ab583cfde5bdb9ae411ed6d336e8f525

Sharing

Copy URL

Twitter E-mail

General

Target

ab583cfde5bdb9ae411ed6d336e8f525
Size

35KB
MD5

ab583cfde5bdb9ae411ed6d336e8f525
SHA1

007e77d8c78b2bb8f129cd617cf80d69137808b8
SHA256

c4e327091bd957e5c53ca73d13fe553b6c5bfb4a03f0e147954fc20497be94de
SHA512

16ac945271479030e6a1ffe861d0583905d7287f111a773678da7f691f74305f60cf1023d7520431cf810d5fc1019ab7b19385cc06c8665190df3e612ed59787
SSDEEP

768:/lQ8wbX7WLWfmqNLsku7IfrjzdRRS8azkfy/owttpItZYCO:FaCWfmq1CsfTaJsZYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab583cfde5bdb9ae411ed6d336e8f525

Files

ab583cfde5bdb9ae411ed6d336e8f525
.dll windows:1 windows x86 arch:x86

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

BackupRead
DefineDosDeviceW
EnumCalendarInfoW
ExitProcess
FindClose
GetCommMask
GetCommState
GetCompressedFileSizeA
GetConsoleAliasExesA
GetConsoleAliasesA
GetConsoleAliasesW
GetDefaultCommConfigA
GetFileSize
GetFileType
GetNumberFormatW
GetNumberOfConsoleMouseButtons
GetStringTypeExA
GetStringTypeExW
GlobalUnfix
Heap32First
InterlockedExchangeAdd
OpenMutexA
PeekNamedPipe
SetConsoleCP
SetCurrentDirectoryW
SetFileApisToANSI
SetNamedPipeHandleState
SetThreadAffinityMask
ShowConsoleCursor
Sleep
TlsAlloc
TransmitCommChar
VirtualProtect
WriteConsoleW
WriteFileEx
_lclose
_lopen
lstrcmpA
lstrcmpiA

user32

AttachThreadInput
BlockInput
CheckMenuItem
CloseDesktop
CreateCaret
CreateDialogParamW
DdeDisconnect
DdeUninitialize
DispatchMessageW
EndDeferWindowPos
EnumDesktopsA
EnumWindows
GetClassInfoExW
GetClassWord
GetDlgItem
GetMenuState
GetParent
GetPropA
GetTitleBarInfo
GetUserObjectInformationA
LoadAcceleratorsW
LoadCursorFromFileW
OffsetRect
PeekMessageW
PtInRect
RegisterWindowMessageA
SetFocus
SetMenuItemInfoW
SetUserObjectInformationW
ValidateRect
WindowFromPoint

gdi32

CreateFontW
DeleteEnhMetaFile
EnumFontFamiliesA
GdiComment
GetCharWidthFloatW
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetCurrentPositionEx
GetDCOrgEx
GetDeviceGammaRamp
GetLogColorSpaceW
GetPath
GetPixel
GetPixelFormat
GetTextFaceA
GetTextFaceW
PolyBezierTo
SelectObject
SetTextJustification

comdlg32

ChooseFontW

comctl32

ImageList_DragLeave

shell32

SHBrowseForFolderA
SHFileOperationW

advapi32

AccessCheck
AddAce
BuildSecurityDescriptorW
BuildTrusteeWithNameA
CryptGenKey
ElfNumberOfRecords
ElfOldestRecord
ElfReportEventW
EncryptFileW
GetCurrentHwProfileA
GetExplicitEntriesFromAclW
GetLengthSid
GetSecurityInfoExW
GetServiceKeyNameW
LsaQueryInfoTrustedDomain
RegCreateKeyW
RegLoadKeyA
RegQueryMultipleValuesW
SetServiceStatus

msvcrt

_callnewh
_chdrive
_execvp
_heapused
_outpd
_spawnvp
_strncoll
_unlock
_wenviron
_wexecle
_wexecv
_wexecvp
fopen
iswalnum
iswctype
perror
realloc
rename
strncpy
tan
towupper
ungetwc

Exports

Exports

AuIGxlp
AyBxcgPhGgCUOEd
Erhnwb
LwesimJvqycI
PuyHbAuCEQGfaai
QihpwwaANLeUjwwzg
QkjOfliofg
SnhicxHNzXm
TVfEpLeBwutDxlf
TopTOXNoehdsfhk
UjFrftmwu

Sections

.text
Size: 7KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a520c1a13b86b9e370da86317ca5e4b7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

shell32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 83KB

.data Size: 23KB - Virtual size: 31KB

.xdata Size: 512B - Virtual size: 309B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 83KB

.data
Size: 23KB - Virtual size: 31KB

.xdata
Size: 512B - Virtual size: 309B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 1KB - Virtual size: 1KB