56d8ca7d0959c205eef6f74143b404ab

General

Target

56d8ca7d0959c205eef6f74143b404ab
Size

9KB
MD5

56d8ca7d0959c205eef6f74143b404ab
SHA1

f8e3b5b21af2193176294db81721c76472e4db5a
SHA256

032c2afae4d23da03a87b563df207c66f95b6ae5037dd2351c9dabead9fc5bfe
SHA512

7c6739751b0b002f137bb8dec2f8a583bf1af07a45291e8eb01d41b1fffd202ab3bdf283de19d5ef7ad0520093b253e9f00955b502e6b8e8ef2fbe6106e32f83
SSDEEP

192:xZXdwdsGHdK44iFXULZAPhwfAia1OtFKpjW4D772iwpOkAP8RkR:Vq5dtj/GfAvOXKVR/uAP8G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56d8ca7d0959c205eef6f74143b404ab

Files

56d8ca7d0959c205eef6f74143b404ab
.dll regsvr32 windows:4 windows x86 arch:x86

835f1dfe0629802bec90e4216b70326c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BuildCommDCBW
CreateIoCompletionPort
DebugBreak
DeviceIoControl
ExitProcess
GetComputerNameA
GetConsoleOutputCP
GetConsoleTitleA
GetPrivateProfileSectionW
GetShortPathNameW
GetSystemTime
GetVolumeInformationA
LockResource
MoveFileExA
QueryDosDeviceW
RaiseException
RemoveDirectoryW
SetConsoleTextAttribute
Sleep
WaitCommEvent
lstrlenW

user32

CallWindowProcW
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
CharPrevExA
CloseWindowStation
CopyIcon
DlgDirListA
EnumDisplayMonitors
EnumPropsExA
GetActiveWindow
GetDC
GetMenuDefaultItem
GetMenuState
InsertMenuA
LoadCursorFromFileW
LoadCursorW
OpenIcon
PostThreadMessageW
ScrollDC
SetActiveWindow
SetWindowContextHelpId
ShowScrollBar
TileChildWindows
UnregisterHotKey

gdi32

CloseFigure
ColorMatchToTarget
CreateEllipticRgnIndirect
CreateRectRgnIndirect
DeleteMetaFile
EqualRgn
ExtCreateRegion
GdiGetBatchLimit
GdiSetBatchLimit
GetBitmapBits
GetCharABCWidthsA
GetCharABCWidthsW
GetCharWidth32A
GetDeviceGammaRamp
GetLogColorSpaceW
GetRasterizerCaps
GetTextColor
LineTo
OffsetRgn
PlayMetaFileRecord
SetBrushOrgEx
SetICMProfileA
SetSystemPaletteUse
UpdateColors

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

835f1dfe0629802bec90e4216b70326c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 16KB

.data Size: 8KB - Virtual size: 12KB

.rdata Size: - Virtual size: 4KB

.rsrc Size: - Virtual size: 4KB

.text
Size: 512B - Virtual size: 16KB

.data
Size: 8KB - Virtual size: 12KB

.rdata
Size: - Virtual size: 4KB

.rsrc
Size: - Virtual size: 4KB