a9cf4d2ce68be78134cbfcd584cb107c

Sharing

Copy URL Twitter E-mail

General

Target

a9cf4d2ce68be78134cbfcd584cb107c
Size

59KB
MD5

a9cf4d2ce68be78134cbfcd584cb107c
SHA1

2285c97a5f7f52798b4ec5b5d9147739f2c0665d
SHA256

3891b70f8f351af26fa64ba62b9a6778a6a2c43b5b6fa142a32b484e342b24e0
SHA512

172d55e99b114e140655fe4e62323eba4e907e51ef6dde902fc0d4f70a965aea7c81a374ad7a351f8387ef3f750571d738f2abd87237d8078af77e4e9c60959d
SSDEEP

1536:pHDsd5FtY/sf5ntT6GdLz/TLc2N8IKlNBE:pHgdTmsf5tTXdLz/vvNhKlNB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9cf4d2ce68be78134cbfcd584cb107c

Files

a9cf4d2ce68be78134cbfcd584cb107c
.dll windows:5 windows x86 arch:x86

86c0094b190f4cea4e3374923d8be32f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_DragMove
ImageList_SetIconSize
ImageList_DragEnter

wininet

InternetGetLastResponseInfoA
InternetCloseHandle

user32

CharLowerBuffW
SetWindowPos
RegisterClipboardFormatA
SetParent
GetMessageA
GetClassNameA
DrawCaption
GetWindowTextA
DestroyCursor
SendMessageA
GetCursorPos
WindowFromPoint
CloseClipboard
ToAscii
FillRect
GetTopWindow
GetDC
CreateCaret
DispatchMessageW
GetClientRect
ShowOwnedPopups
DestroyCaret
EnableMenuItem
SetMenu
ClientToScreen
CreateWindowExA
MessageBoxA
GetParent
AdjustWindowRectEx
GetSysColorBrush
GetDCEx
InsertMenuItemA
PostThreadMessageA
SetForegroundWindow
RedrawWindow
IsIconic
IsCharAlphaNumericA
GetMenuStringW
CharUpperA
ScrollWindow
IsZoomed
DefWindowProcW
CharToOemA
OffsetRect

gdi32

GetClipRgn
EndPage
LineTo
GetEnhMetaFileHeader
DeleteDC
SaveDC
SetBrushOrgEx
GetWinMetaFileBits
RealizePalette
Pie
GetNearestPaletteIndex
CreatePatternBrush
SetStretchBltMode
ExtTextOutA
StretchBlt
FillRgn
MoveToEx
CombineRgn
GetEnhMetaFileDescriptionA
SetPixelV

kernel32

HeapAlloc
lstrlenW
GetCommandLineA
GetComputerNameA
CreateFileMappingA
UnhandledExceptionFilter
LoadLibraryA
CloseHandle
GetTempPathA
VirtualQuery
InterlockedDecrement
MapViewOfFile
OpenFileMappingA
SetEndOfFile
InterlockedExchange
Sleep
TerminateThread
GetComputerNameA
CreateFileMappingA
GetFileSize
ReadFile
MultiByteToWideChar
ExitProcess
SetThreadAffinityMask
CreateProcessA
IsValidLocale
GetStartupInfoA
WaitForMultipleObjects
RtlUnwind
TerminateProcess
CreateFileA
IsValidCodePage
FindClose
SizeofResource
UnmapViewOfFile
GetModuleHandleA
SuspendThread
GetCurrentProcess
FormatMessageA
lstrcpyA

btosinfo

_Toupper
_Inf
_Getcvt
_Dnorm

version

GetFileVersionInfoA

advapi32

RegDeleteKeyA
RegQueryValueExA
InitializeSecurityDescriptor
GetUserNameA

imm32

ImmGetContext
ImmSetCompositionWindow

ole32

CreateStreamOnHGlobal
IsAccelerator
OleSetClipboard
StringFromGUID2
RegisterDragDrop
ReleaseStgMedium

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringByteLen
SafeArrayPutElement

shell32

DragQueryPoint
SHGetSpecialFolderPathA
DragAcceptFiles

winmm

timeBeginPeriod

comdlg32

ChooseFontA
FindTextA

Exports

Exports

FindEntryInSearchTable
FindSearchTableIndex
AdsTypeToLdapTypeCopyGeneralizedTime
AllocADsStr
CreateProcessNotify
GetDomainDNSNameForDomain
GetDisplayName
chkdxext
GetLDAPTypeName
ConvertSidToString
FreeADsStr
SdbCloseApphelpInformation
BuildADsParentPath
AllocADsMem
BuildADsPathFromParent
ConvertSidToU2Trustee
BuildADsPathFromLDAPPath
GetDefaultServer
ApphelpUpdateCacheEntry
BerBvFree
AdsTypeToLdapTypeCopyTime
FreeADsMem
BuildLDAPPathFromADsPath
ConvertU2TrusteeToSid
Component
ChangeSeparator
BuildADsParentPathFromObjectInfo

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86c0094b190f4cea4e3374923d8be32f

Headers

File Characteristics

Imports

comctl32

wininet

user32

gdi32

kernel32

btosinfo

version

advapi32

imm32

ole32

oleaut32

shell32

winmm

comdlg32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 5KB - Virtual size: 8KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 5KB - Virtual size: 8KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB