97bd51dc496d1eb6eac6733b85a4c5e3

Sharing

Copy URL

Twitter E-mail

General

Target

97bd51dc496d1eb6eac6733b85a4c5e3
Size

68KB
MD5

97bd51dc496d1eb6eac6733b85a4c5e3
SHA1

4b1502adbb47fb0ccfec8af900cd46b92219eb57
SHA256

3fda7a6ffc22054a14a0c1853c461a1e09b2381bb34a57bef894889231e05b29
SHA512

6eb599201b9cda53f35357aea7ebacf91cb56228701f29e8520eac010dfe5aa0e696d06f0b540e36fd0abec414dd678a3d6410ec34373ab06c649356d4d37838
SSDEEP

1536:HZo/JRYHsb9NA/mKpDKgwcivXPUzQ/Iag:H+OHshNkmUegCXRpg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97bd51dc496d1eb6eac6733b85a4c5e3

Files

97bd51dc496d1eb6eac6733b85a4c5e3
.dll windows:4 windows x86 arch:x86

3d1e78d3ba61d0dadfdacd2847fdb885

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
ReleaseMutex
CreateProcessA
VirtualProtect
GetModuleHandleA
LoadLibraryA
GetModuleFileNameA
lstrcatW
HeapAlloc
lstrcpyW
HeapFree
CreateThread
LeaveCriticalSection
VirtualQuery
GetProcAddress
CreateMutexA
GetProcessHeap
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
WaitForSingleObject
lstrlenA
HeapWalk
lstrcpyA
SetEvent
GetFileType
GetFileInformationByHandle
SetConsoleScreenBufferSize
WriteFileEx
PeekConsoleInputA
OpenThread
DosDateTimeToFileTime
GetTimeFormatW
ExitProcess
SizeofResource
DuplicateHandle
GetStdHandle
ReleaseSemaphore
CompareStringA
GetComputerNameExW
RtlUnwind
SearchPathW
VerLanguageNameW
GetCurrentDirectoryA
OpenProcess
SetEnvironmentVariableA
CreateToolhelp32Snapshot
RtlMoveMemory
DeviceIoControl
OpenMutexW
WaitForMultipleObjectsEx
GetTempPathW
OpenFileMappingA
GetVersion
GetDefaultCommConfigW
GetDriveTypeW
WinExec
GetConsoleCP
GetCurrentThread
IsValidCodePage
SetEnvironmentVariableW
SetConsoleCtrlHandler
LocalUnlock
GetDateFormatA
SetSystemTime

ole32

CoGetMarshalSizeMax
CoQueryProxyBlanket
MkParseDisplayName
CoCreateFreeThreadedMarshaler
CreateILockBytesOnHGlobal
CoCreateGuid
OleCreateLinkToFile
CoTaskMemFree
CoUninitialize

user32

EndPaint
CheckDlgButton
TrackPopupMenuEx
WindowFromDC
GetCaretPos
OemToCharA
GetSubMenu
DefMDIChildProcW
EqualRect
DispatchMessageA
UnhookWindowsHookEx
GetMessageA
SetWindowsHookExA
CallNextHookEx
SetTimer
SetWindowTextA
FindWindowW
AttachThreadInput
ModifyMenuA
GetUpdateRect
MessageBoxW
SetParent
FlashWindow
CreateIconFromResourceEx
OemToCharBuffA
ScrollWindowEx
IsDialogMessageA
GetInputState
FindWindowExA
IsMenu
SendMessageTimeoutW
GetMenuStringW
ExitWindowsEx
IsWindowEnabled
SetWindowsHookExW
DrawTextA
GetAsyncKeyState
ShowCursor
SetMenuItemInfoA
CharToOemA
GetWindowDC
BringWindowToTop
AdjustWindowRectEx
SetDlgItemInt
GetMenuStringA
TabbedTextOutW
RemovePropA
DialogBoxParamW
CopyIcon
CreateAcceleratorTableW
GetGUIThreadInfo
MessageBoxIndirectA
CharPrevW
InsertMenuItemW
GetTabbedTextExtentA

Exports

Exports

DllInit
DllInstall

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d1e78d3ba61d0dadfdacd2847fdb885

Headers

File Characteristics

Imports

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB