485dda149a3b3b047d1a32866513dccd

Sharing

Copy URL Twitter E-mail

General

Target

485dda149a3b3b047d1a32866513dccd
Size

135KB
MD5

485dda149a3b3b047d1a32866513dccd
SHA1

1b1d460f5a847b4ac75226539fa79fce20f2e60b
SHA256

7f773684b9c33fd8ea6a84e4101c4c3258b069135d1eac7993c83d17215eee6b
SHA512

3d6c62c0ffb8bb6d29354c314bf0a99cda5669c820bb606fee670ea5fb60f4dfff4e469e353918df9514eaf485cd743b91710bd6ad3c47ca18dd7cf732b0f8b1
SSDEEP

1536:nuSM379pilzy4aCUBGbrufhif3ba/Qtps4zWeYXuOtMlR:nu79WdaC2urufq33UeYuOg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
485dda149a3b3b047d1a32866513dccd

Files

485dda149a3b3b047d1a32866513dccd
.dll windows:4 windows x86 arch:x86

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileW
DeleteFileA
GetFileTime
FindAtomA
OpenFile
CopyFileA
ReadConsoleA
CreateProcessA
GetLastError
CopyFileExW
WriteFile
GlobalFree
GetStdHandle
CreateThread
GetCommandLineA
CopyFileA
GetComputerNameA
WriteFile
GetCPInfo
FindFirstFileA
ReadConsoleA
GetFileSize
OpenFile
GetStdHandle
OpenFileMappingA
ReadFile
DeleteFileA
GetConsoleMode
FindAtomA
DeleteFileW
DeleteAtom
DeleteFileA
CopyFileA
GetComputerNameA
GetFileTime
ReadConsoleA
CopyFileExA
CopyFileW
GetCommandLineA
ExitThread
OpenFileMappingA
FindAtomA

user32

CalcMenuBar
DialogBoxParamW
CloseWindow
GetCursor
DrawTextA
GetDC
AlignRects
CopyImage
InsertMenuA
GetWindowTextLengthA
DrawTextW
CopyImage
AlignRects
GetMenu
DrawIcon
BlockInput
CopyRect
GetDlgItem
GetFocus
AppendMenuW
IsWindow
GetWindowTextLengthA
CalcMenuBar
EndDialog
CopyIcon
AppendMenuA

gdi32

DeleteDC
AbortPath
AddFontResourceW
SetTextColor
DeleteObject
AddFontResourceA
RestoreDC
AddFontResourceExA
AddFontResourceExW
ClearBitmapAttributes
GetBitmapBits
GetPixel
GetPixel
AddFontMemResourceEx
GetBrushOrgEx
BeginPath
GetBrushOrgEx
CreateSolidBrush
SetTextColor
AddFontResourceA
AddFontResourceExW
CancelDC
DeleteObject
AddFontResourceW
GetClipBox
ClearBrushAttributes
AddFontMemResourceEx
ExcludeClipRect
CloseFigure
GetBitmapBits
GetCurrentPositionEx
ClearBitmapAttributes
AddFontResourceExA
GetBrushOrgEx
ExtTextOutA
CloseFigure
CreateSolidBrush
GetPixel
BeginPath
AddFontMemResourceEx
ClearBitmapAttributes
AbortPath
ExtTextOutA
GetPixel
AddFontResourceW
GetClipBox
RestoreDC
GetBitmapBits
BeginPath
AddFontResourceExA
GetPixel
ClearBrushAttributes
SetTextColor
AddFontResourceExW
AddFontResourceTracking
GetBrushOrgEx
AddFontMemResourceEx
DeleteDC
CreateSolidBrush
AddFontResourceA
AbortPath

comctl32

ImageList_Read
ImageList_DragMove
ImageList_Destroy
ImageList_GetIconSize
ImageList_DragEnter
ImageList_DragShowNolock
InitCommonControls
ImageList_AddIcon
ImageList_GetImageCount
ImageList_Replace
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_GetImageRect
ImageList_LoadImage
InitCommonControls
ImageList_DrawIndirect
ImageList_Remove
ImageList_EndDrag
ImageList_Destroy

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 393B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 102KB - Virtual size: 102KB

.bbs Size: - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 3KB

.tls Size: - Virtual size: 393B

.rdata Size: 512B - Virtual size: 197B

.rsrc Size: 1024B - Virtual size: 52KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 102KB - Virtual size: 102KB

.bbs
Size: - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 393B

.rdata
Size: 512B - Virtual size: 197B

.rsrc
Size: 1024B - Virtual size: 52KB