c1daf4730241cde8c663a30d2b3f3c55

Sharing

Copy URL Twitter E-mail

General

Target

c1daf4730241cde8c663a30d2b3f3c55
Size

96KB
MD5

c1daf4730241cde8c663a30d2b3f3c55
SHA1

61090a86a9341e52fed9f4c91fd5b074d030e1b6
SHA256

6c357366684fb1128fa59f205886e2787555726c7e6c16b4d4510fc34abcf341
SHA512

a64896588c3b7201cfb260c33e4f0c341272bf81f3e813b2f1a2a030ba79c0fdc135e410b451825b3ba22dd07f95ddfa34f6b57d1aca01e6ebc808d809a4bd9e
SSDEEP

1536:89A4xCwmQpQxE+TU2nV1r9LLIrbUYO72muT50yoNU9MdGBcvgnPVsD7x/X:89A4xp61UAtLIrbUF2muT5f92GBcviP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1daf4730241cde8c663a30d2b3f3c55

Files

c1daf4730241cde8c663a30d2b3f3c55
.dll windows:4 windows x86 arch:x86

4763b7da0223785ae3386723c34e6761

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTime
VirtualAlloc
GetProcessHeap
GetStartupInfoA
EnumSystemLocalesA
CreateFileA
SetCurrentDirectoryA
GetHandleInformation
CreateEventW
lstrcmpW
ReadFile
IsValidLocale
SizeofResource
GetLocalTime
ResetEvent
CopyFileA
FormatMessageA
LeaveCriticalSection
lstrcpynA
ExpandEnvironmentStringsA
GetFileType
GetModuleHandleA
LoadLibraryExW
FreeLibrary
GetLocaleInfoW
SearchPathW
FileTimeToLocalFileTime
GetProcAddress
CompareStringW
GlobalLock
HeapDestroy
LoadLibraryA
CreateDirectoryA
GetCurrentThreadId
GetConsoleMode
GetVersion
GetStringTypeA
RaiseException
lstrcatA
Sleep
DeleteCriticalSection
GetThreadTimes
GetVersionExW
VirtualQuery
UnmapViewOfFile
CreateFileW
GetVersionExA
ExitProcess
InitializeCriticalSection
InterlockedCompareExchange
GetCPInfo
WaitForSingleObject
GetLocaleInfoA
CreateMutexW
CreateFileMappingA
VirtualFree
GetLastError
GetStartupInfoW

gdi32

GetPixel
GetTextMetricsW
CreateBitmap
SetStretchBltMode
LineTo
TranslateCharsetInfo
GetTextExtentPointA
SelectObject
CreateDCA
GetSystemPaletteEntries
CombineRgn
GetMapMode
SelectClipRgn
GetDeviceCaps
GetTextExtentPoint32A
CreateMetaFileA
SaveDC
MoveToEx
GetWindowExtEx
CreateCompatibleBitmap
GetViewportExtEx
DeleteDC
Ellipse
CreatePen
CreateDCW
CreatePalette
LPtoDP
SetViewportOrgEx
CreateFontA
SetBkMode
SetWindowOrgEx
CreateHalftonePalette
CloseMetaFile
DPtoLP
OffsetViewportOrgEx
DeleteObject
CreateMetaFileW
CreatePatternBrush
TextOutA
Polyline
ExtTextOutA
GetNearestColor
GetObjectW
SetBkColor
GetTextExtentPointW
GetStockObject
PatBlt
ExcludeClipRect
SetROP2
CreateCompatibleDC
CreateRectRgnIndirect
GetPaletteEntries
SetTextAlign
CreateRectRgn
RealizePalette
GetTextMetricsA
GetTextColor
GetClipBox
CreateDIBitmap
SetTextColor
TextOutW
IntersectClipRect
GetClipRgn
StretchBlt
GetTextAlign
GetBkMode
CreateDIBSection
GetTextExtentPoint32W
SetViewportExtEx
SetWindowExtEx
SelectPalette
GetObjectType
GetDIBits

shell32

SHAppBarMessage
SHGetDesktopFolder
SHGetMalloc
SHLoadInProc
SHAddToRecentDocs
SHFileOperationA
DragQueryFileA
SHGetPathFromIDListA
SHGetFileInfoA
SHGetInstanceExplorer
SHFreeNameMappings
DragQueryPoint

winspool.drv

AddFormA
OpenPrinterA
EnumPrinterDataA
ConfigurePortA
EnumMonitorsA
DeleteMonitorA
DeviceCapabilitiesA
SetPortA
EnumPrinterDriversA
EnumPrintProcessorsA
EnumPrintProcessorDatatypesA
FindNextPrinterChangeNotification
DeletePrinter
DeletePortA
ResetPrinterA
WritePrinter
SetFormA
GetPrinterDriverDirectoryA
EnumPrinterKeyA
DeletePrinterKeyA
EnumPrinterDataExA
DeletePrinterDataA
ConnectToPrinterDlg
SetPrinterDataA
AddPrinterA
DeletePrintProcessorA
GetPrinterA
SetPrinterDataExA
SetJobA
ScheduleJob
EnumFormsA
AddPrinterDriverExA
EndDocPrinter
FindFirstPrinterChangeNotification
AbortPrinter
GetPrinterDataExA
DeletePrinterDataExA
GetPrintProcessorDirectoryA
AddJobA
FreePrinterNotifyInfo
EnumJobsA
StartDocPrinterA
SetPrinterA

msvcrt

_unlink
printf
fread
fwrite
memset
ftell
fopen
sprintf
fclose
free
_initterm
malloc
_adjust_fdiv
_onexit
__dllonexit
fseek

Exports

Exports

pmmtobpu

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4763b7da0223785ae3386723c34e6761

Headers

File Characteristics

Imports

kernel32

gdi32

shell32

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 52KB - Virtual size: 50KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 52KB - Virtual size: 50KB

.reloc
Size: 4KB - Virtual size: 3KB