4389afa9fb66859a6646a4785ff6bb2497775e524b591e59cda05dd73cebe559

Sharing

Copy URL Twitter E-mail

General

Target

4389afa9fb66859a6646a4785ff6bb2497775e524b591e59cda05dd73cebe559
Size

1.9MB
MD5

6f5fac4536303749dc9c19135acce6e7
SHA1

b233fad6113967690a1fbe60e4389a36ce41e33d
SHA256

4389afa9fb66859a6646a4785ff6bb2497775e524b591e59cda05dd73cebe559
SHA512

33698d803f2b864b47f8e2cd9413fdb24c0e77168b157a721d759dc118958e3c14a2458fe265f87b72d092f8f49f4ac722eedd0a473dcb663f3a1487442abc11
SSDEEP

24576:9iHdCWPcLSFj+HGqd113yPhVg7Nqqj35ckWUYZV5RqDF18nEuI7rqeS:9i9CWPcLSF6j1dJiUYLqBCnEuI7rDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4389afa9fb66859a6646a4785ff6bb2497775e524b591e59cda05dd73cebe559

Files

4389afa9fb66859a6646a4785ff6bb2497775e524b591e59cda05dd73cebe559
.dll windows:5 windows x86 arch:x86

dd86a0c3815c9cccb7e83ebdc313351f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFileAttributesA
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
RtlUnwind
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapFree
GetCommandLineA
HeapAlloc
VirtualAlloc
HeapReAlloc
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
CompareStringW
HeapCreate
HeapDestroy
VirtualFree
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetFileInformationByHandle
CreatePipe
PeekNamedPipe
GetTempFileNameA
WaitForMultipleObjects
ReadConsoleInputA
GetNumberOfConsoleInputEvents
LoadLibraryExA
RemoveDirectoryA
MoveFileExA
GetOEMCP
GetCPInfo
InterlockedIncrement
GetModuleHandleW
GlobalFlags
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
CreateEventA
SetEvent
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
GlobalAlloc
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetLogicalDriveStringsA
Sleep
GetLastError
SetLastError
GetModuleHandleA
GetModuleFileNameA
OutputDebugStringA
CreateProcessA
GetExitCodeProcess
DeleteFileA
GetTempPathA
GetLongPathNameA
CreateFileW
CreateDirectoryA
LoadLibraryA
GetProcAddress
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
CloseHandle
FreeLibrary
CopyFileA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
FreeEnvironmentStringsW
SizeofResource

user32

CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetDlgCtrlID
ModifyMenuA
CallWindowProcA
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
ReleaseDC
GetDC
CopyRect
SetFocus
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SendMessageA
LoadBitmapA
GetMenuCheckMarkDimensions
GetFocus
PtInRect
GetWindowLongA
SetWindowLongA
ChildWindowFromPointEx
GetKeyState
TranslateMessage
DispatchMessageA
DestroyIcon
DestroyWindow
MoveWindow
ShowWindow
ScreenToClient
SetMenuItemBitmaps
IsDialogMessageA
SetWindowTextA
DefWindowProcA
CharNextA
EnableWindow
SetRect
DrawIcon
AppendMenuA
EnableMenuItem
GetSystemMenu
IsIconic
GetWindowRect
GetClientRect
InvalidateRect
GetWindow
GetParent
SetParent
LoadIconA
GetSystemMetrics
SetWindowPos
LoadCursorA
GetSysColorBrush
UnregisterClassA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
GetWindowThreadProcessId
SetCursor
GetMessageA
GetCursorPos
ValidateRect
PostQuitMessage
CharUpperA
GetScrollPos
IsWindow
WinHelpA

gdi32

SaveDC
RestoreDC
SetMapMode
DeleteObject
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
ExtTextOutA
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
OffsetViewportOrgEx
GetTextExtentPoint32A
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

shell32

DragAcceptFiles
DragFinish
DragQueryFileA
SHGetFileInfoA

shlwapi

PathFileExistsA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathIsDirectoryA
PathRemoveFileSpecW
PathFindFileNameA

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
StringFromGUID2
CoTaskMemFree
CLSIDFromString
CoCreateGuid

oleaut32

VariantInit
VariantChangeType
VariantClear

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

CreatePlayOnEmuBoardDlg
TGetPlugin

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 377KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd86a0c3815c9cccb7e83ebdc313351f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

version

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 377KB - Virtual size: 376KB

.data Size: 31KB - Virtual size: 59KB

.rsrc Size: 297KB - Virtual size: 296KB

.reloc Size: 84KB - Virtual size: 83KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 377KB - Virtual size: 376KB

.data
Size: 31KB - Virtual size: 59KB

.rsrc
Size: 297KB - Virtual size: 296KB

.reloc
Size: 84KB - Virtual size: 83KB