b13bb70505928f7652efe277d4566156

Sharing

Copy URL Twitter E-mail

General

Target
b13bb70505928f7652efe277d4566156
Size 1.5MB
Sample240304-e7lrsshh4z
SHA256 ff5080d1129f3e4048ce22d9d0ae2eba05033a9310430962d3b985f09115a85c
MD5 b13bb70505928f7652efe277d4566156
SHA1 8245759fba2ee147b48cf5742105a98b3b3ddb23
SHA512 2eea2cee09d4284b43ebe02eabbc64522f28634d0c4e89e849d28818bc84a7df8d2cecc54386b963b92adbc7893f9f644b6d39aefbc858ede1a6f926d9980291
SSDEEP 12288:IVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:dfP7fWsK5z9A+WGAW+V5SB6Ct4bnb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b13bb70505928f7652efe277d4566156

File Explorer

b13bb70505928f7652efe277d4566156

.dll 1.5MB

b13bb70505928f7652efe277d4566156

IMPHASH 6668be91e2c948b183827f040944057f
SHA256 ff5080d1129f3e4048ce22d9d0ae2eba05033a9310430962d3b985f09115a85c
MD5 b13bb70505928f7652efe277d4566156
SHA1 8245759fba2ee147b48cf5742105a98b3b3ddb23
SHA512 2eea2cee09d4284b43ebe02eabbc64522f28634d0c4e89e849d28818bc84a7df8d2cecc54386b963b92adbc7893f9f644b6d39aefbc858ede1a6f926d9980291
SSDEEP 12288:IVI0W/TtlPLfJCm3WIYxJ9yK5IQ9PElOlidGAWilgm5Qq0nB6wtt4AenZ1:dfP7fWsK5z9A+WGAW+V5SB6Ct4bnb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

266352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

AssociateColorProfileWithDeviceA AssociateColorProfileWithDeviceW CheckBitmapBits CheckColors CloseColorProfile CloseDisplay ColorAdapterGetCurrentProfileCalibration ColorAdapterGetDisplayCurrentStateID ColorAdapterGetDisplayProfile ColorAdapterGetDisplayTargetWhitePoint ColorAdapterGetDisplayTransformData ColorAdapterGetSystemModifyWhitePointCaps ColorAdapterRegisterOEMColorService ColorAdapterUnregisterOEMColorService ColorAdapterUpdateDeviceProfile ColorAdapterUpdateDisplayGamma ColorCplGetDefaultProfileScope ColorCplGetDefaultRenderingIntentScope ColorCplGetProfileProperties ColorCplHasSystemWideAssociationListChanged ColorCplInitialize ColorCplLoadAssociationList ColorCplMergeAssociationLists ColorCplOverwritePerUserAssociationList ColorCplReleaseProfileProperties ColorCplResetSystemWideAssociationListChangedWarning ColorCplSaveAssociationList ColorCplSetUsePerUserProfiles ColorCplUninitialize ColorProfileAddDisplayAssociation ColorProfileGetDisplayDefault ColorProfileGetDisplayList ColorProfileGetDisplayUserScope ColorProfileRemoveDisplayAssociation ColorProfileSetDisplayDefaultAssociation ConvertColorNameToIndex ConvertIndexToColorName CreateColorTransformA CreateColorTransformW CreateDeviceLinkProfile CreateMultiProfileTransform CreateProfileFromLogColorSpaceA CreateProfileFromLogColorSpaceW DccwCreateDisplayProfileAssociationList DccwGetDisplayProfileAssociationList DccwGetGamutSize DccwReleaseDisplayProfileAssociationList DccwSetDisplayProfileAssociationList DeleteColorTransform DeviceRenameEvent DisassociateColorProfileFromDeviceA DisassociateColorProfileFromDeviceW DllCanUnloadNow DllGetClassObject EnumColorProfilesA EnumColorProfilesW GenerateCopyFilePaths GetCMMInfo GetColorDirectoryA GetColorDirectoryW GetColorProfileElement GetColorProfileElementTag GetColorProfileFromHandle GetColorProfileHeader GetCountColorProfileElements GetNamedProfileInfo GetPS2ColorRenderingDictionary GetPS2ColorRenderingIntent GetPS2ColorSpaceArray GetStandardColorSpaceProfileA GetStandardColorSpaceProfileW InstallColorProfileA InstallColorProfileW InternalGetAppliedGDIGammaRamp InternalGetAppliedGammaRamp InternalGetDeviceConfig InternalGetDeviceGammaCapability InternalGetPS2CSAFromLCS InternalGetPS2ColorRenderingDictionary InternalGetPS2ColorRenderingDictionary2 InternalGetPS2ColorSpaceArray InternalGetPS2ColorSpaceArray2 InternalGetPS2PreviewCRD InternalGetPS2PreviewCRD2 InternalRefreshCalibration InternalSetDeviceConfig InternalSetDeviceGDIGammaRamp InternalSetDeviceGammaRamp InternalSetDeviceTemperature InternalWcsAssociateColorProfileWithDevice InternalWcsDisassociateColorProfileWithDevice IsColorProfileTagPresent IsColorProfileValid OpenColorProfileA OpenColorProfileW OpenDisplay RegisterCMMA RegisterCMMW SelectCMM SetColorProfileElement SetColorProfileElementReference SetColorProfileElementSize SetColorProfileHeader SetStandardColorSpaceProfileA SetStandardColorSpaceProfileW SpoolerCopyFileEvent TranslateBitmapBits TranslateColors UninstallColorProfileA UninstallColorProfileW UnregisterCMMA UnregisterCMMW WcsAssociateColorProfileWithDevice WcsCheckColors WcsCreateIccProfile WcsDisassociateColorProfileFromDevice WcsEnumColorProfiles WcsEnumColorProfilesSize WcsGetCalibrationManagementState WcsGetDefaultColorProfile WcsGetDefaultColorProfileSize WcsGetDefaultRenderingIntent WcsGetUsePerUserProfiles WcsGpCanInstallOrUninstallProfiles WcsOpenColorProfileA WcsOpenColorProfileW WcsSetCalibrationManagementState WcsSetDefaultColorProfile WcsSetDefaultRenderingIntent WcsSetUsePerUserProfiles WcsTranslateColors

