8cea0b9be246be560976841dcea5374d

General

Target

8cea0b9be246be560976841dcea5374d
Size

344KB
MD5

8cea0b9be246be560976841dcea5374d
SHA1

7ffeb0023d0645a17400d5126ed8dd225aff44e5
SHA256

66b3fa61a0c890822e6d0d0f8a5b46396be5af91db2de85bb0321e55d20a47db
SHA512

bd4cbcedc5ce320a43499bddae0d24fa61cba406500481d8dfedce3ca9bad6a90e022f2d600db37e645d2c0c92fe42a16d55cde9b681aa66c1e0fb688a76f2d8
SSDEEP

6144:JF3sYWqVd9QfH0sthtUynPXS6MR8M3WA/2mJpSODTBncHrcW5q8p4U9k0UAX5XRI:1Vd6/3Wyn/iR8mvTBgISq04ckl85XRHo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cea0b9be246be560976841dcea5374d

Files

8cea0b9be246be560976841dcea5374d
.dll windows:4 windows x86 arch:x86

4a7f9f4f5d213af9f9b4c82b0c43a2f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

wcscspn
RtlInitString
RtlDestroyEnvironment
wcscpy

comctl32

PropertySheetA
CreatePropertySheetPageA

imm32

ImmGetVirtualKey
ImmEnumInputContext
ImmDestroyIMCC
ImmIsIME
ImmReSizeIMCC
ImmGetConversionListA
ImmGetImeMenuItemsW

ole32

CoRegisterMallocSpy
CoTaskMemRealloc
OleCreateEx
OleCreateLinkToFile
StgCreateDocfile
CoGetClassVersion

kernel32

ReadFileEx
ReplaceFileW
SetConsoleTitleA
SetVolumeLabelA
UnmapViewOfFile
VirtualAllocEx
VirtualProtectEx
lstrcatW
ReadFile
Module32FirstW
LockResource
IsBadReadPtr
InitializeCriticalSection
HeapCreate
HeapAlloc
GlobalReAlloc
AddConsoleAliasW
EnumDateFormatsExW
EraseTape
ExitProcess
ExpandEnvironmentStringsW
FlushFileBuffers
GetBinaryTypeA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcessId
GetDateFormatA
GetFileSizeEx
GetModuleHandleA
GetOverlappedResult
GetVersionExA

oleaut32

SysStringLen
SafeArrayGetElemsize
VariantCopy
VarI4FromR4
VarCyInt
VarCyFromDec
SetErrorInfo

advapi32

RegDeleteKeyA

Exports

Exports

D3D10ResourceGetMappedPitch
EnumFileInItemReset
GetPluggedDevice

Sections

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a7f9f4f5d213af9f9b4c82b0c43a2f6

Headers

File Characteristics

Imports

ntdll

comctl32

imm32

ole32

kernel32

oleaut32

advapi32

Exports

Exports

Sections

.text Size: 208KB - Virtual size: 208KB

.data Size: 124KB - Virtual size: 124KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 208KB - Virtual size: 208KB

.data
Size: 124KB - Virtual size: 124KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB