c1f1da6a19d01669ab4b182c3e3abffb

Sharing

Copy URL Twitter E-mail

General

Target

c1f1da6a19d01669ab4b182c3e3abffb
Size

116KB
MD5

c1f1da6a19d01669ab4b182c3e3abffb
SHA1

452a51344f0b719df8bb1f19608b7de6dc7857fc
SHA256

16dc9db172e9a1de0583c4a54f7b6ececdb984cb24da48d6ae9c932f915a3f0d
SHA512

de2ec51d3254544f6ce1a44b1941427ed7a717aaf69fe658d98dbf09d049e9d91a54090efffc39953a27f009a61ce7014c07df90c806a475a1953d284e64866c
SSDEEP

1536:bivrTyke3WY2WsFR3kWO4wCVu/V95wt3OxHhjJ0BJS9igkF9ne:bIrTykemcs3kWKCY95wtEHNJ2JS9Mre

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1f1da6a19d01669ab4b182c3e3abffb

Files

c1f1da6a19d01669ab4b182c3e3abffb
.dll windows:5 windows x86 arch:x86

1a2ebbe3e41f50541c79839bfa0f3b25

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetWindowLongA
SetTimer
SetMenuItemInfoW
SetMenu
SetDebugErrorLevel
SendMessageW
RegisterClassA
PostQuitMessage
PostMessageA
OpenClipboard
NotifyWinEvent
MessageBoxW
MapVirtualKeyA
SetWindowLongW
CallWindowProcA
LoadIconA
LoadCursorA
LoadBitmapA
LoadAcceleratorsW
KillTimer
IsZoomed
IsWindowEnabled
IsDlgButtonChecked
InvalidateRect
InsertMenuItemA
GetWindowPlacement
GetWindowLongA
GetUserObjectInformationA
SetWindowTextW
ShowScrollBar
TileWindows
TrackPopupMenuEx
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UpdateLayeredWindow
UpdateWindow
wsprintfA
LockSetForegroundWindow
GetMenuItemInfoW
GetMenuItemCount
GetKeyState
GetGUIThreadInfo
GetDlgItem
GetClientRect
GetClassInfoW
GetClassInfoA
FlashWindowEx
FindWindowA
EndPaint
EmptyClipboard
DrawStateW
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyAcceleratorTable
DdeGetLastError
DdeConnectList
CreateWindowExA
CreateMenu
CreateAcceleratorTableA
CheckMenuRadioItem
CharUpperA
CharPrevA
CharLowerW

ole32

RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop
OleUninitialize
OleInitialize
DoDragDrop
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

msvcrt

wcsncmp
wcslen
strlen
srand
rand
memset
memmove
memcpy
memcmp
free
exit
_wcsicmp
_purecall
_onexit
_initterm
_exit
_except_handler3
_controlfp
_beginthreadex
_adjust_fdiv
__setusermatherr
__set_app_type
__p__fmode
__p__commode
__getmainargs
__dllonexit
__CxxFrameHandler
_XcptFilter
_CxxThrowException
malloc

comdlg32

PrintDlgA
GetFileTitleA

shell32

ShellExecuteA
SheChangeDirA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
SHFileOperationA
SHChangeNotify
SHBrowseForFolderA

advapi32

GetUserNameW
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
RegCloseKey

kernel32

DeleteFileA
DeleteCriticalSection
DeviceIoControl
CreateDirectoryA
CopyFileW
CompareFileTime
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindNextChangeNotification
CreateFileA
FormatMessageA
GetCurrentProcess
GetDiskFreeSpaceA
GetDriveTypeA
GetExitCodeThread
GetFileSize
GetFullPathNameA
GetLastError
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemTime
GetTempPathW
GetTickCount
GetUserDefaultLangID
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
InterlockedIncrement
LoadLibraryA
LocalFree
MultiByteToWideChar
ReadFile
RemoveDirectoryA
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetPriorityClass
UnmapViewOfFile
lstrcatA
WideCharToMultiByte
VirtualProtect
VirtualFree
VirtualAlloc
FindNextFileA

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a2ebbe3e41f50541c79839bfa0f3b25

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

msvcrt

comdlg32

shell32

advapi32

kernel32

Sections

.text Size: 26KB - Virtual size: 28KB

.rdata Size: 67KB - Virtual size: 68KB

.data Size: 18KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 26KB - Virtual size: 28KB

.rdata
Size: 67KB - Virtual size: 68KB

.data
Size: 18KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 4KB