abcbb650934a466c4686122467099eb3

Sharing

Copy URL Twitter E-mail

General

Target

abcbb650934a466c4686122467099eb3
Size

204KB
MD5

abcbb650934a466c4686122467099eb3
SHA1

dbc3e16c393ff9edd8af1d03fd3fe9ee6a6f76fc
SHA256

750660d82508499498295e0875848592441851e143ae06657fcf14b2bb26460b
SHA512

d6a92188462a3becdac0491996ceb85c2e70c0b5af58f2a28b43316f787554d8f96eb280bbdeee26f87c79b52ae8351724e5c26643248f176d7908dd0cacb05b
SSDEEP

6144:WX4F7KiKGsQzyqZWpbpGRyukGC2qqDLu:IGpy0vVCzqnu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abcbb650934a466c4686122467099eb3

Files

abcbb650934a466c4686122467099eb3
.dll windows:4 windows x86 arch:x86

bbce56e8a6e95d6efe19178ef9787e15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetNumberFormatW
GetConsoleOutputCP
FormatMessageW
WriteConsoleW
GetStdHandle
FileTimeToSystemTime
GetModuleFileNameW
GetComputerNameExW
ExitProcess
SetConsoleMode
ReadFile
ReadConsoleW
GetProcessHeap
HeapValidate
CompareStringA
GetThreadLocale
CompareStringW
GetFileType
GetConsoleMode
DisableThreadLibraryCalls
InterlockedExchange
Sleep
InterlockedCompareExchange
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
GetDateFormatW
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
SetHandleCount
GetModuleHandleA
VirtualQuery
GetVersionExA
RtlUnwind
GetTimeFormatW
GetCurrentThreadId
LocalUnlock
LocalLock
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GlobalSize
lstrcpyA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
lstrcmpA
InterlockedDecrement
InterlockedIncrement
CreateMutexW
CreateFileW
LocalAlloc
DeviceIoControl
GetSystemInfo
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
lstrlenW
RaiseException
lstrlenA
MultiByteToWideChar
CloseHandle
MapViewOfFile
UnmapViewOfFile
GetSystemDefaultLangID
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
WaitForSingleObject
ReleaseMutex
LockResource
LoadResource
FindResourceExW
LoadLibraryW
FreeLibrary
GetProcAddress
GetModuleHandleW
VirtualProtect
LCMapStringW
GetCommandLineA

user32

SetPropA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumPropsA
CreateWindowExA
PostMessageA
SetWindowLongA
SetWindowWord
RegisterDeviceNotificationW
LoadStringW
WinHelpW
DialogBoxParamW
wsprintfW
PostMessageW
FindWindowW
CheckDlgButton
MoveWindow
EndDialog
PostQuitMessage
UnregisterDeviceNotification
SetWindowTextW
GetPropA
CallWindowProcW
ValidateRect
ReleaseDC
IsWindowUnicode
SetWindowLongW
SetWindowPos
GetWindowRect
GetDlgItem
DrawFocusRect
GetSysColor
FillRect
DrawIconEx
DrawStateW
DrawFrameControl
IsWindowVisible
MonitorFromPoint
GetMonitorInfoW
DefWindowProcW
IsWindow
LoadIconW
GetDC
KillTimer
SendMessageW
RemovePropA
DefWindowProcA
UnpackDDElParam
GetWindowLongA
CharUpperW
GetDesktopWindow
SystemParametersInfoW
GetSysColorBrush
FrameRect
GetDlgCtrlID
PtInRect
DrawEdge
ClientToScreen
SetCursorPos
ReleaseCapture
SetCapture
GetParent
BeginPaint
GetCursorPos
ScreenToClient
DrawTextW
EndPaint
GetScrollInfo
SetScrollInfo
EnableScrollBar
InvalidateRect
SendMessageA
UpdateWindow
GetWindow
DestroyWindow
SetTimer
GetWindowLongW
GetClientRect
GetSystemMetrics
LoadImageW
CreateWindowExW
GetClassInfoExW
LoadCursorW
RegisterClassExW

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
RegOpenKeyA
RegQueryValueA
OpenSCManagerW
OpenServiceW
LookupAccountNameW
SetServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
QueryServiceObjectSecurity
GetSecurityDescriptorDacl
CloseServiceHandle
RegCreateKeyExW

gdi32

DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
SetBkMode
GetTextExtentPoint32W
CreateSolidBrush
GetObjectW
DeleteObject
CreateFontIndirectW
SetTextColor
SetBkColor
GetStockObject
SelectObject
GetTextMetricsW
EnumFontFamiliesExW
LineTo
MoveToEx
CreatePen
GetLayout
ExtTextOutW
GetTextExtentPointA
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
DeleteEnhMetaFile
BitBlt

ole32

CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance

rpcrt4

RpcBindingSetOption
RpcStringFreeW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoW
NdrClientCall2

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbce56e8a6e95d6efe19178ef9787e15

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 20KB - Virtual size: 61KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 20KB - Virtual size: 61KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 7KB