8ea6c73e0ba18a41301c2d2e7fc7ec4a

Sharing

Copy URL

Twitter E-mail

General

Target

8ea6c73e0ba18a41301c2d2e7fc7ec4a
Size

63KB
MD5

8ea6c73e0ba18a41301c2d2e7fc7ec4a
SHA1

2e25344a2b762df313b95500e36c746c2d6e9773
SHA256

46bfa6676bf1b00408f4067c58be19441a50b817a5240a3f97da52bd5bd8f2b6
SHA512

8a4831d35b3a0d2ff42b32c1cc3b517685b2c1cff2f8bfa2bfeeec06cf8635bb18901a5c4c8e8dd94bebe66f15d8f8da4da3e9f75306043d54620bced16aa5ab
SSDEEP

1536:iTaPjYhMPWIUTHIdlpvSm90ZqSSdsKRBcAvw+ItM:nPjdvUTyl5SQfdePT+It

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ea6c73e0ba18a41301c2d2e7fc7ec4a

Files

8ea6c73e0ba18a41301c2d2e7fc7ec4a
.dll windows:5 windows x86 arch:x86

0dc4cb272904851313c94586571212e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SafeArrayCreate
VariantCopy
GetActiveObject
SafeArrayAccessData
SysReAllocStringLen

kernel32

RtlUnwind
GetLocaleInfoA
ResumeThread
GetModuleHandleA
EnterCriticalSection
FileTimeToSystemTime
LoadResource
CreateFileA
GetComputerNameW
TerminateProcess
FileTimeToDosDateTime
WaitForMultipleObjects
GetACP
GetExitCodeProcess
VirtualQueryEx
FreeResource
UnmapViewOfFile
CreateFileMappingW
SetErrorMode
SetEvent
ReleaseMutex
TryEnterCriticalSection
GetComputerNameA
HeapAlloc
LoadLibraryExA
lstrlenW
lstrlenW
TerminateProcess
CloseHandle
CompareStringW
CreateFileW
GetStringTypeExA
SetThreadAffinityMask
GetVersion
GlobalFree
FindResourceA
FileTimeToLocalFileTime
MapViewOfFile

user32

GetKeyState
GetLastActivePopup
LoadIconA
GetDCEx
MoveWindow
DrawIconEx
SetParent
InsertMenuA
UnregisterClassW
RemoveMenu
GetCaretPos
ScreenToClient
ClientToScreen
DestroyCaret
DrawCaption
GetClassInfoA
GetUpdateRect
MsgWaitForMultipleObjects
SendMessageA
GetDesktopWindow
GetMessagePos
PostMessageW
FillRect
FindWindowExA
SetFocus
FindWindowA
SetPropA
PostQuitMessage
CharLowerBuffW
GetClipboardFormatNameA
IsDialogMessageA
IsClipboardFormatAvailable

atmfbc32

_LDenorm
_LSnan
_Toupper
_Strxfrm

comctl32

ImageList_GetDragImage
ImageList_DragMove
ImageList_Replace
ImageList_Remove

shell32

ShellExecuteExA
SHGetDesktopFolder
DragQueryPoint

gdi32

CreateCompatibleDC
GetDIBColorTable
GetNearestColor
GetEnhMetaFileDescriptionA
OffsetClipRgn
LPtoDP
GetEnhMetaFilePaletteEntries
StretchBlt
SetRectRgn
MaskBlt
GetBrushOrgEx
CreateBrushIndirect
SetViewportExtEx
GetWinMetaFileBits
SelectObject

wininet

HttpOpenRequestA
HttpSendRequestA
InternetReadFile

ole32

StringFromGUID2
CoGetClassObject
ProgIDFromCLSID
RegisterDragDrop
OleSetMenuDescriptor
CoUninitialize
CreateDataAdviseHolder

imm32

ImmGetVirtualKey

Exports

Exports

CreateProcessNotify
Component
DllClientCleanup
SdbCloseApphelpInformation
BerBvFree
compgoff
FreeADsMem
DllClientStartup
AllocADsStr
ConvertSidToString
BuildADsPathFromLDAPPath
FreeADsStr
AdsTypeToLdapTypeCopyTime
AdsTypeToLdapTypeCopyGeneralizedTime
FindEntryInSearchTable
GetDisplayName
BuildADsParentPath
ChangeSeparator
AllocADsMem
BuildADsParentPathFromObjectInfo
GetPermLayers
GetDomainDNSNameForDomain
GetDefaultServer
BuildADsPathFromParent
ConvertSidToU2Trustee

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0dc4cb272904851313c94586571212e4

Headers

File Characteristics

Imports

oleaut32

kernel32

user32

atmfbc32

comctl32

shell32

gdi32

wininet

ole32

imm32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 56KB

.rdata Size: 4KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 56KB

.rdata
Size: 4KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB