a1cb3489d928e0abc6ed7033939abc5f

Sharing

Copy URL Twitter E-mail

General

Target

a1cb3489d928e0abc6ed7033939abc5f
Size

60KB
MD5

a1cb3489d928e0abc6ed7033939abc5f
SHA1

6f95c92844a85d39fd3272f6d83aed55fd13829d
SHA256

b83b696db75188b03c5ca52596df3435e1ff73b025e920af53a1e04c376dc208
SHA512

be8c02c250498ad9eb0324c64f1145b86775124dd617f0b30a3da9171c374fee0ca537f283b7e4e1b534613602fb808f02a46f13551704f87af0eeb453dea32a
SSDEEP

1536:kRS0MPG9SFkmY3voLN68VuVj1VmPsU9OedoU7z7lud:TuTVoLLyeJXx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1cb3489d928e0abc6ed7033939abc5f

Files

a1cb3489d928e0abc6ed7033939abc5f
.dll windows:5 windows x86 arch:x86

c4deac3ed30970e20e312e622a4991ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

StretchBlt
GetBkColor
SetTextColor
SelectClipRgn
GetStockObject
ExtTextOutW
SelectObject
GetClipBox
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
GetTextExtentPoint32W

kernel32

WideCharToMultiByte
GetTimeZoneInformation
CreateFileA
TerminateProcess
TlsSetValue
GetDateFormatA
GetModuleHandleA
WaitForMultipleObjects
RaiseException
GetTickCount
FindFirstFileA
MapViewOfFileEx
TlsFree
VirtualQueryEx
GetCurrentDirectoryA
GetModuleHandleA
SetProcessAffinityMask
IsValidLocale
GetFileAttributesA
FindResourceA
WriteFile
FileTimeToSystemTime
SetLastError
RtlUnwind
HeapAlloc
GetCPInfo
SetConsoleCtrlHandler
CreateFileMappingW
GetCurrentThreadId
GetComputerNameW
MultiByteToWideChar
GetDriveTypeA
SizeofResource
GetModuleFileNameA
ReadFile
GetCurrentThread
VirtualQuery
LCMapStringA
CreateThread
CloseHandle
GetLocalTime
GetStringTypeA
lstrlenW
TlsAlloc
GetLastError
IsValidCodePage
ExitThread
DeleteCriticalSection
GetFullPathNameA
SetHandleCount
LocalAlloc
ReleaseMutex
InitializeCriticalSection
QueryPerformanceFrequency

shell32

SHGetDesktopFolder
SHChangeNotify

comctl32

ImageList_GetDragImage
PropertySheetA
ImageList_DragShowNolock
ImageList_DragMove
CreatePropertySheetPageA
ImageList_DragEnter

kbdbdsvc

_Sinh
_Dnorm
_Getcvt
_LCosh
_Stod
_FDnorm
_LXbig
_FDtest
_FSinh
_LNan
_FNan
_FExp
_LSinh
_LExp
_FDenorm
_Rteps
_FInf
_FXbig
_FEps
_Getcoll
_Snan
_LDtest
_Tolower
_FSnan
_FDscale
_Dtest

user32

SetWindowPos
SetWindowsHookExA
CreateWindowExA
SetCaretPos
GetKeyboardState
SystemParametersInfoA
IsWindowEnabled
UnhookWindowsHookEx
SetForegroundWindow
GetWindowPlacement
CharToOemBuffA
LoadCursorA
IsIconic
GetKeyboardLayout
GetMenuItemInfoA
GetCursorPos
DrawFocusRect
InvalidateRect
GetForegroundWindow
LockWindowUpdate
GetClientRect
EndPaint
GetKeyState
AppendMenuA
GetSystemMenu
EnableWindow
BeginPaint
ClientToScreen
VkKeyScanA
PostMessageA
OffsetRect
IsWindow
GetDC
RegisterClipboardFormatA
ScreenToClient
SetWindowTextA
SetWindowLongA

ole32

RevokeDragDrop
OleUninitialize

Exports

Exports

GetPermLayers
CreateProcessNotify
GetDisplayName
DllClientCleanup
BuildLDAPPathFromADsPath
csrseset
FindSearchTableIndex
ConvertU2TrusteeToSid
DllClientStartup
BerBvFree
ConvertSidToU2Trustee
FreeADsStr
ConvertSidToString
ChangeSeparator
Component
AllocADsMem
SdbCloseApphelpInformation
AdsTypeToLdapTypeCopyTime
FreeObjectInfo
BuildADsParentPathFromObjectInfo
FindEntryInSearchTable
GetLDAPTypeName
ApphelpUpdateCacheEntry
GetDomainDNSNameForDomain
GetDefaultServer
AllocADsStr
BuildADsPathFromLDAPPath
AdsTypeToLdapTypeCopyGeneralizedTime
FreeADsMem
BuildADsParentPath

Sections

.text
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c4deac3ed30970e20e312e622a4991ff

Headers

File Characteristics

Imports

gdi32

kernel32

shell32

comctl32

kbdbdsvc

user32

ole32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 56KB

.rdata Size: 5KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 56KB

.rdata
Size: 5KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB