57f062a0bb97bd97300dbf6a458e752f

Sharing

Copy URL Twitter E-mail

General

Target

57f062a0bb97bd97300dbf6a458e752f
Size

232KB
MD5

57f062a0bb97bd97300dbf6a458e752f
SHA1

14c4308a63f259ff4d9126b962a3dd71d37ecd39
SHA256

b73631e3180c762ee49feba99674b233312e3c6f456c359bcbb4296506105d67
SHA512

0109f4d7734a0915cecefa25be0d9cd06d73dc85095dd1609a9b42b4c55941e55d7fcaba974dd57cb6e15be13804c1b5b8e327b1fba3dbbad3bd81f9fbe000d3
SSDEEP

6144:araO+jrdRblND9qnqZEf1dmbm5lsz85HD:auOURbvZufybm5ls45j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57f062a0bb97bd97300dbf6a458e752f

Files

57f062a0bb97bd97300dbf6a458e752f
.dll windows:5 windows x86 arch:x86

0f562c9862ad1c2693b3faae17b50a82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
_initterm
_splitpath
wcsncmp
wcsncpy
_rotl
_ftol
strtoul
atoi
wcsstr
atol
memmove
wcslen
wcscmp
wcscpy
_except_handler3
_local_unwind2
malloc
free
_rotr
_strnicmp
qsort
_abnormal_termination
_purecall

kernel32

GetProcAddress
LoadLibraryA
GetUserDefaultLCID
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetACP
SetLastError
LCMapStringA
GetLocaleInfoA
GetStringTypeW
GetCPInfo
LCMapStringW
EnumSystemCodePagesA
EnumSystemLocalesA
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetLastError
InitializeCriticalSection
GetVersion
CloseHandle
WaitForSingleObjectEx
ResetEvent
VirtualFree
HeapFree
HeapDestroy
VirtualAlloc
HeapAlloc
GetSystemInfo
HeapCreate
WaitForSingleObject
DeleteCriticalSection
IsValidLocale
GetProfileIntA
GlobalMemoryStatus
lstrcmpiA
lstrcpyA
DeleteFileA
UnmapViewOfFile
SetEndOfFile
SetFilePointer
GetLogicalDrives
GetDiskFreeSpaceA
lstrlenA
ReadFileEx
WriteFileEx
ReadFile
WriteFile
MapViewOfFile
CreateFileMappingA
lstrcmpA
CreateFileA
GetFullPathNameA
CopyFileA
MoveFileA
MoveFileExA
lstrcatA
GetTempFileNameA
FindClose
FindFirstFileA
GetCurrentDirectoryA
GetDriveTypeA
CreateDirectoryA
GetFileAttributesA
GetWindowsDirectoryA
SetErrorMode
RaiseException
GetTickCount
CreateEventA

user32

ScreenToClient
SetWindowPos
GetWindowRect
GetDlgItem
EndPaint
BeginPaint
SetWindowLongA
GetWindowLongA
CreateDialogParamA
GetDesktopWindow
GetFocus
LoadBitmapA
MessageBoxA
wsprintfA
CharLowerBuffW
CharLowerBuffA
LoadStringA
SetWindowTextA
EndDialog
MoveWindow
DialogBoxParamA
InvalidateRect
GetParent
SendMessageA
GetSystemMetrics
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetClientRect
GetSysColor
GetWindowTextA
GetWindowTextW
RegisterClassA
DefDlgProcA
GetClassInfoA
EnableWindow
ShowWindow
CallWindowProcA
GetDC
GetMessageTime
GetMessagePos
UpdateWindow
GetWindow
CheckDlgButton
SetTimer
SetCursor
KillTimer
LoadCursorA
SetParent
WinHelpA
RemovePropA
GetPropA
SetPropA
SendDlgItemMessageA
IsDlgButtonChecked
EnableScrollBar
SetScrollPos
SetScrollRange
GetActiveWindow
FrameRect
ScrollDC
GetWindowDC
SetCapture
GetCapture
ReleaseCapture
IsIconic
DefWindowProcA
GetKeyState
IsWindow
CharNextA
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
SetFocus
IsDialogMessageA
ReleaseDC

gdi32

GetObjectA
PatBlt
GetTextColor
GetBkColor
CreateFontIndirectA
BitBlt
CreatePatternBrush
SetBrushOrgEx
SetTextColor
SetBkColor
GetFontLanguageInfo
GetTextAlign
SetTextAlign
GetCharacterPlacementA
ExtTextOutA
IntersectClipRect
GetDeviceCaps
CreateFontA
GetTextMetricsA
CreateSolidBrush
DeleteDC
SelectObject
StretchBlt
CreateCompatibleDC
DeleteObject

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

Exports

Exports

ClearDisplayText
CompressText
CountHilites
DecompressText
DeleteCompressor
DeleteHiliter
DeleteIndex
DeleteSearcher
DiscardIndex
DllMain
GetPhraseTable
IsValidIndex
LoadGroup
NewCompressor
NewHiliter
NewIndex
NewSearcher
OpenBiDiTabDialog
OpenDialog
OpenIndex
OpenTabDialog
QueryHilites
QueryOptions
RegisterAnimator
SaveGroup
SaveIndex
ScanDisplayText
ScanText
ScanTopicText
ScanTopicTitle
SetDirectoryLocator
SetPhraseTable

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f562c9862ad1c2693b3faae17b50a82

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

shell32

Exports

Exports

Sections

.text Size: 146KB - Virtual size: 146KB

.data Size: 62KB - Virtual size: 68KB

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 146KB - Virtual size: 146KB

.data
Size: 62KB - Virtual size: 68KB

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 5KB - Virtual size: 5KB