7f4619e61b1da2624b56c984b1cd0a6b

Sharing

Copy URL Twitter E-mail

General

Target

7f4619e61b1da2624b56c984b1cd0a6b
Size

524KB
MD5

7f4619e61b1da2624b56c984b1cd0a6b
SHA1

b6be455b96f1ed4fa06f14cd07862864b4fd9f34
SHA256

9fc1f6475ffe4e215e01c28e6f93513f8ce7c6cdff80f6bbf1e8aefc90352dc1
SHA512

b07a3a11bd3d519ed20c26a36b4f53d93a07913df345db7928c9d6d7755241b82b3c61e963ce62c068384fce240cf8e2ad6568085899d31223b62c558b183fef
SSDEEP

6144:EWIsJ651xjEWQJB8mpThthS6el7I6wHpI3zt7eohfIuRyDXatrNKb:EDsJ651xjKJSmphSrW6wH+CK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f4619e61b1da2624b56c984b1cd0a6b

Files

7f4619e61b1da2624b56c984b1cd0a6b
.dll windows:4 windows x86 arch:x86

bc32b4d6e8861db33db75d98981ed7cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

PathFileExistsA
StrStrIW

kernel32

GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
LoadResource
FindResourceA
GetProcessVersion
DuplicateHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
GetPrivateProfileIntA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
ExitProcess
TerminateProcess
CreateThread
ExitThread
RaiseException
HeapSize
HeapReAlloc
GetACP
FatalAppExitA
Sleep
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalFlags
MulDiv
SetLastError
GetVersion
lstrcpynA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FormatMessageA
WaitForMultipleObjectsEx
OutputDebugStringA
lstrcpynW
GetStringTypeW
IsDBCSLeadByte
lstrcpyW
lstrcpyA
GetThreadPriority
SetThreadPriority
ResumeThread
SuspendThread
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
lstrlenW
WriteFile
CreateFileA
OpenEventA
GetMailslotInfo
ReadFile
CreateMailslotA
lstrlenA
WaitForMultipleObjects
SetEvent
CreateEventA
WideCharToMultiByte
GetTickCount
LocalUnlock
LocalAlloc
LocalLock
LocalFree
ReleaseSemaphore
WaitForSingleObject
CloseHandle
OpenSemaphoreA
CreateSemaphoreA
GetModuleFileNameA
MultiByteToWideChar
GetVersionExA
GetLastError
HeapAlloc

user32

SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
UpdateWindow
LoadIconA
LoadCursorA
GetSysColorBrush
CharUpperA
DestroyMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetWindowTextLengthA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
RegisterWindowMessageA
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ScreenToClient
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenuItemCount
GetDesktopWindow
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
LoadStringA
UnregisterClassA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
SetCursor
ShowOwnedPopups
SendMessageA
PostMessageA
UnhookWindowsHookEx
OemToCharA
CharToOemA
PostQuitMessage
MessageBoxA
SetTimer
KillTimer
PeekMessageA
wsprintfW
wsprintfA
OffsetRect
GetDlgItemTextA
IntersectRect
DispatchMessageA

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SetViewportOrgEx
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
ExtCreatePen
CreateSolidBrush
SetBkColor
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetDCOrgEx
GetObjectA
SelectPalette
GetStockObject
SetTextColor
SetMapMode
SelectObject
RestoreDC
SetStretchBltMode
SetROP2
SetPolyFillMode
SaveDC
StartDocA
DeleteDC
DeleteObject
CreateRectRgn
CreateBitmap
SetBkMode

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteValueA

shell32

SHGetFileInfoA
SHGetSpecialFolderPathA
DragAcceptFiles

comctl32

ord17

ole32

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CoCreateInstance
PropVariantClear
CoInitializeEx
CoUninitialize
StringFromCLSID

oleaut32

SysAllocString
SysFreeString
VariantInit
SysStringLen
VariantClear

Exports

Exports

ClearEventCallBack
ComMethod_CancelWaitReceive
ComMethod_FinishReceive
ComMethod_FinishSend
ComMethod_ReceiveData
ComMethod_SendData
ComMethod_StartReceive
ComMethod_StartSend
ConnectCamera
CreateCameraObject
DestroyCameraObject
DisconnectCamera
DisconnectCameraStrictly
EndCache
ExecuteOperation
FinishCALib
FwDeregister
FwIsRegister
FwRegister
GetDeviceInfo
GetDeviceList
GetDllsVersion
GetFileData
GetFunctions
GetObjectInfoExFromCache
GetParentObjectHandleFromCache
GetStorageIDsFromCache
LockDevice
PTPChangeUSBProtocol
PTPDT_GetTargetHandles
PTPDT_NotifyCancelAccepted
PTPDT_NotifyProgress
PTPDeleteObject
PTPDeletePairingInfo
PTPFormatStore
PTPGetCustomizeData
PTPGetCustomizeItemInfo
PTPGetCustomizeSpec
PTPGetDeviceInfo
PTPGetDevicePropDesc
PTPGetDevicePropValue
PTPGetMACAddress
PTPGetNumObjects
PTPGetObjectHandleByName
PTPGetObjectInfo
PTPGetObjectInfoEx
PTPGetPairingInfo
PTPGetPartialObjectEx
PTPGetPartialObjectInfo
PTPGetStorageIDs
PTPGetStorageInfo
PTPGetWirelessMAXChannel
PTPInitiateDirectTransferEx2
PTPInitiateReleaseControl
PTPPairingComplete
PTPRC_Capture
PTPRC_DoAeAfAwb
PTPRC_FocusLock
PTPRC_FocusUnlock
PTPRC_GetChangedReleaseParamesList
PTPRC_GetViewFinderData
PTPRC_InitiateViewFinder
PTPRC_TerminateViewFinder
PTPSetCustomizeData
PTPSetDevicePropValue
PTPSetDisplayMonitor
PTPSetObjectArchive
PTPSetObjectProtection
PTPSetObjectTime
PTPSetPairingInfo
PTPTerminateDirectTransfer
PTPTerminateReleaseControl
SendFileData
SetEventCallBack
StartCALib
StartCache
UnlockDevice
UpdateCache

Sections

.text
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc32b4d6e8861db33db75d98981ed7cd

Headers

File Characteristics

Imports

version

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 312KB - Virtual size: 309KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 28KB - Virtual size: 39KB

.idata Size: 16KB - Virtual size: 12KB

.rsrc Size: 108KB - Virtual size: 106KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 312KB - Virtual size: 309KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 28KB - Virtual size: 39KB

.idata
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 108KB - Virtual size: 106KB

.reloc
Size: 16KB - Virtual size: 15KB