e6142acca8e834eb1c63e1b2dc074a901c91e323c9a8fcc9d9e1f358f0e55129

Sharing

Copy URL Twitter E-mail

General

Target

e6142acca8e834eb1c63e1b2dc074a901c91e323c9a8fcc9d9e1f358f0e55129
Size

565KB
MD5

258d3233644c4ab9a79509c7622d81a9
SHA1

fe9b04f6cb180db20c80c46c2d680e2895d30afb
SHA256

e6142acca8e834eb1c63e1b2dc074a901c91e323c9a8fcc9d9e1f358f0e55129
SHA512

80717a20f5fd6bc3fc22bb2b85fc7b63b09ca4c0f2504c1b3b859fc4366876df78a4b80e1113a5aece59e3b1cc1188989a533d30c0d65505e781fd907e4118df
SSDEEP

6144:WMHGShxPtFVoY7/zfkvPPtFVoY7/zfkv7eGTV3ZZb2AiKxiom8mi2fydPc:W8nr3VP7Q33VP7QakR2APc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6142acca8e834eb1c63e1b2dc074a901c91e323c9a8fcc9d9e1f358f0e55129

Files

e6142acca8e834eb1c63e1b2dc074a901c91e323c9a8fcc9d9e1f358f0e55129
.dll windows:4 windows x64 arch:x64

a4ebf789b06d72ba09ad74b045cdb2dc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW

comctl32

ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
InitCommonControlsEx
PropertySheetW

kernel32

DelayLoadFailureHook
DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
LoadLibraryA
LoadLibraryExW
RaiseException
ResolveDelayLoadedAPI
WideCharToMultiByte
lstrcmpW

ntdll

_vsnprintf

shlwapi

SHRegGetUSValueW
StrChrW
StrToIntW

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
calloc
free
fwrite
getenv
memcmp
memmove
realloc
strchr
strcmp
strcspn
strlen
wcschr

user32

CheckDlgButton
DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetDlgItemTextW
GetParent
GetSystemMetrics
GetWindowLongPtrW
IsDlgButtonChecked
LoadIconW
LoadImageW
LoadStringW
SendMessageW
SetDlgItemTextW
SetWindowLongPtrW
SetWindowTextW
ShowWindow

Exports

Exports

AddInternetPropertySheets
AddInternetPropertySheetsEx
CPlApplet
ClearMyTracksByProcessW
DisplayPopupWindowManagementDialog
DllInstall
GetAddSitesDisplayUrl
ImportExportPFX
LaunchAddSitesDialog
LaunchConnectionDialog
LaunchInternetControlPanel
LaunchPerSitePrivacyActionDialog
LaunchPopupWindowManagementDialog
LaunchPrivacyDialog
LaunchSecurityDialog
LaunchSecurityDialogEx
LaunchSiteCertDialog
OpenFontsDialog
OpenFontsDialogEx
OpenLanguageDialog
ResetIEtoDefaults
ShowDeleteBrowsingHistoryDialog
ShowFeedOptionsDialog
ShowLanguageDialog
SiteCert_RunFromCmdLine

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 352B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 847B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/116
Size: 4KB - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4ebf789b06d72ba09ad74b045cdb2dc

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comctl32

kernel32

ntdll

shlwapi

ucrtbase

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 448B

.rodata Size: 4KB - Virtual size: 576B

.rdata Size: 4KB - Virtual size: 3KB

/4 Size: 4KB - Virtual size: 408B

.pdata Size: 4KB - Virtual size: 1KB

.xdata Size: 4KB - Virtual size: 960B

.bss Size: - Virtual size: 352B

.edata Size: 4KB - Virtual size: 928B

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 296KB - Virtual size: 295KB

.reloc Size: 4KB - Virtual size: 56B

/14 Size: 4KB - Virtual size: 480B

/29 Size: 68KB - Virtual size: 65KB

/41 Size: 8KB - Virtual size: 7KB

/55 Size: 16KB - Virtual size: 15KB

/67 Size: 8KB - Virtual size: 6KB

/80 Size: 4KB - Virtual size: 847B

/91 Size: 44KB - Virtual size: 43KB

/102 Size: 8KB - Virtual size: 4KB

/116 Size: 4KB - Virtual size: 142B

.text
Size: 20KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 448B

.rodata
Size: 4KB - Virtual size: 576B

.rdata
Size: 4KB - Virtual size: 3KB

/4
Size: 4KB - Virtual size: 408B

.pdata
Size: 4KB - Virtual size: 1KB

.xdata
Size: 4KB - Virtual size: 960B

.bss
Size: - Virtual size: 352B

.edata
Size: 4KB - Virtual size: 928B

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 296KB - Virtual size: 295KB

.reloc
Size: 4KB - Virtual size: 56B

/14
Size: 4KB - Virtual size: 480B

/29
Size: 68KB - Virtual size: 65KB

/41
Size: 8KB - Virtual size: 7KB

/55
Size: 16KB - Virtual size: 15KB

/67
Size: 8KB - Virtual size: 6KB

/80
Size: 4KB - Virtual size: 847B

/91
Size: 44KB - Virtual size: 43KB

/102
Size: 8KB - Virtual size: 4KB

/116
Size: 4KB - Virtual size: 142B