8f0fa31e18c9a0f91b7f66392b84ccbe

Sharing

Copy URL Twitter E-mail

General

Target

8f0fa31e18c9a0f91b7f66392b84ccbe
Size

1.4MB
MD5

8f0fa31e18c9a0f91b7f66392b84ccbe
SHA1

3b3e314eb007e27ce24d07a19767b1893272b9b0
SHA256

cca63196568fb04459402847892665d321b3276bd3a332dee1e30d05c519203d
SHA512

40638a5d06170ed2a30d41a4adede7144c302c909180ecda3105a1a48f862c28a5ba3f1c8a89024ff59d60f74cb20ef8dd1896608473d80cde7e220e42e1db4c
SSDEEP

24576:lR6qtGeEW0nDzMiIdRV/INEUNQdTmIYGN60Jk4QBb3Isa20y:lcMiIjR7mIYFwZm3If2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f0fa31e18c9a0f91b7f66392b84ccbe

Files

8f0fa31e18c9a0f91b7f66392b84ccbe
.dll regsvr32 windows:6 windows x86 arch:x86

a1e7ff2b0f71022e6765cb48bc4f51d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

micaut.pdb

Imports

msvcrt

free
wcsncpy_s
memcpy_s
_resetstkoflw
swprintf_s
calloc
_purecall
_callnewh
memset
memmove_s
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_lock
_unlock
__dllonexit
_onexit
_errno
realloc
_except_handler4_common
sprintf_s
memcmp
floor
_ftol2_sse
_ftol2
strchr
_vsnprintf
ceil
_ltow
_ltow_s
wcsncmp
_wcsnicmp
_wcslwr_s
wcstol
iswdigit
_wtol
_wcsicmp
_wtoi
memmove
_CIsqrt
_CxxThrowException
__CxxFrameHandler3
malloc
memcpy

ntdll

EtwEventUnregister
EtwEventWrite
EtwEventRegister

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW

kernel32

Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
InterlockedPushEntrySList
OutputDebugStringA
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPopEntrySList
GetProcessHeap
VirtualFree
InterlockedCompareExchange
HeapFree
HeapAlloc
WideCharToMultiByte
GetStringTypeExW
InterlockedExchange
GetTickCount
MulDiv
CreateFileW
WriteFile
CloseHandle
SetLastError
LockResource
GetModuleFileNameW
FindResourceExW
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
GetModuleHandleW
LoadLibraryExW
HeapSize
GetModuleHandleA
GetACP
GetSystemDefaultLCID
GetProfileIntA
GetUserDefaultLCID
GetSystemDefaultLangID
HeapReAlloc
DisableThreadLibraryCalls
HeapDestroy
HeapCreate
ResetEvent
WaitForSingleObject
WaitForMultipleObjects
TryEnterCriticalSection
SetEvent
ResumeThread
SetThreadPriority
CreateEventW
LoadLibraryW
GetLocaleInfoW
GetUserDefaultUILanguage
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
GetTickCount64
CreateThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetProcAddress
GetLastError
FreeLibrary
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetVersionExA

user32

GetDC
IsWindow
SetWindowTextW
PostMessageW
EqualRect
ClientToScreen
SetWindowPos
DestroyWindow
SetRectEmpty
GetClientRect
TrackPopupMenuEx
EndMenu
CharNextW
CallWindowProcW
ReleaseDC
SetWindowRgn
RegisterClipboardFormatW
DefWindowProcW
GetWindowLongW
GetClipboardFormatNameW
CreatePopupMenu
AppendMenuW
UnregisterClassA
GetWindow
SetTimer
SetForegroundWindow
GetForegroundWindow
DestroyMenu
ShowWindow
SendMessageW
LoadIconW
KillTimer
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
IsChild
GetFocus
BeginPaint
EndPaint
ScreenToClient
FillRect
TrackMouseEvent
GetSysColor
GetPropW
EnumDisplayMonitors
ReleaseCapture
OffsetRect
BeginDeferWindowPos
DeferWindowPos
GetWindowRect
EndDeferWindowPos
AdjustWindowRectEx
GetUpdateRect
ValidateRect
GetSysColorBrush
FrameRect
SetCapture
SetPropW
RemovePropW
GetMessagePos
NotifyWinEvent
RegisterWindowMessageW
InflateRect
DrawFrameControl
GetParent
SystemParametersInfoW
DrawTextW
GetWindowDC
GetDesktopWindow
CreateCursor
GetClassInfoW
RegisterClassW
DestroyCursor
GetCursorPos
SetFocus
GetMessageTime
SetCursor
DrawIconEx
DestroyIcon
SetMenuItemInfoW
MonitorFromRect
SetWindowsHookExW
UnhookWindowsHookEx
DeleteMenu
GetSystemMetrics
WindowFromDC
CallNextHookEx
MenuItemFromPoint
DestroyCaret
InvertRect
SetCaretBlinkTime
GetDoubleClickTime
SendMessageA
LoadBitmapW
LoadBitmapA
LoadCursorA
IsWindowUnicode
UnregisterClassW
GetKeyboardLayoutList
GetKeyboardLayout
UnionRect
PtInRect
InvalidateRect
GetKeyState
IntersectRect
LoadImageW
SetWindowLongW
IsRectEmpty
CopyRect
GetMonitorInfoW

