995c95ba76dc7e11b879ff0328521ca9

Sharing

Copy URL Twitter E-mail

General

Target

995c95ba76dc7e11b879ff0328521ca9
Size

135KB
MD5

995c95ba76dc7e11b879ff0328521ca9
SHA1

6f79f146507df9e01bbe83d4a5d5841de8ffd2e7
SHA256

5b33bf2d7097511f294409c2c97e52bffd4ccc1560cfd7ea10c92a126288d4cb
SHA512

402dc41aa0dcdf51a3ebb698f53ebc7925bfebc0c07eeafa0bb0de97e69af1c8dd60376e45d1e0e56dccbac14bbce00c4db8fd2cfb19baa1929f9597913b20d6
SSDEEP

1536:nuSM379pilzy4aCUBGbrufhif3ba/Qtps4zWeYXuOtMl4:nu79WdaC2urufq33UeYuOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
995c95ba76dc7e11b879ff0328521ca9

Files

995c95ba76dc7e11b879ff0328521ca9
.dll windows:4 windows x86 arch:x86

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileW
DeleteFileA
GetFileTime
FindAtomA
OpenFile
CopyFileA
ReadConsoleA
CreateProcessA
GetLastError
CopyFileExW
WriteFile
GlobalFree
GetStdHandle
CreateThread
GetCommandLineA
CopyFileA
GetComputerNameA
WriteFile
GetCPInfo
FindFirstFileA
ReadConsoleA
GetFileSize
OpenFile
GetStdHandle
OpenFileMappingA
ReadFile
DeleteFileA
GetConsoleMode
FindAtomA
DeleteFileW
DeleteAtom
DeleteFileA
CopyFileA
GetComputerNameA
GetFileTime
ReadConsoleA
CopyFileExA
CopyFileW
GetCommandLineA
ExitThread
OpenFileMappingA
FindAtomA

user32

CalcMenuBar
DialogBoxParamW
CloseWindow
GetCursor
DrawTextA
GetDC
AlignRects
CopyImage
InsertMenuA
GetWindowTextLengthA
DrawTextW
CopyImage
AlignRects
GetMenu
DrawIcon
BlockInput
CopyRect
GetDlgItem
GetFocus
AppendMenuW
IsWindow
GetWindowTextLengthA
CalcMenuBar
EndDialog
CopyIcon
AppendMenuA

gdi32

DeleteDC
AbortPath
AddFontResourceW
SetTextColor
DeleteObject
AddFontResourceA
RestoreDC
AddFontResourceExA
AddFontResourceExW
ClearBitmapAttributes
GetBitmapBits
GetPixel
GetPixel
AddFontMemResourceEx
GetBrushOrgEx
BeginPath
GetBrushOrgEx
CreateSolidBrush
SetTextColor
AddFontResourceA
AddFontResourceExW
CancelDC
DeleteObject
AddFontResourceW
GetClipBox
ClearBrushAttributes
AddFontMemResourceEx
ExcludeClipRect
CloseFigure
GetBitmapBits
GetCurrentPositionEx
ClearBitmapAttributes
AddFontResourceExA
GetBrushOrgEx
ExtTextOutA
CloseFigure
CreateSolidBrush
GetPixel
BeginPath
AddFontMemResourceEx
ClearBitmapAttributes
AbortPath
ExtTextOutA
GetPixel
AddFontResourceW
GetClipBox
RestoreDC
GetBitmapBits
BeginPath
AddFontResourceExA
GetPixel
ClearBrushAttributes
SetTextColor
AddFontResourceExW
AddFontResourceTracking
GetBrushOrgEx
AddFontMemResourceEx
DeleteDC
CreateSolidBrush
AddFontResourceA
AbortPath

comctl32

ImageList_Read
ImageList_DragMove
ImageList_Destroy
ImageList_GetIconSize
ImageList_DragEnter
ImageList_DragShowNolock
InitCommonControls
ImageList_AddIcon
ImageList_GetImageCount
ImageList_Replace
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_GetImageRect
ImageList_LoadImage
InitCommonControls
ImageList_DrawIndirect
ImageList_Remove
ImageList_EndDrag
ImageList_Destroy

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 393B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 102KB - Virtual size: 102KB

.bbs Size: - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 3KB

.tls Size: - Virtual size: 393B

.rdata Size: 512B - Virtual size: 197B

.rsrc Size: 1024B - Virtual size: 52KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 102KB - Virtual size: 102KB

.bbs
Size: - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 393B

.rdata
Size: 512B - Virtual size: 197B

.rsrc
Size: 1024B - Virtual size: 52KB