493342ba275316e46251dbfad41a3a51

General

Target

493342ba275316e46251dbfad41a3a51
Size

214KB
MD5

493342ba275316e46251dbfad41a3a51
SHA1

880d9a4122b50f8de74b57688e22311b0b4faed7
SHA256

dbe7f46c940343389fc9ebdc3dc1e382b581761869850c271a4f279a1455cd4e
SHA512

ed2a720cad629f593e6327252f3d822ffc991b731b858fafde4e8a23c166d0469ab71ff17ef1bbe150abdb54259080349477447c55230998559286a926155653
SSDEEP

3072:jU4lwcR85daStTp5/IWpEQvn54Mgcx12xCUKkz1IZ3Enf:jji5Xtt5/9tgc60U60f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
493342ba275316e46251dbfad41a3a51

Files

493342ba275316e46251dbfad41a3a51
.dll windows:1 windows x86 arch:x86

491160f7d15d3bc79b33897ada055293

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

MoveToEx

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStringTypeA
GetVersionExA
GetVolumeInformationA
GlobalAlloc
GlobalFree
GlobalReAlloc
LoadLibraryA
MultiByteToWideChar
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
GetPrivateProfileStringA
RtlMoveMemory

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID

oleaut32

GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy

user32

CharLowerBuffA
CharNextA
CharUpperBuffA
CreateDialogIndirectParamA
CreateDialogParamA
CreateWindowExA
DialogBoxIndirectParamA
MessageBoxA
DialogBoxParamA
GetWindow

ddoccwu32

dpStartDoc
dpNewPage
dpEndDoc
dpFont
dpText
dpLine
dpRect
dpEllipse

Exports

Exports

PRINTW2
PRINTW3

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

491160f7d15d3bc79b33897ada055293

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

ddoccwu32

Exports

Exports

Sections

.text Size: 189KB - Virtual size: 188KB

.data Size: 7KB - Virtual size: 8KB

.link Size: 2KB - Virtual size: 1KB

.rloc Size: 15KB - Virtual size: 14KB

.text
Size: 189KB - Virtual size: 188KB

.data
Size: 7KB - Virtual size: 8KB

.link
Size: 2KB - Virtual size: 1KB

.rloc
Size: 15KB - Virtual size: 14KB