4a764c3cdd3cf32aef66c83b44e058da

Sharing

Copy URL Twitter E-mail

General

Target

4a764c3cdd3cf32aef66c83b44e058da
Size

164KB
MD5

4a764c3cdd3cf32aef66c83b44e058da
SHA1

f0eb77a03f4012c1b241871cbc1247bf37c5404a
SHA256

0e2635a636499a78456cc3aded6e574dd00c4dfa5f86acd4a897e26bbf9b740e
SHA512

2d9c4921b1ec55f238a204d2ae90572dab3c701acc5295c250d1c163a8da1673fb9ca89c2b537da41481d4001fc8bd6d28783b6e3df8cf28f04e9f2322ccb918
SSDEEP

3072:6PUYj1oG9gTNp5YSTwQrIWcrXu8wq9c4zT:7Yj1oAqpHUK8wqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a764c3cdd3cf32aef66c83b44e058da

Files

4a764c3cdd3cf32aef66c83b44e058da
.dll regsvr32 windows:4 windows x86 arch:x86

3e8e88662da740ba7d3cb65d3ab3ae35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile

urlmon

UrlMkSetSessionOption
ObtainUserAgentString
URLDownloadToFileA

kernel32

GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
MultiByteToWideChar
GetLastError
WideCharToMultiByte
lstrlenW
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
lstrcatA
ExitProcess
GetTickCount
Sleep
lstrcatW
lstrcpyW
CreateProcessA
CloseHandle
TerminateThread
WaitForSingleObject
CreateThread
GetStringTypeW
GetStringTypeA
InterlockedExchange
SetFilePointer
VirtualQuery
GetSystemInfo
VirtualProtect
IsBadCodePtr
IsBadReadPtr
GetCPInfo
GetOEMCP
LoadLibraryA
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
GetModuleFileNameA
lstrlenA
lstrcpyA
lstrcmpiA
GetSystemTime
DisableThreadLibraryCalls
LCMapStringA
LCMapStringW
ReadFile
SetStdHandle
SetLastError
TlsFree
GetCurrentProcessId
QueryPerformanceCounter
HeapSize
GetCurrentProcess
TerminateProcess
GetModuleHandleA
GetProcAddress
GetCommandLineA
TlsSetValue
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
RaiseException
HeapFree
RtlUnwind
FlushFileBuffers

user32

GetParent
EnumWindows
InSendMessage
GetMenu
GetFocus
CloseWindow
FlashWindow
IsWindow
GetSubMenu
IsZoomed
GetDlgCtrlID
OpenIcon
wsprintfA
GetKeyboardLayout
DeleteMenu
UpdateWindow
wsprintfW
SetCaretBlinkTime
SetTimer
GetMenuItemCount
CreateMenu
FindWindowA
GetLastActivePopup
EndDialog
IsWindowEnabled
KillTimer
CharNextA
GetSystemMetrics
IsDlgButtonChecked
GetKBCodePage
GetKeyboardType
GetMessagePos

advapi32

RegCreateKeyA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2

oleaut32

SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
VariantClear
DispCallFunc
SafeArrayUnaccessData
SysStringLen
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VarUI4FromStr
VariantInit

shlwapi

PathFindExtensionA

comctl32

GetMUILanguage
InitCommonControlsEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e8e88662da740ba7d3cb65d3ab3ae35

Headers

File Characteristics

Imports

wininet

urlmon

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 105KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 4.6MB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 108KB - Virtual size: 105KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 4.6MB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 20KB - Virtual size: 19KB