46a8ee172485d04be43d8c8a035ab43b

Sharing

Copy URL

Twitter E-mail

General

Target

46a8ee172485d04be43d8c8a035ab43b
Size

348KB
MD5

46a8ee172485d04be43d8c8a035ab43b
SHA1

8597d2f6baa1ced13b8807f336e61b10d2b025c3
SHA256

61b5ada31fca2a33ac4ffe86c8fbc198fcf815862926b49c415728ab243a2c4e
SHA512

8e7801a1e7c95bd6b05f5f1ecc6f3fcbf44eb24f27d2cd534a7c2d0b9aee086a05206dc07a33af6c571a6756467bf1c3d538a9e5c1a70f5e0a0eb17df8fe8e99
SSDEEP

6144:R9sK5mBZM3y/NxnK1xBSN90z9rlaRppm4RwR:R9syy/Ng1xBymz9rlaRppma

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a8ee172485d04be43d8c8a035ab43b

Files

46a8ee172485d04be43d8c8a035ab43b
.dll regsvr32 windows:5 windows x86 arch:x86

42cd29d7319c74f99b156cba436678f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

HttpQueryInfoA
InternetCrackUrlA
InternetQueryOptionA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
InternetGetConnectedState
HttpAddRequestHeadersA

shlwapi

StrToIntA
StrNCatA
StrRChrA
PathFileExistsA
wvnsprintfA
StrStrA
wnsprintfA
StrStrIA
StrCmpNIA

rpcrt4

UuidCreate
UuidToStringA

comctl32

InitCommonControlsEx

kernel32

GetProcAddress
GetModuleHandleA
lstrlenA
WinExec
IsDBCSLeadByte
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
OpenProcess
CloseHandle
GetCurrentProcess
LocalFree
HeapFree
lstrcmpA
ExpandEnvironmentStringsA
GetModuleHandleW
SetThreadLocale
GetThreadLocale
LockResource
FindResourceExA
WriteFile
CreateFileA
TerminateThread
GetTickCount
TlsSetValue
TlsGetValue
ReleaseMutex
SleepEx
lstrcpyA
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
GetVersionExA
GetVersion
HeapReAlloc
ResetEvent
CreateEventA
SetEvent
OpenEventA
FlushInstructionCache
VirtualAlloc
InterlockedIncrement
LoadLibraryA
VirtualFree
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
Process32Next
Process32First
CreateToolhelp32Snapshot
GlobalFree
GlobalAlloc
GetTempPathA
lstrlenW
GetCurrentProcessId
GetExitCodeProcess
CreateProcessA
DeleteFileA
ExitProcess
SetLastError
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
RtlUnwind
HeapSize
HeapDestroy
GetLastError
lstrcpynA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
GetStdHandle
GetStringTypeA
GetStringTypeW
SetHandleCount
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
SetStdHandle
GetModuleFileNameA
TlsAlloc
TlsFree
lstrcmpiA
GetProcessHeap
HeapAlloc
GetPrivateProfileStringA
InterlockedDecrement
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
VirtualProtect
FreeEnvironmentStringsW

user32

DestroyWindow
RegisterClassExA
DefWindowProcA
RedrawWindow
SetActiveWindow
DrawAnimatedRects
GetWindowLongA
SetWindowLongA
CreateWindowExA
SetParent
FindWindowA
EnumChildWindows
SystemParametersInfoA
DrawMenuBar
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
RegisterWindowMessageA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
IsWindow
LoadStringA
LoadIconA
LoadImageA
DestroyIcon
SetTimer
KillTimer
GetWindowDC
ReleaseDC
CharNextW
GetShellWindow
GetWindowThreadProcessId
GetUserObjectSecurity
GetClientRect
GetWindowRect
GetCursorPos
SetCursorPos
mouse_event
CharNextA
MessageBoxA
SendMessageA
SetWindowPos
DispatchMessageA
TranslateMessage
GetMessageA
GetActiveWindow
LoadCursorA
GetSysColorBrush
UpdateWindow
ShowWindow
LoadMenuA
GetClassNameA

gdi32

SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDIBSection
CreateCompatibleDC
GetPixel

advapi32

CreateProcessAsUserA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetNamedSecurityInfoA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
SetTokenInformation
GetLengthSid
ConvertStringSidToSidW
DuplicateTokenEx
RegQueryInfoKeyA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
IsValidSid
GetSecurityDescriptorOwner
OpenProcessToken
ConvertSidToStringSidA
RegOpenKeyA
CloseServiceHandle
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA

shell32

SHAppBarMessage
SHGetFolderPathA
Shell_NotifyIconA

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
StringFromGUID2
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
OleSetContainedObject
OleCreate
OleUninitialize
OleInitialize
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
VariantClear
VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLocid
GetTicket
RegisterTrayIcon
RunTrayIcon
ShowDoneMessage
ShowWelcomePage
UnregisterTrayIcon

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42cd29d7319c74f99b156cba436678f7

Headers

File Characteristics

Imports

wininet

shlwapi

rpcrt4

comctl32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 221KB - Virtual size: 221KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 16KB - Virtual size: 26KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 221KB - Virtual size: 221KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 16KB - Virtual size: 26KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 16KB - Virtual size: 16KB