2f65aaa1cd38a4f10ab6bb47f25c8e622cd5e2c2f688e1c56425b999dcbbf9b7

Sharing

Copy URL

Twitter E-mail

General

Target

2f65aaa1cd38a4f10ab6bb47f25c8e622cd5e2c2f688e1c56425b999dcbbf9b7
Size

807KB
MD5

1ccf3a827f442a334ae169ab192b35aa
SHA1

a8c82063cb9ce425f089f7dc3bd57dd7b8de104a
SHA256

2f65aaa1cd38a4f10ab6bb47f25c8e622cd5e2c2f688e1c56425b999dcbbf9b7
SHA512

49dae9d048fa785ee9b7a9e72ac3e4f329416224b7770889d22d165450cd26ac1b3c4723c33ef56950f735583dcfb1bcd54cf6c2d11031bfd39f4ad5fce166d9
SSDEEP

12288:e0cIaDb/1wUCBVpjl18kVtLga3xjZHySM+tbpZx9PIQOlp2m:ewwZBSG+3/HySVbJ9LOIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2f65aaa1cd38a4f10ab6bb47f25c8e622cd5e2c2f688e1c56425b999dcbbf9b7

Files

2f65aaa1cd38a4f10ab6bb47f25c8e622cd5e2c2f688e1c56425b999dcbbf9b7
.dll regsvr32 windows:5 windows x86 arch:x86

cf621fdc818390e1d9f2acf7b5277b8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dbghelp

SymCleanup
SymGetOptions
SymUnloadModule64
SymGetLineFromAddr64
SymGetSymFromAddr64
SymLoadModuleExW
SymSetOptions
SymInitialize
SymGetModuleInfo64

imagehlp

UnMapAndLoad
MapAndLoad

kernel32

FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetShortPathNameW
CreateFileW
LocalFileTimeToFileTime
SetFileAttributesW
GetFileSizeEx
SetErrorMode
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
RtlUnwind
RaiseException
HeapReAlloc
Sleep
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FatalAppExitA
VirtualFree
SetFilePointer
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
DeleteFileW
MoveFileW
GetCurrentDirectoryW
GlobalFlags
SystemTimeToFileTime
GetThreadLocale
GetAtomNameW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalGetAtomNameW
lstrlenA
lstrcmpA
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
InterlockedDecrement
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetModuleHandleA
GetCurrentProcessId
GetModuleFileNameW
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
MulDiv
ExitProcess
GetProcAddress
LoadLibraryW
GetLastError
SetLastError
GetModuleHandleW
LocalFree
FormatMessageW
GetEnvironmentVariableW
GetWindowsDirectoryW
GetSystemDirectoryW
SearchPathW
MultiByteToWideChar
FreeLibrary
IsBadReadPtr
LoadLibraryExW
LockResource
SizeofResource
WideCharToMultiByte
FindResourceW
LoadResource
VirtualAlloc

user32

GetMenuBarInfo
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetKeyNameTextW
MapVirtualKeyW
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageW
ShowOwnedPopups
IsRectEmpty
SetWindowRgn
SetTimer
KillTimer
IsZoomed
WindowFromPoint
GetSysColorBrush
GetMenuItemInfoW
GetDialogBaseUnits
UnregisterClassW
DeleteMenu
GetSystemMenu
SetParent
UnionRect
DestroyIcon
CharUpperW
GetDCEx
LockWindowUpdate
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
InflateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
ScrollWindowEx
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
LoadAcceleratorsW
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
LoadMenuW
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
SetCursor
LoadCursorW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
GetCursorPos
DestroyCursor
SetCursorPos
ReleaseCapture
SetCapture
RedrawWindow
TranslateAcceleratorW
TranslateMDISysAccel
GetForegroundWindow
BringWindowToTop
CopyIcon
InvalidateRect
SystemParametersInfoW
ShowWindow
MessageBeep
EndDeferWindowPos
DeferWindowPos
MapWindowPoints
BeginDeferWindowPos
IsWindow
UpdateWindow
LoadBitmapW
GetWindowRect
GetParent
SetLastErrorEx
FillRect
SetRect
DrawIcon
LoadIconW
GetClientRect
GetSystemMetrics
SendMessageW
EnableWindow
PostMessageW

gdi32

TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
GetWindowExtEx
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
SelectPalette
RectVisible
GetObjectType
StartDocW
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
GetTextMetricsW
GetTextExtentPoint32W
GetCharWidthW
CreateFontW
StretchDIBits
GetBkColor
PlayMetaFileRecord
PtVisible
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
GetPixel
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
CreateFontIndirectW
GetObjectW
Rectangle
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
EnumMetaFile
GetStockObject
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
BitBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueW
RegCloseKey
RegCreateKeyW

shell32

DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
ShellExecuteW

shlwapi

PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

ole32

WriteFmtUserTypeStg
ReadClassStg
CoTaskMemFree
WriteClassStg
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
OleRegGetUserType
ReadFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
OleDuplicateData
CoUninitialize
CoCreateInstance
CoInitializeEx
CoDisconnectObject
StringFromGUID2
CLSIDFromString
SetConvertStg

oleaut32

SysStringByteLen
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate

Exports

Exports

DllRegisterServer

Sections

.text
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf621fdc818390e1d9f2acf7b5277b8f

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

imagehlp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 477KB - Virtual size: 477KB

.rdata Size: 117KB - Virtual size: 116KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 162KB - Virtual size: 161KB

.reloc Size: 38KB - Virtual size: 37KB

.text
Size: 477KB - Virtual size: 477KB

.rdata
Size: 117KB - Virtual size: 116KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 162KB - Virtual size: 161KB

.reloc
Size: 38KB - Virtual size: 37KB