b861cef225ed596a673ffcde0c7a4332

Sharing

Copy URL Twitter E-mail

General

Target

b861cef225ed596a673ffcde0c7a4332
Size

772KB
MD5

b861cef225ed596a673ffcde0c7a4332
SHA1

8a1bdc6089dffc386df634d2fc5df874c6f1c046
SHA256

dcd1823ed9cd001e3cf8370dc41e25d821381480811358d25feea253a2795803
SHA512

79d900e37ea3026d0290d552aec7f87f6e4df64be75102bdd95f9fb297edbfd12c6f1e211127a915d9cc3a3194d59f7983262a474cf0870d98b1518c43979921
SSDEEP

24576:jpSPX3WsMK3AIQyeV6Mc2JW4qJDQAL6SG6OSUV:lSPWsZeG4qJDQ3SdOn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b861cef225ed596a673ffcde0c7a4332

Files

b861cef225ed596a673ffcde0c7a4332
.dll windows:4 windows x86 arch:x86

c50b49b73d5c424c03f9ba10be8d06a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??3@YAXPAX@Z
fopen
fseek
fwrite
fclose
sprintf
atof
atoi
??2@YAPAXI@Z
strncpy
_purecall
time
rand
srand
fprintf
div
_getcwd
_chdir
_adjust_fdiv
??1type_info@@UAE@XZ
__dllonexit
_initterm
_onexit
??1exception@@UAE@XZ
strftime
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??0exception@@QAE@XZ
_assert
clock
fflush
ceil
floor
calloc
_CIpow
tolower
_vsnprintf
_ismbcspace
realloc
strstr
_mbctype
strrchr
getenv
strtod
sscanf
strncmp
isdigit
strtol
_snprintf
_stricmp
_except_handler3
_ftol
ispunct
fputs
strtok
isspace
_strdup
__CxxFrameHandler
strchr
atol
fread
memmove
ftell
free
_splitpath
malloc
_beginthreadex
localtime
asctime
_mkdir
_chmod
_rmdir
_unlink
rename
printf
_ultoa
_ftime
_putenv
_strcmpi
_strnicmp
_stat
_itoa
_errno

ole32

CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc

user32

GetSystemMetrics
wsprintfA
GetSysColor
LoadBitmapA
CharNextA
CharPrevA
CharLowerA
CharUpperA
DefWindowProcA
RegisterClassA
CreateWindowExA
PeekMessageA
GetMessageA
TranslateMessage
PostQuitMessage
GetClassInfoExA
RegisterClassExA
RegisterWindowMessageA
MsgWaitForMultipleObjects
UnregisterClassA
SetWindowLongA
CallWindowProcA
DispatchMessageA
IsWindow
PostMessageA
SendMessageA
DestroyWindow
PostThreadMessageA

advapi32

RegEnumValueA
RegEnumKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

lstrlenW
HeapFree
GetProcessHeap
GetSystemInfo
GetVersion
GetDiskFreeSpaceA
GetModuleFileNameA
GetLocalTime
WaitForMultipleObjects
GetFileSize
OutputDebugStringA
CreateFileA
RemoveDirectoryA
GetFileAttributesA
SetFileAttributesA
SetLastError
ReleaseMutex
CreateDirectoryA
Sleep
LeaveCriticalSection
CreateMutexA
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetPrivateProfileStringA
GetLogicalDriveStringsA
ResetEvent
GetDriveTypeA
GetVolumeInformationA
GetLogicalDrives
MultiByteToWideChar
FindFirstFileA
lstrlenA
FindNextFileA
GlobalAlloc
FindClose
GlobalFree
GlobalMemoryStatus
GetCurrentDirectoryA
lstrcmpiA
GetNumberFormatA
GetVersionExA
VirtualUnlock
VirtualLock
MulDiv
GetEnvironmentVariableA
SetEnvironmentVariableA
GetProcAddress
GetLastError
FreeLibrary
LoadLibraryA
GetTempPathA
lstrcpyA
SetEvent
TerminateThread
CreateEventA
GetCurrentThreadId
CloseHandle
DeleteFileA
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
GetTickCount
GetWindowsDirectoryA
SetErrorMode
GetCurrentProcessId
FreeEnvironmentStringsA
InterlockedExchange
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
DeviceIoControl
GetModuleHandleW
InterlockedCompareExchange
HeapSize
HeapAlloc
GetSystemTimeAsFileTime
GetModuleHandleA
QueryPerformanceCounter
GetSystemDirectoryA

Exports

Exports

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
CanUnload2
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 556KB - Virtual size: 552KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c50b49b73d5c424c03f9ba10be8d06a2

Headers

File Characteristics

Imports

pncrt

ole32

user32

advapi32

version

kernel32

Exports

Exports

Sections

.text Size: 556KB - Virtual size: 552KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 68KB - Virtual size: 74KB

.sxdata Size: 4KB - Virtual size: 8B

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 48KB - Virtual size: 45KB

.text
Size: 556KB - Virtual size: 552KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 68KB - Virtual size: 74KB

.sxdata
Size: 4KB - Virtual size: 8B

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 48KB - Virtual size: 45KB