5a95ca5e4fbaa9c23712c2ee7bc8ba52

Sharing

Copy URL

Twitter E-mail

General

Target

5a95ca5e4fbaa9c23712c2ee7bc8ba52
Size

256KB
MD5

5a95ca5e4fbaa9c23712c2ee7bc8ba52
SHA1

8d9546537965b5c8fdfdc4e4cab1ee38b7973e51
SHA256

142bf8b3552d8c1feb830a0aff9a1cbbc22fce5fb071bc1278021e05c7f42eae
SHA512

a51da7eff5462c329754000658760498aaf6bfb754ea9901e282478496e178d102ef7c78da5b2240b1a0aa89acc6dbcbb833b6ceb7ab5be960aa644f6f6d6e34
SSDEEP

3072:zrEVVE8GeNEVS18mHV8kxrYKsw3cyR54EoMXlQLHlWBA1kEd07oOsK4c3h65E+hD:zrXeim18SYov55BSkJ1spTjhcIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a95ca5e4fbaa9c23712c2ee7bc8ba52

Files

5a95ca5e4fbaa9c23712c2ee7bc8ba52
.dll windows:4 windows x86 arch:x86

d8b0e4fd3ff3e4e174dddd89717bd9e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

CreateCompatibleDC
CreatePen
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
GetClipBox
CreateCompatibleBitmap
GetPixel
GetStockObject
LPtoDP
Polyline
SelectObject
StretchBlt
GetObjectA
BitBlt

comctl32

ImageList_ReplaceIcon

kernel32

CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OpenProcess
RtlUnwind
SetHandleCount
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
lstrlenW

ole32

CoTaskMemFree

shell32

SHGetPathFromIDListA
SHGetDesktopFolder
SHGetMalloc

Exports

Exports

BindTexture2D
CreateImagePropBuffer
DVDMRWVRFinalizeDisc
EnumBaseImageDataPropertyRelease
EnumBaseImageDataPropertyReset
EnumFlashSettingNext
EnumItemRelease
EnumMCCustomSetNumberNext
EnumRelCamSettingDataReset
GetFunctions_i
GetImageItemProperty
GetNumHarddisks
GetRAWDevelopFaculties
ImportDataTrack
IsSupportParamValue
Malloc
MallocHost
MemcpyFromSymbol
Memset3D
SetDoubleForHost
WriteDevParamToRAW

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8b0e4fd3ff3e4e174dddd89717bd9e9

Headers

File Characteristics

Imports

gdi32

comctl32

kernel32

ole32

shell32

Exports

Exports

Sections

.text Size: 148KB - Virtual size: 148KB

.data Size: 96KB - Virtual size: 132KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 148KB - Virtual size: 148KB

.data
Size: 96KB - Virtual size: 132KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB