55449c775ece33afb862d6755e57ecaa

Sharing

Copy URL Twitter E-mail

General

Target

55449c775ece33afb862d6755e57ecaa
Size

136KB
MD5

55449c775ece33afb862d6755e57ecaa
SHA1

c74cfb015653558ac860c0cf20561b2e3e177b9b
SHA256

1a121d3f05c176132deff32b89cc3561cb7e189456839d9d15ac70a0cd442a2a
SHA512

8041df41b77c072fe6b46b88d2cee50f18455378cf94fc8e6935b56ed8680133c18909611a220e0f719ee1ea7303fbf7095fe7429390d1be12c583dadf1c5d98
SSDEEP

1536:MafOegRRDDx02mhMHpruS1ZcZIcB763gluuz7CMUEkZPj4G:MafxARDDxzmhMH9uS1ZcZR63uzQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55449c775ece33afb862d6755e57ecaa

Files

55449c775ece33afb862d6755e57ecaa
.dll windows:4 windows x86 arch:x86

9e719d4f47f3d34c72930b3bec789df5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenFileMappingA
SetLastError
GetCurrentThreadId
GetCPInfo
lstrlenW
HeapDestroy
CreateFileA
GetEnvironmentStrings
GetDiskFreeSpaceA
lstrcmpA
CreateFileW
InitializeCriticalSection
LocalFree
MoveFileW
TerminateProcess
CreateMutexA
HeapReAlloc
VirtualAlloc
GetStartupInfoA
DeleteFileA
GetLastError
WideCharToMultiByte
UnhandledExceptionFilter
CreateMutexW
EnterCriticalSection
GetSystemInfo
SetFilePointer
VirtualQuery
DeleteCriticalSection
TlsFree
CreateEventA
VirtualFree
SetUnhandledExceptionFilter
GetTickCount
GetDiskFreeSpaceW
DisableThreadLibraryCalls
GetCurrentProcess
UnmapViewOfFile
GetEnvironmentStringsW
SetHandleCount
GetSystemTimeAsFileTime
lstrlenA
DeleteFileW
SetEndOfFile
WaitForSingleObject
GetProcAddress
InterlockedDecrement
CloseHandle
GetFullPathNameW
GetStringTypeExA
GetProcessHeap
HeapAlloc
TlsGetValue
HeapFree

user32

CharNextA
LoadStringA
wsprintfA
MessageBoxA

advapi32

RegEnumValueA
GetSidLengthRequired
InitializeSid
RegOpenKeyExA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
AddAccessAllowedAce
InitializeAcl
GetSidSubAuthority
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
DecryptFileA
RegQueryValueExA

wininet

InternetOpenA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

dbghelp

SymGetModuleInfo
SymLoadModule
SymGetSymFromAddr

version

VerQueryValueA

Exports

Exports

_GGVHC@0

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e719d4f47f3d34c72930b3bec789df5

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

shell32

dbghelp

version

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 30KB

.data Size: 28KB - Virtual size: 24KB

.rsrc Size: 68KB - Virtual size: 65KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 30KB

.data
Size: 28KB - Virtual size: 24KB

.rsrc
Size: 68KB - Virtual size: 65KB

.reloc
Size: 4KB - Virtual size: 1KB