71d75f3b72e50c544bf5cd65e983fefd

Sharing

Copy URL Twitter E-mail

General

Target

71d75f3b72e50c544bf5cd65e983fefd
Size

512KB
MD5

71d75f3b72e50c544bf5cd65e983fefd
SHA1

a66a4681b74a5f5a097b4dd585c9402845c577b5
SHA256

3c049d109e1add5fd0e73d1d241e01d3a7fd689708f3cbb5b048997177915dc4
SHA512

88e359e421b0f4716b6c1ef28f52d04778f6de102a09c7790b492e4eb7243efac8d8b2353b2d4bb256214507b236edd804f6e0d831b2bbc2abadfe1d8e87313f
SSDEEP

6144:uixW/oqVPKhHSAOes+d1ZCdimAqn+L6JfKuCPS83EL38Tsyy:ucZqVChHSePZgn+LAvCKuU38Txy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71d75f3b72e50c544bf5cd65e983fefd

Files

71d75f3b72e50c544bf5cd65e983fefd
.dll regsvr32 windows:4 windows x86 arch:x86

c1f56c15c588b65e99c4af8a0534f1b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceExW
GetVersion
OpenEventW
DisableThreadLibraryCalls
lstrlenW
GetVersionExW
GetModuleFileNameW
FlushInstructionCache
GetCurrentProcess
RaiseException
EnterCriticalSection
LeaveCriticalSection
TerminateThread
CreateThread
ResumeThread
GetTickCount
WideCharToMultiByte
GetCurrentThreadId
CreateMutexW
SetLastError
GetComputerNameW
GetDriveTypeW
GetLogicalDriveStringsW
WinExec
MultiByteToWideChar
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FindFirstFileW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetCPInfo
ReadFile
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
Sleep
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
GetFileAttributesW
FindNextFileW
GetModuleHandleW
FindClose
RemoveDirectoryW
SetFileAttributesW
GetLastError
CreateFileW
GetFileSize
WriteFile
CloseHandle
DeleteFileW
WaitForSingleObject
ReleaseMutex
InterlockedExchangeAdd
FindResourceW
SizeofResource
LoadResource
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
LockResource
HeapAlloc
GetProcessHeap
HeapFree
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetThreadLocale
GetLocaleInfoA
GetACP
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapDestroy
InterlockedCompareExchange
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc

user32

DefWindowProcW
GetClientRect
DrawTextW
EndPaint
GetUpdateRect
BeginPaint
IsWindow
MessageBoxW
CreateDialogParamW
wsprintfW
GetMenuItemCount
GetMenuStringW
InsertMenuW
SetMenuItemBitmaps
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
EnumChildWindows
GetClassNameW
PostMessageW
DialogBoxParamW
EndDialog
ScreenToClient
OffsetRect
GetCursorPos
GetSystemMetrics
SetWindowRgn
MoveWindow
ShowWindow
LoadBitmapW
EnableWindow
DestroyWindow
GetDlgItem
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
SetWindowPos
KillTimer
SetTimer
SetWindowTextW
RegisterClassW
CreateWindowExW
SetWindowLongW
GetWindowLongW
TrackMouseEvent
InvalidateRect
SetCapture
ReleaseCapture
PtInRect
GetParent
SendMessageW
UnregisterClassA

gdi32

GetStockObject
CreateFontW
CreateRoundRectRgn
BitBlt
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SetDIBits
DeleteDC
DeleteObject
SetTextColor
SetBkMode
SelectObject

advapi32

GetUserNameW
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
LookupAccountNameW
CopySid
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHQueryRecycleBinW
DragQueryFileW
SHEmptyRecycleBinW

ole32

CoCreateGuid
IIDFromString
ReleaseStgMedium
StringFromIID
CoGetMalloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1f56c15c588b65e99c4af8a0534f1b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 174KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 12KB - Virtual size: 148KB

.rsrc Size: 52KB - Virtual size: 49KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 176KB - Virtual size: 174KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 12KB - Virtual size: 148KB

.rsrc
Size: 52KB - Virtual size: 49KB

.reloc
Size: 12KB - Virtual size: 11KB