799b1baa9b88e4f54689f1726c470ead

Sharing

Copy URL Twitter E-mail

General

Target

799b1baa9b88e4f54689f1726c470ead
Size

64KB
MD5

799b1baa9b88e4f54689f1726c470ead
SHA1

7c7425218046f403c2730c3c32b1dcd16e5b00d0
SHA256

342320d2b9e8b7f57772e474ced8bca5a44633756518ddb4a4689dbd0e7510cc
SHA512

a1f304b0329eb6370ebe69914b5077d58b1abed65a6bfb2bdc0cd3f24df82f7f3efa5d953c344080ba2acea935b22efe0d42174b88d451754aefbd564832c131
SSDEEP

1536:LZs+/Qsz+CMdpqZNqJEQlZwEYgtGL+6fL/HNJwyIcNuVR:LZs+/oXpcINlZOgtw+4gIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
799b1baa9b88e4f54689f1726c470ead

Files

799b1baa9b88e4f54689f1726c470ead
.dll windows:5 windows x86 arch:x86

3db0aa1ccdd632fb83a0ba0e18616cd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDlgItemTextW
RegisterClassW
CreateWindowExW
ModifyMenuW
RegisterClipboardFormatA
IsDialogMessageA
RedrawWindow
DestroyWindow
DeleteMenu
CountClipboardFormats
CallWindowProcW
WaitMessage
CreateWindowExA
EnumChildWindows
GetMenuItemCount
LoadImageA
DefMDIChildProcW
LoadMenuA
KillTimer
MapWindowPoints
GetKeyboardState
GetFocus
IsIconic
CharToOemBuffA
ModifyMenuA
GetParent
GetClassLongA
SetParent
SetFocus
WinHelpA
InsertMenuA
CheckMenuItem
CharNextW
SetCursorPos
IntersectRect
DrawMenuBar
SendMessageW
CharToOemA
GetWindowThreadProcessId
GetWindowDC
GetClientRect
ShowWindow
InflateRect
GetSystemMetrics
MessageBoxW

shell32

SHGetFileInfoA
ShellExecuteW
ExtractIconA

kernel32

CreateDirectoryW
lstrlenW
CreateFileMappingW
VirtualProtect
GetStartupInfoA
GetLocaleInfoA
GetTempPathW
GetTickCount
WaitForSingleObject
FormatMessageA
CloseHandle
CreateFileA
FileTimeToSystemTime
_hwrite
LocalAlloc
GetACP
FindNextFileW
WaitForMultipleObjects
MoveFileExW
VirtualQueryEx
GetVersionExA
VirtualProtectEx
UnhandledExceptionFilter
GetModuleHandleA
TerminateProcess
GetCurrentProcess
QueryPerformanceFrequency
GetCurrentThreadId
lstrcpyA
OpenProcess
UnmapViewOfFile
GetComputerNameW
lstrcpynW
LocalLock
WriteFile
lstrlenW
SetEvent
GetStdHandle
EnterCriticalSection
MapViewOfFileEx
SetFileAttributesA
CreateMutexA
GlobalAddAtomA
SetCurrentDirectoryW
SetPriorityClass
RaiseException
CompareStringW
TlsGetValue
HeapFree

gdi32

DeleteObject
SaveDC
GetTextExtentPoint32W
AbortDoc
StretchDIBits
EndPage
StartDocW
ExtCreatePen
SetTextColor
GetObjectA
CreatePen
GetTextColor
CreateFontIndirectA
SetBkColor
PtInRegion
CreateCompatibleBitmap

advapi32

RegCreateKeyW
RegOpenKeyExA
RegQueryValueA

winspool

DocumentPropertiesA

diacxml3

_LXbig
_LEps
_Exp
_FSinh
_Nan
_Poly
_FRteps
_FDtest
_FDenorm
_LExp
_FInf

comctl32

CreateToolbarEx
ImageList_ReplaceIcon

comdlg32

CommDlgExtendedError

Exports

Exports

GetLDAPTypeName
BuildADsPathFromLDAPPath
CreateProcessNotify
DllClientCleanup
mplarate
GetDefaultServer
BuildLDAPPathFromADsPath
DllClientStartup
ConvertSidToU2Trustee
FreeObjectInfo
SdbCloseApphelpInformation
FindEntryInSearchTable
ConvertSidToString
ChangeSeparator
ConvertU2TrusteeToSid
GetDisplayName
FindSearchTableIndex
BuildADsPathFromParent
BuildADsParentPath
GetPermLayers
GetDomainDNSNameForDomain
FreeADsStr
AllocADsStr
ApphelpUpdateCacheEntry

Sections

.text
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3db0aa1ccdd632fb83a0ba0e18616cd4

Headers

File Characteristics

Imports

user32

shell32

kernel32

gdi32

advapi32

winspool

diacxml3

comctl32

comdlg32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 60KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 60KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB