bab39c44e9ac79a35750c73f54595ae3

Sharing

Copy URL Twitter E-mail

General

Target

bab39c44e9ac79a35750c73f54595ae3
Size

54KB
MD5

bab39c44e9ac79a35750c73f54595ae3
SHA1

4824f6fe81ce00e69ae0048fa5c88089243e6078
SHA256

e353925baf68d4ae64864d3516f908c76dec58536fc2de442563cd596ef58842
SHA512

bc82280ece13f425181e2c88346c957e55de85fa28276a561c9635028cf15d20ad0fa446538b5dad90315293a9cd63f721bc163fd2ba10a662b7d8194a92739e
SSDEEP

768:GMGk+1ttanWzakpR4V2Aziclph29bp9sZvGKGVkej:GXL1t7fj48Augph29rGpGVkej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bab39c44e9ac79a35750c73f54595ae3

Files

bab39c44e9ac79a35750c73f54595ae3
.dll regsvr32 windows:4 windows x86 arch:x86

971f38bb880e3991ad9663bd5f1fc94b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\local\Winfixer2005Scanner_1.1.42\_source\_Release\FixCore.pdb

Imports

mfc71

ord265
ord1191
ord1187
ord266
ord1917
ord765
ord315
ord1037
ord1206
ord1003
ord1098
ord371
ord1120
ord1201
ord1175
ord1177
ord1209
ord1084
ord1092
ord1167
ord581
ord723
ord531
ord310
ord2322
ord432
ord762
ord1970
ord304
ord3997
ord876
ord578
ord1185
ord314
ord1049
ord3683
ord764
ord2248
ord3830
ord757
ord566
ord3333
ord4261
ord4481
ord3949
ord2644
ord3709
ord3719
ord3718
ord2533
ord2646
ord2540
ord2838
ord2714
ord4307
ord2835
ord2731
ord2537
ord5566
ord5213
ord5230
ord4568
ord3948
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord1208

msvcr71

_strcmpi
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
_onexit
__dllonexit
memset
_resetstkoflw
_except_handler3
free
_CxxThrowException
__CxxFrameHandler
realloc
atoi
malloc
__CppXcptFilter
_adjust_fdiv
_initterm

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
LocalAlloc
LocalFree
GetModuleFileNameA
lstrlenA
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
MoveFileA
lstrlenW
WideCharToMultiByte
SetFileAttributesA
DeleteFileA
FindFirstFileA
FindClose
ReadFile
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileA
SetLastError
GetFileSize
SetEndOfFile
GetLastError
WriteFile
CloseHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
MultiByteToWideChar
GetDriveTypeA

ole32

CoCreateInstance

oleaut32

SysStringLen
LoadTypeLi
LoadRegTypeLi
SysFreeString
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserFree

atl71

ord15
ord18
ord22
ord64
ord23
ord61
ord32
ord58
ord31

rpcrt4

NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
NdrOleAllocate

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

971f38bb880e3991ad9663bd5f1fc94b

Headers

File Characteristics

PDB Paths

Imports

mfc71

msvcr71

kernel32

ole32

oleaut32

atl71

rpcrt4

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 28KB

.orpc Size: 512B - Virtual size: 46B

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 29KB - Virtual size: 28KB

.orpc
Size: 512B - Virtual size: 46B

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB