6770ab5c088c5812518bc3210ea6fc76

Sharing

Copy URL

Twitter E-mail

General

Target

6770ab5c088c5812518bc3210ea6fc76
Size

268KB
MD5

6770ab5c088c5812518bc3210ea6fc76
SHA1

aa224489325ebb66da9c2405e068224eaf181f4a
SHA256

e21a22add519dbe4060dfb6586a72e9658511d00cebdafb186e6e34b089fac15
SHA512

46d0a60de5126e35727fb755c990c413a240bfdc489c68acc32773fa8ff4998913d77e9913b2b6e70d844abb43d1b3cafad47148e1a3b98271b5dcee7fc27d94
SSDEEP

6144:zfQB6zCtpQ8tRBpFLNIw5toLszF7J0bGtVzVAKu7b:66mthJLNDJNJYc3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6770ab5c088c5812518bc3210ea6fc76

Files

6770ab5c088c5812518bc3210ea6fc76
.dll windows:4 windows x86 arch:x86

c09ee987bbdf6bf928fb46ba9395a119

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FileTimeToSystemTime
FindClose
FindFirstFileA
FlushConsoleInputBuffer
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetUserDefaultLangID
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapCreate
FileTimeToLocalFileTime
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenEventA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleInputA
ReadFile
RemoveDirectoryA
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
ExitProcess
EnterCriticalSection
DeleteFileA
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringW
CompareStringA
CompareFileTime
HeapDestroy
CloseHandle

ole32

CoCreateGuid

user32

wsprintfA
MessageBoxW
MessageBoxA
IsIconic
GetWindowThreadProcessId
GetWindowLongA
GetUserObjectInformationW
GetSystemMetrics
GetProcessWindowStation
GetDesktopWindow
EnumWindows
CloseWindow
ShowWindow

shlwapi

PathCombineA

advapi32

DeregisterEventSource
FreeSid
InitializeSecurityDescriptor
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetKeySecurity
RegSetValueExA
RegisterEventSourceA
ReportEventA
SetSecurityDescriptorDacl
AllocateAndInitializeSid

Exports

Exports

AddDataToImageItem
BindTexture2D
CopyClickWBCoefs
CreateFolder
EnumDeviceReset
EnumRelCamSettingReset
GetAFDistanceSettingCount
GetDevice
GetDiscErasingTime
GetExposureComp
MallocPitch
RegisterFatBinary
UnbindTexture
WGLGetDevice

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c09ee987bbdf6bf928fb46ba9395a119

Headers

File Characteristics

Imports

kernel32

ole32

user32

shlwapi

advapi32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 96KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 96KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB