4ec3de283b7904e000263af52507e114

Sharing

Copy URL Twitter E-mail

General

Target

4ec3de283b7904e000263af52507e114
Size

127KB
MD5

4ec3de283b7904e000263af52507e114
SHA1

13b6ff958b40b81f3c5f50bd21e36f574356ccea
SHA256

32d89b8b5cc55720f390238b66f669788952ba506ea24b024c410ea6db32d6f8
SHA512

1c902f3c92773ce5d27ef08109942b18c7ec27ffef1d292d7dca112fb686d4b3f404b84e496eed20414b57be233913ea2fbd4f53bf75214cc23883799f1ff3f0
SSDEEP

3072:VHwaqqIuBdXpKSrzakRCUrIVWAr5QCRa:l5Iu7X7fX9m+6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ec3de283b7904e000263af52507e114

Files

4ec3de283b7904e000263af52507e114
.dll regsvr32 windows:5 windows x86 arch:x86

d1f6a7627aaaa5e4389b49af7c8291b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetCrackUrlA
HttpSendRequestA
InternetGetConnectedState
HttpOpenRequestA
HttpQueryInfoA
InternetSetCookieA

shlwapi

PathFileExistsA
StrStrIA
wnsprintfA

kernel32

GetModuleHandleW
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
lstrlenW
SetThreadLocale
GetLastError
GetThreadLocale
GetProcAddress
EnterCriticalSection
FindResourceA
FreeLibrary
LoadResource
SizeofResource
IsDBCSLeadByte
lstrcmpiA
LoadLibraryExA
HeapReAlloc
CreateFileA
lstrcmpA
HeapAlloc
GetCurrentProcess
HeapFree
lstrlenA
SleepEx
GetProcessHeap
WriteFile
TerminateThread
Sleep
CreateProcessA
LoadLibraryA
CreateMutexA
ReleaseMutex
CloseHandle
GetTempPathA
LocalFree
CreateThread
GetVolumeInformationA
lstrcpyA
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
LCMapStringW
DeleteCriticalSection
GetModuleHandleA
GetModuleFileNameA
RaiseException
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
WaitForSingleObject
LCMapStringA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapCreate
HeapDestroy

user32

CharNextW
CharNextA

advapi32

RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
GetLengthSid
DuplicateTokenEx
ConvertStringSidToSidW
SetTokenInformation
OpenProcessToken
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegDeleteKeyA

shell32

ShellExecuteA

ole32

CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance

oleaut32

LoadRegTypeLi
VarUI4FromStr
SysAllocStringLen
VariantInit
VariantClear
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysAllocString
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClientTicket

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1f6a7627aaaa5e4389b49af7c8291b5

Headers

File Characteristics

Imports

wininet

shlwapi

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 7KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 7KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 9KB - Virtual size: 9KB