58ad1cac55ccf731517457200f84775c

Sharing

Copy URL Twitter E-mail

General

Target

58ad1cac55ccf731517457200f84775c
Size

6.0MB
MD5

58ad1cac55ccf731517457200f84775c
SHA1

23baced6df5d42a2dff862c8f1e23eb9a93b0e18
SHA256

4208e3f116e34f96d9bf2733d87999ee66e6e928a6f40f13b2f74db8ff661818
SHA512

0c403ea060d2833e8e995314e54e91c3ccd54f110a0f9c8f74c2ab680df8a24353a6746cea175ece31749669a5259853be3522b16bb481ec5293dd0b1a5155db
SSDEEP

98304:l7Da6hjB+DtuPLMM5keSz/MJEQohcf7Y7bh10htNwcHs2:pDaI+DtuPLMM5keSz/MJEQohcf7Y7bh8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58ad1cac55ccf731517457200f84775c

Files

58ad1cac55ccf731517457200f84775c
.dll windows:4 windows x86 arch:x86

0f16930f71e15e1bb0fb162a77a3aafe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
InitializeCriticalSection
GetOEMCP
GetACP
GetCPInfo
ExitProcess
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
RaiseException
InterlockedDecrement
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
MultiByteToWideChar
GetLastError
GetTickCount
FreeEnvironmentStringsA
Sleep
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
GetModuleHandleA
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer

user32

PostMessageA
CallWindowProcA
PeekMessageA
DispatchMessageA
MessageBoxA
GetCursorPos
GetParent
GetWindowTextA
BringWindowToTop
GetSysColorBrush
RegisterClassA
SetWindowPos
GetSystemMetrics
GetClassNameA
GetUpdateRect
BeginPaint
EndPaint
DefWindowProcA
UnregisterClassA
LoadBitmapA
GetCursor
LoadCursorA
SetCursor
MapWindowPoints
SetWindowTextA
GetAsyncKeyState
DrawTextA
FillRect
GetWindowRect
TrackPopupMenu
GetDC
ReleaseDC
CreatePopupMenu
AppendMenuA
DestroyMenu
DestroyWindow
CreateWindowExA
GetWindowLongA
GetDoubleClickTime
GetDlgItem
SetWindowLongA
SendMessageA

gdi32

DPtoLP
GetCurrentObject
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectA
BitBlt
DeleteDC
SetBkMode
SetBkColor
CreateBrushIndirect
SetTextColor
GetStockObject
LineTo
MoveToEx
CreateRectRgn
SelectClipRgn
SetROP2
CreatePenIndirect
SelectObject
DeleteObject
CreateFontIndirectA
CreateSolidBrush

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

DragQueryFileA
ShellExecuteA

ole32

OleInitialize
RegisterDragDrop
RevokeDragDrop
OleUninitialize

Exports

Exports

main

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.code
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0f16930f71e15e1bb0fb162a77a3aafe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 168KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 5.6MB - Virtual size: 5.6MB

.reloc Size: 24KB - Virtual size: 24KB

.code Size: 88KB - Virtual size: 88KB

.idata Size: 4KB - Virtual size: 4KB

.text
Size: 168KB - Virtual size: 168KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 5.6MB - Virtual size: 5.6MB

.reloc
Size: 24KB - Virtual size: 24KB

.code
Size: 88KB - Virtual size: 88KB

.idata
Size: 4KB - Virtual size: 4KB