c0fd22ea3105d48326468b31d3a314ad

General

Target

c0fd22ea3105d48326468b31d3a314ad
Size

41KB
MD5

c0fd22ea3105d48326468b31d3a314ad
SHA1

f2a13117454a3b79473c2ff834c222372a936f8c
SHA256

44f8dbabb74dd5ddacbf69e4cdf6a5906f887b49d031732690da30ec6d59f71b
SHA512

a03b3849de793adb85814e2acfee419c166885f9ee5f1f1cd23e348df1b261a8381ac650fa2cf78d68781a4bd53ddd00000aea8de5456e131e89a5836d476457
SSDEEP

768:TIcojxsfKDYSZMsVmTjq7HIcojxsfKDY:pZfunMtTOxZfu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0fd22ea3105d48326468b31d3a314ad

Files

c0fd22ea3105d48326468b31d3a314ad
.dll regsvr32 windows:4 windows x86 arch:x86

95b0615e7d6a462afcd1c64f8ed4551a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imagehlp

ImageDirectoryEntryToData

kernel32

GetModuleFileNameA
MapViewOfFile
OpenFileMappingA
lstrcmpA
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
HeapCreate
GetVersion
CreateFileMappingA
InitializeCriticalSection
DeleteCriticalSection
Sleep
InterlockedIncrement
GetProcAddress
GetCurrentProcessId
lstrlenW
UnmapViewOfFile
ReadFile
WriteFile
OpenFile
GetSystemDirectoryA
GlobalUnlock
GlobalLock
DebugBreak
HeapFree
lstrcpyA
lstrlenA
GetModuleHandleA
lstrcmpiA
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
CreateToolhelp32Snapshot
Module32First
Module32Next
CloseHandle
EnterCriticalSection
InterlockedDecrement
LeaveCriticalSection
GetFileSize
RtlUnwind

user32

FindWindowA
SetWindowsHookExA

advapi32

RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCloseKey

shell32

DragQueryFileA
ShellExecuteA

ole32

ReleaseStgMedium

oleaut32

LoadRegTypeLi
SysFreeString
SysStringLen

atl

ord23
ord16
ord15
ord18
ord57
ord32
ord58
ord30
ord21

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Hp8x6

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95b0615e7d6a462afcd1c64f8ed4551a

Headers

File Characteristics

Imports

imagehlp

kernel32

user32

advapi32

shell32

ole32

oleaut32

atl

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 854B

.text
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 854B