674e895ff1d134b6364539d6a7025b06

General

Target

674e895ff1d134b6364539d6a7025b06
Size

28KB
MD5

674e895ff1d134b6364539d6a7025b06
SHA1

d45159d5d043ee0ad6ef78398aa238be235a06d1
SHA256

173d4e94a9ccb1d26635b0e2773af3d65cd648bd10cd085bdf962c13f64d8932
SHA512

f88e57e5a446a757c7795568988fb7378594487bb72e0ee303d6893d1476a26b31729bb7deb9e7715dc865cdeae58ae2d0deb3d4d394068b25f4a399787329c3
SSDEEP

192:/wdzC4JU/0QKNyupj/1W3/T9zHJw7rRlRoq/Qbzy:Id6xK83/TMyr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674e895ff1d134b6364539d6a7025b06

Files

674e895ff1d134b6364539d6a7025b06
.dll windows:4 windows x86 arch:x86

7e493ceaffe8175007a9bc93a0843315

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
OpenMutexA
GetTempPathA
FreeLibrary
CreateEventA
ExitProcess
GetProcAddress
GetVolumeInformationA
GetComputerNameA
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
GetVersion
GetSystemDirectoryA
Sleep
LoadLibraryA
CloseHandle
SetEvent
OpenEventA
GetCurrentProcessId
ReleaseMutex

user32

CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
ToAscii
GetKeyboardState
SendMessageA
IsWindow

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
GetUserNameA

wininet

InternetSetOptionA
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile

msvcrt

strcat
malloc
free
_beginthreadex
sprintf
atoi
strchr
strcpy
_adjust_fdiv
_initterm
_onexit
__dllonexit
memcpy
fclose
fwrite
strlen
fopen
??2@YAPAXI@Z
memset
??3@YAXPAX@Z
strrchr

avicap32

capCreateCaptureWindowA

Exports

Exports

PlayWork

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e493ceaffe8175007a9bc93a0843315

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

msvcrt

avicap32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

Shared Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 554B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

Shared
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 554B