bb196bf7ea6fb35e559249066a57e7e1

Sharing

Copy URL Twitter E-mail

General

Target

bb196bf7ea6fb35e559249066a57e7e1
Size

376KB
MD5

bb196bf7ea6fb35e559249066a57e7e1
SHA1

fa694dc642c391f8a1cd1cb4625dce295f803fcc
SHA256

bce350f4eedd7a3c177f3e42b67526d61e8e60fc148ba086220eff2c641e0f31
SHA512

89952b503414a0d7f18527f0c94ce9dabaed6db6f2f21bd04475c9a0ace0fe9072b217e215620983df2bb9e57b67ceb0ee38f4f528be23af9fc526bb12933896
SSDEEP

6144:HF1IisCX/Qdxjupm0TDL8sNGBEiInUWSE2DD8ra0qJZ:HF1IisCX4dtyTDYsNaEiInh2gYZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb196bf7ea6fb35e559249066a57e7e1

Files

bb196bf7ea6fb35e559249066a57e7e1
.dll windows:4 windows x86 arch:x86

848ee5f1b0dffa7d9afa83a86bb96690

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetModuleFileNameW
MoveFileW
CreateDirectoryW
Sleep
WaitForSingleObject
FindClose
FindFirstFileW
GetProcAddress
LoadLibraryW
GetLastError
MultiByteToWideChar
WriteFile
SetFilePointer
SystemTimeToFileTime
GetFileAttributesW
ReadFile
GetCurrentDirectoryW
LocalFileTimeToFileTime
WideCharToMultiByte
SetFileTime
SetEndOfFile
CloseHandle
lstrcpynW
GetTempPathW
GetSystemTime
RtlUnwind
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
DebugBreak
LoadLibraryA
HeapSize
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
VirtualQuery
GetTimeZoneInformation
InitializeCriticalSection
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA

user32

GetWindow
MessageBoxW
GetDesktopWindow

advapi32

RegSetValueExW
RegQueryValueExW
RegDeleteValueW

Sections

.text
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

848ee5f1b0dffa7d9afa83a86bb96690

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 324KB - Virtual size: 322KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 324KB - Virtual size: 322KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 16KB - Virtual size: 12KB