a3db86ff8ec6a30e07ad7830d8663ef7

Sharing

Copy URL

Twitter E-mail

General

Target

a3db86ff8ec6a30e07ad7830d8663ef7
Size

1005KB
MD5

a3db86ff8ec6a30e07ad7830d8663ef7
SHA1

41b669a530f9cb2a3a140bc6037f3292ef066b9e
SHA256

c40dd0364e3b327849c68139e072db09b5f71ab38a8526865c47766a61f2364f
SHA512

53f1bee877ca947458cd547c69ee73351e25e5a9dd86a0e45a765025f59d1eb221dd5f3f24fe20bd11dc9d179f50df5c3d319c090fc2b990b8fa15f48e2e5807
SSDEEP

3072:TQuZG/ZMiE61ouqY7dtACZrzNp/c3Wh4CyPuf5Vlxl+ROXReazAOF/uIAPX2hjik:EESt3rg3s4CyPuffLvseT/uZ4ji8CA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3db86ff8ec6a30e07ad7830d8663ef7

Files

a3db86ff8ec6a30e07ad7830d8663ef7
.dll windows:4 windows x86 arch:x86

e1f1c7d8ae56931d7bcdfffa1af66e75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetDC
EnableWindow
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
IsMenu
GetMenu

kernel32

RaiseException
ResetEvent
GetFileType
HeapDestroy
GetStartupInfoA
lstrcmpA
GetProcessHeap
GetCommandLineA
FindFirstFileA
lstrcmpiA
VirtualAllocEx
GetCurrentProcess
ExitProcess
SetEvent
GetLocalTime
GetCurrentThreadId
GetLocaleInfoA
VirtualAlloc
InitializeCriticalSection
Sleep
GetCurrentThread
LoadLibraryExA
GlobalDeleteAtom
LoadResource
SetHandleCount
DeleteFileA
GetEnvironmentStrings
HeapFree
SetFilePointer
IsBadReadPtr
EnumCalendarInfoA
GetFileAttributesA
SetErrorMode
MoveFileA
ExitThread
FindResourceA
HeapAlloc
SetLastError
CreateThread
GetCommandLineW
LoadLibraryA
CompareStringA
lstrlenA
GetTempPathA
SetEndOfFile
WaitForSingleObject
GetTickCount
lstrcatA
GlobalAlloc
MulDiv
SetThreadLocale
GetDiskFreeSpaceA
GetModuleHandleA
VirtualFree
ReadFile

ole32

CoRevokeClassObject
CreateBindCtx
CreateStreamOnHGlobal
CoRegisterClassObject
ReleaseStgMedium
CreateOleAdviseHolder

comctl32

ImageList_Remove
ImageList_Draw
ImageList_Add
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Create
ImageList_GetBkColor

Exports

Exports

yTD1JsjHvLV3wZ@12
tGjiuXTvt@12
KpJXZB0ZWQEFt
uLhLu7V
_R5oWsTd@8
FnJpEjONbuc4ke
_vo0x88qlP7@24
xi7Wyd6XIV
FSwLmRapQGmsU@16
_kZSVbvQP9_@8
fgIxIURbcb@16
_V3SVl@20
NOrFbsKG3Ux
_f32_ouV
1X2fCTnytmo
_Ea5xv23
_CurrbP
_wxYJM3Jc@12
zZ49iUcKuhtZ@24
_eTviw
8npm3jwmzp
_da16albPz@12
N8f7MapE@16
_FNK15_atp@20
_5W11paepL02i
1OONwLl68@16
wegCl@12
tw8lm26M
_iMZ70OHTvxS@24
zycV69HsH@12
o7hq5dgciVM_mq@20
_NP_plFYQ
_UPRjvnYWj3RHHH
MYjjXvOQaZxa8
Xs4tj@12
_oma9c8X
_JBTKyl9ohDO@16
_cGgIbj5Ecv
qILds7XAx
ISX1Ig_yScmA5
NFdwkZEW8@24
_KydcjOMo_5
_oh6HeimlLPRJcY@12
VWnGT8l@8
_gfXO5@12
_VlcFYPH@8
1TZ4h
_lYCpOBt4@16
VcPYk5gobWeFEd
PeRxHyJcZvrx4g@20
_EKMxXyhuv9uly@8
_htab7w3
y8CQAoSExZ9L7j
_KtfnNG@12
WQXgOmZ@8
ipOnN12@4
_YHJDA0zG
_u5IPyiGRG9@16
_lQ6ccxA9V2Z@8
_N5703ONqSUjKE_@24
_SSPrg
_8LwmHT@16
5vU9zMA_qsQZn
_kyTVouaFltrZU@4
_Rp7guJ
NmonPAmYc6

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 783KB - Virtual size: 782KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iudata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1f1c7d8ae56931d7bcdfffa1af66e75

Headers

File Characteristics

Imports

user32

kernel32

ole32

comctl32

Exports

Exports

Sections

CODE Size: 25KB - Virtual size: 24KB

DATA Size: 783KB - Virtual size: 782KB

.iudata Size: 172KB - Virtual size: 171KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 5KB - Virtual size: 5KB

CODE
Size: 25KB - Virtual size: 24KB

DATA
Size: 783KB - Virtual size: 782KB

.iudata
Size: 172KB - Virtual size: 171KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 5KB - Virtual size: 5KB