b709a72b00e0df521edf7559689aab63

Sharing

Copy URL Twitter E-mail

General

Target

b709a72b00e0df521edf7559689aab63
Size

688KB
MD5

b709a72b00e0df521edf7559689aab63
SHA1

2a715ddfa8f2a079c1fd384d89ec10f1793bfe5f
SHA256

7f0f70d1a1c4e4827c7f7ae2207ab0155bf8fcf1ebd08de42b68d98144b183b8
SHA512

76aa8f750d1f6e34fa1a0e05350f396f9d350081d58cb5a12d108e39ef32950a582d03bec196bc43f4bf698f0f97b7e79644c4928d7571920b9303ef1d62d5d3
SSDEEP

12288:TvLRTxV8T+Obz3RwBSlpA9Xn1BR/y/SHMzA1Acr/t7/km32CTUHdivwHvM:Tp2bv3R8SlpAdR/yKoCTUHdivwHvM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b709a72b00e0df521edf7559689aab63

Files

b709a72b00e0df521edf7559689aab63
.dll regsvr32 windows:5 windows x86 arch:x86

0137b5a49683a9cf6111c50d05aa5c8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlUnescapeW
UrlGetPartW
UrlEscapeW
StrStrIW
PathIsDirectoryW
PathMatchSpecW
PathFileExistsW
StrCmpIW

kernel32

FindClose
CompareStringW
CompareStringA
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
CreateFileA
GetModuleHandleA
GetTimeZoneInformation
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFullPathNameW
InitializeCriticalSection
LeaveCriticalSection
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
Sleep
InterlockedExchange
ReadFile
HeapReAlloc
VirtualAlloc
WriteFile
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
GetSystemTimeAsFileTime
ExitThread
CreateThread
SetEnvironmentVariableA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy

user32

EnumChildWindows
wsprintfW
RealGetWindowClassW
GetWindowTextW
SendMessageW
SetWindowLongW
CallWindowProcW
SetWindowPos
SetWindowTextW
GetWindowLongW

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitialize

oleaut32

VarBstrCmp
VariantClear
VariantChangeType
VariantCopy
SysStringLen
SysAllocString
VariantInit
SysFreeString

ws2_32

inet_addr

rpcrt4

UuidToStringW
RpcStringFreeW

shell32

SHCreateDirectoryExW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 546KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0137b5a49683a9cf6111c50d05aa5c8e

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

ole32

oleaut32

ws2_32

rpcrt4

shell32

Exports

Exports

Sections

.text Size: 546KB - Virtual size: 545KB

.rdata Size: 75KB - Virtual size: 74KB

.data Size: 6KB - Virtual size: 21KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 58KB - Virtual size: 57KB

.text
Size: 546KB - Virtual size: 545KB

.rdata
Size: 75KB - Virtual size: 74KB

.data
Size: 6KB - Virtual size: 21KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 58KB - Virtual size: 57KB