Name

.text

Size

260KB

Virtual Size

257KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

404KB

Virtual Size

403KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

96KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

300B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.qkm

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.cvjb

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tlmkv

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wucsxe

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fltwtj

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.sfplio

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rpg

Size

280KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bewzc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vksvaw

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wmhg

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kswemc

Size

4KB

Virtual Size

877B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kaxfk

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pjf

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.retjqj

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mizn

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrub

Size

8KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.susbqq

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jeojcw

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vwl

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mub

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xwxpmb

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.aea

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lwpch

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nzgp

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qimx

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.jbqbr

Size

4KB

Virtual Size

503B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.kxxxil

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.drpaa

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lwz

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ifrofr

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.uac

Size

4KB

Virtual Size

571B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qaprs

Size

4KB

Virtual Size

932B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.srplpy

Size

4KB

Virtual Size

318B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.ndt

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.apjih

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=483, id=204, productName=VS2012 UPD4 build 61030, version=61030,

count=354, id=261, productName=VS2015 UPD1 build 23506, version=23506,

count=443, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=483, id=223, productName=VS2013 UPD2 build 30501, version=30501,

count=80, id=225, productName=VS2013 UPD4 build 31101, version=31101,

count=256, id=224, productName=VS2013 UPD4 build 31101, version=31101,

count=161, id=260, productName=VS2017 v15.5.4 build 25834, version=25834,

count=478, id=158, productName=VS2010 build 30319, version=30319,

count=475, id=201, productName=VS2012 UPD3 build 60610, version=60610,

count=389, id=258, productName=VS2017 v15.5.4 build 25834, version=25834,

count=133, id=206, productName=VS2012 UPD2 build 60315, version=60315,

count=405, id=256, productName=VS2015 UPD1 build 23506, version=23506,

count=491, id=201, productName=VS2012 UPD4 build 61030, version=61030,

count=144, id=204, productName=VS2012 UPD2 build 60315, version=60315,

count=495, id=204, productName=VS2012 UPD2 build 60315, version=60315,

count=424, id=206, productName=VS2012 build 50727, version=50727,

count=171, id=222, productName=VS2013 UPD5 build 40629, version=40629,

count=194, id=147, productName=VS2008 build 21022, version=21022,

count=122, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

count=180, id=203, productName=VS2012 UPD1 build 51106, version=51106,

count=302, id=1, productName=Unmarked objects,

count=142, id=145, productName=VS2008 build 21022, version=21022,

count=58, id=257, productName=VS2015 [14.0] build 23026, version=23026,

b13bb70505928f7652efe277d4566156

user32

setupapi

kernel32

gdi32

crypt32

advapi32

shlwapi

generic