformation
RegQueryValueExW
SetSecurityDescriptorGroup
GetSidLengthRequired
GetSecurityDescriptorOwner
RegCloseKey
OpenProcessToken
AddAce
InitializeSecurityDescriptor
GetSidIdentifierAuthority
RegSetValueExW
SetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup

msvcrt

wcsspn
wcscspn
wcstol
swprintf
wcschr
_ftol
wcscpy
wcstoul
_snwprintf
__dllonexit
_onexit
__CxxFrameHandler
wcsncat
_wcsupr
wcsncpy
_ltow
wcscmp
malloc
_initterm
_purecall
_wtoi
free
wcspbrk
wcslen
_wtol
_wcsicmp
realloc
_wcsicoll
wcscat
wcsstr
wcsncmp
_adjust_fdiv

gdi32

BitBlt
GetTextMetricsW
ExtTextOutW
PatBlt
SetStretchBltMode
GetTextExtentPointW
CreateFontIndirectW
DeleteObject
GetBkColor
SetBkColor
CreateCompatibleDC
GetDeviceCaps
SetTextColor
StretchBlt
SelectObject
GetPixel
CreateBitmap
SetBkMode
GetObjectW
DeleteDC

ole32

CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoInitializeEx
CoUninitialize
StringFromGUID2
StringFromIID

comctl32

ImageList_Destroy
ImageList_SetOverlayImage
InitCommonControlsEx
PropertySheetW
ImageList_LoadImageW
CreatePropertySheetPageW
ImageList_Draw

rtutils

TraceDumpExA

kernel32

IsBadReadPtr
GetProcessHeap
OutputDebugStringW
lstrlenW
IsBadStringPtrW
SetEvent
GetLocalTime
LockResource
ResetEvent
GetLastError
GetLocaleInfoW
HeapFree
lstrlenA
GetCurrentProcess
LocalAlloc
IsBadWritePtr
GetCurrentThreadId
DeleteCriticalSection
GlobalSize
EnterCriticalSection
FlushInstructionCache
DisableThreadLibraryCalls
VirtualAlloc
MultiByteToWideChar
MulDiv
DuplicateHandle
lstrcpyW
TryEnterCriticalSection
GlobalLock
GlobalFree
TerminateThread
InitializeCriticalSection
LocalFree
GetTickCount
InterlockedIncrement
GlobalUnlock
GetCurrentThread
LoadResource
HeapAlloc
GetWindowsDirectoryW
InterlockedDecrement
CreateEventW
lstrcmpW
CreateThread
WaitForSingleObject
PulseEvent
GetModuleHandleW
CloseHandle
LeaveCriticalSection
GlobalAlloc
Sleep

shell32

ShellExecuteW

user32

FindWindowExW
MapWindowPoints
GetWindowRect
BeginPaint
PeekMessageW
ShowWindow
wsprintfW
DefWindowProcW
LoadStringW
SetScrollInfo
IsWindowEnabled
GetWindowTextLengthW
ScreenToClient
IsDialogMessageW
SetTimer
GetCursorPos
CheckRadioButton
CallWindowProcW
GetActiveWindow
GetClassLongW
PostMessageW
OffsetRect
SetRectEmpty
GetMenuItemID
GetClientRect
CheckMenuItem
CheckDlgButton
SetDlgItemTextW
DestroyWindow
LoadBitmapW
WinHelpW
GetClassInfoExW
EnableMenuItem
GetWindowLongW
IsWindow
LoadIconW
GetScrollInfo
UpdateWindow
LoadCursorW
GetWindowTextW
GetSysColorBrush
SetWindowLongW
DialogBoxParamW
SetWindowTextW
LoadMenuW
CreateWindowExW
MoveWindow
GetDC
KillTimer
ValidateRect
RegisterClassExW
PtInRect
ReleaseDC
DrawTextW
MessageBoxW
EndDialog
GetDialogBaseUnits
GetSysColor
GetSubMenu
EnableWindow
DefDlgProcW
GetDlgItem
InvalidateRect
TrackPopupMenu
SetClassLongW
SetParent
GetParent
DestroyMenu
IsDlgButtonChecked
GetMenuItemCount
TranslateMessage
DispatchMessageW
SendDlgItemMessageW
EndPaint
CreateDialogParamW
SetFocus
SendMessageW
PostThreadMessageW
SetCursor
RedrawWindow
MsgWaitForMultipleObjects
ClientToScreen
SetWindowPos
InflateRect

ddraw

DirectDrawCreate

ntdll

NtQueryTimerResolution
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege
NtQuerySemaphore

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7e2d3c907a683dbc875b0b950a5f507

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

msvcrt

gdi32

ole32

comctl32

rtutils

kernel32

shell32

user32

ddraw

ntdll

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 80KB

.rsrc Size: 2KB - Virtual size: 2KB

.rdata Size: 15KB - Virtual size: 14KB

.reloc Size: 512B - Virtual size: 56B

.idata Size: 6KB - Virtual size: 26KB

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 80KB

.rsrc
Size: 2KB - Virtual size: 2KB

.rdata
Size: 15KB - Virtual size: 14KB

.reloc
Size: 512B - Virtual size: 56B

.idata
Size: 6KB - Virtual size: 26KB