8000b9b2c543abf9edc8c4fb7493160b028af2546626b7f90ac0cfa5d3adae03

Sharing

Copy URL Twitter E-mail

General

Target

8000b9b2c543abf9edc8c4fb7493160b028af2546626b7f90ac0cfa5d3adae03
Size

232KB
MD5

e55e2aee500ca75dc97b7d3d454a1d6c
SHA1

97b231f9261db73e2ade4064c769f085b822a011
SHA256

8000b9b2c543abf9edc8c4fb7493160b028af2546626b7f90ac0cfa5d3adae03
SHA512

9adb9f61d57026139c7c938025487fd455d874c2956d894721d2cfc1671adb159ab332c8ad23520b32ef65957fa724208297eb103ea453fea19af6bf99a0b5de
SSDEEP

3072:G7FeuSF3eePah9leVKkXvzALPohqTXYsZJ3lrWprHC9gcYjIgbMs:G7+FTE9qLXELAh6Z18l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8000b9b2c543abf9edc8c4fb7493160b028af2546626b7f90ac0cfa5d3adae03

Files

8000b9b2c543abf9edc8c4fb7493160b028af2546626b7f90ac0cfa5d3adae03
.dll regsvr32 windows:4 windows x86 arch:x86

a34f6cc5a6c8bda115167459b8b651b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
lstrlenW
GetVersionExA
GetUserDefaultLCID
CreateMutexA
CloseHandle
ReleaseMutex
WriteFile
GetCurrentThreadId
WaitForSingleObject
MultiByteToWideChar
GetLocalTime
SetEndOfFile
CreateFileA
CopyFileA
SetFilePointer
GetFileSize
CreateDirectoryA
FlushFileBuffers
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
OpenFileMappingA
GetProcAddress
LoadLibraryA
Sleep
lstrlenA
LocalFree
RtlUnwind
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
FatalAppExitA
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapSize
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
SetStdHandle
ReadFile
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA

advapi32

RegSetValueExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

oleaut32

SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi
VariantClear
SysStringByteLen
VariantInit
CreateErrorInfo
VariantChangeType
SetErrorInfo
GetErrorInfo
SysAllocStringByteLen

atl

ord16
ord23
ord21
ord32
ord15
ord18
ord57
ord58
ord30

shlwapi

PathFileExistsA

user32

TranslateMessage
PeekMessageA
DefWindowProcA
RegisterClassA
CreateWindowExA
DestroyWindow
DispatchMessageA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a34f6cc5a6c8bda115167459b8b651b2

Headers

File Characteristics

Imports

kernel32

advapi32

oleaut32

atl

shlwapi

user32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 32KB - Virtual size: 37KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 32KB - Virtual size: 37KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 16KB - Virtual size: 12KB