ole32

OleLockRunning
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CreateStreamOnHGlobal
RegisterDragDrop
CoCreateGuid
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CoGetClassObject
RevokeDragDrop
CoCreateFreeThreadedMarshaler

oleaut32

VariantClear
SysStringByteLen
VariantInit
VarBstrCmp
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayCreateVector
SysAllocString
DispCallFunc
OleCreatePropertyFrame
SysFreeString
SysStringLen
VarUI4FromStr
SysAllocStringLen
VarBstrCat
OleCreatePictureIndirect
LoadRegTypeLi
LoadTypeLi

gdi32

GetCurrentObject
GetBkColor
GetGlyphOutlineW
GetOutlineTextMetricsW
GetFontData
TranslateCharsetInfo
GetPixel
GetTextCharsetInfo
GetTextMetricsA
GetObjectA
CreateFontIndirectA
CreateICW
EnumFontFamiliesExW
RealizePalette
SelectPalette
CreatePalette
Escape
GetObjectType
SetBkColor
SetTextAlign
ExtTextOutW
ExtTextOutA
GetOutlineTextMetricsA
GetGlyphIndicesW
GetCharWidth32A
GetCharWidthA
GetCharABCWidthsW
GetTextFaceW
StretchDIBits
SetWindowExtEx
Polyline
CreateFontW
SetROP2
SetDCBrushColor
Ellipse
GetStockObject
SetViewportOrgEx
GetDeviceCaps
RestoreDC
CreateRectRgnIndirect
CreateRectRgn
BitBlt
SetLayout
DeleteDC
SaveDC
LPtoDP
CreateDCW
DeleteObject
GetCharWidthW
SetMapMode
CreateSolidBrush
PtInRegion
CreateCompatibleDC
SelectObject
GdiFlush
CreateDIBSection
SelectClipRgn
CreatePen
MoveToEx
LineTo
PatBlt
CreateRoundRectRgn
CombineRgn
GetRegionData
ExtSelectClipRgn
SetTextColor
SetDIBColorTable
GetObjectW
SetStretchBltMode
OffsetRgn
ExtCreateRegion
GetDIBColorTable
StretchBlt
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPointW
GetTextColor
SetBkMode
CreateCompatibleBitmap
CreateBitmap
GetBitmapBits
SetWindowOrgEx

oleacc

AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipDrawLineI
GdipDrawImageI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipDeletePen
GdipCreatePen1
GdipFillRectangleI
GdipCloneBrush
GdipAlloc
GdipFree
GdipCreateSolidFill
GdipDeleteGraphics
GdipCreateFromHDC
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipDrawEllipseI
GdiplusStartup
GdipCreatePen2
GdipDeleteBrush
GdiplusShutdown
GdipCreateFromHWND
GdipSetClipRectI
GdipCreateLineBrushI
GdipFillEllipseI
GdipReleaseDC
GdipGetDC
GdipDrawRectangleI
GdipSetPenDashArray
GdipSetPenDashStyle

shell32

ord165
SHGetFolderPathW

comctl32

ord8

usp10

ScriptGetCMap
ScriptGetProperties
ScriptFreeCache
ScriptShape
ScriptPlace
ScriptItemize
ScriptGetLogicalWidths
ScriptTextOut

uxtheme

GetThemeBackgroundRegion
IsThemeActive
OpenThemeData
DrawThemeTextEx
CloseThemeData
GetThemeMargins
GetThemePartSize
GetThemeColor
DrawThemeBackground
DrawThemeEdge
DrawThemeIcon
DrawThemeText

msimg32

TransparentBlt
GradientFill
AlphaBlend

dwmapi

DwmEnableBlurBehindWindow
DwmIsCompositionEnabled

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 791KB - Virtual size: 790KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 557KB - Virtual size: 557KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1e7ff2b0f71022e6765cb48bc4f51d3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ntdll

api-ms-win-core-registry-l1-1-0

kernel32

user32

ole32

oleaut32

gdi32

oleacc

gdiplus

shell32

comctl32

usp10

uxtheme

msimg32

dwmapi

Exports

Exports

Sections

.text Size: 791KB - Virtual size: 790KB

.data Size: 48KB - Virtual size: 50KB

.idata Size: 11KB - Virtual size: 11KB

.rsrc Size: 557KB - Virtual size: 557KB

.reloc Size: 35KB - Virtual size: 35KB

.text
Size: 791KB - Virtual size: 790KB

.data
Size: 48KB - Virtual size: 50KB

.idata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 557KB - Virtual size: 557KB

.reloc
Size: 35KB - Virtual size: 35KB