c40f625a98754fcd2666d14da3a99d92

Sharing

Copy URL Twitter E-mail

General

Target

c40f625a98754fcd2666d14da3a99d92
Size

291KB
MD5

c40f625a98754fcd2666d14da3a99d92
SHA1

f74b33910a7d7d9b2cd67b401f93aea550df44e4
SHA256

c18ecf0e763cc6db3801f7408a85ddfc7c2a2fdfa2902cd262355bb2f3b94307
SHA512

8ee1bfb7c6cebf22fcb83741b46ac45f24dbf404f7af743280c0adb588b1b66b097e0975970dc9274adceb01cc5ba19a5d1abc906bf1a865da215c3d554e34c9
SSDEEP

6144:GA1wTB+aXRAiNsZDXdBqEc4gga0NeYhNuOncD6v5xIQrS31:ql+aBANZDXdBm4VakuOcD6hxIR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c40f625a98754fcd2666d14da3a99d92

Files

c40f625a98754fcd2666d14da3a99d92
.dll windows:4 windows x86 arch:x86

2b1b6a6c6abe13797b66007cb4f5d8e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
LoadLibraryA
GetCommandLineA
GetModuleHandleA
lstrlenW
ExitThread
GetProcAddress
lstrlenA
IsBadReadPtr
ExitProcess
GetVersionExA
VirtualAlloc
GlobalAlloc

gdi32

GetPaletteEntries
GetObjectA
CreateBitmap
GetBitmapBits
GetCurrentPositionEx
GetPixel
GetDIBits
SelectObject
GetDCOrgEx

comctl32

ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_Remove

user32

GetWindowLongA
RegisterWindowMessageA
MessageBoxA
GetDlgItem
GetMenu
MsgWaitForMultipleObjects
SetWindowsHookExA
EnableWindow
GetLastActivePopup
IsChild
RedrawWindow
DispatchMessageA
EmptyClipboard
CallWindowProcA
GetCapture
IsZoomed
CharNextA
IsDialogMessageW
RegisterClipboardFormatA
IsDialogMessageA
ShowScrollBar
DrawIcon
GetDesktopWindow
DrawIconEx
GetForegroundWindow
OemToCharA
ShowOwnedPopups
DefFrameProcA
InvalidateRect
ClientToScreen
GetCursorPos
GetSysColor
GetSysColorBrush
GetDC
GetTopWindow
SetRect
PeekMessageW
BeginPaint
CloseClipboard
GetSystemMetrics
CreateWindowExA
GetMenuState
GetMenuItemInfoA
ReleaseDC
SetWindowLongA
RemoveMenu
IsWindowEnabled
GetWindowDC
GetWindowThreadProcessId
GetKeyboardState
SetMenu
GetWindowPlacement
ShowWindow
EnableMenuItem
CharLowerBuffA
GetMenuStringA
SetParent
DefWindowProcA
IsWindowUnicode
InsertMenuItemA
RemovePropA
GetCursor
CheckMenuItem
OpenClipboard
WaitMessage
SetClipboardData
CharUpperBuffA
DrawAnimatedRects
GetKeyState
GetScrollPos
GetKeyNameTextA
GetClassInfoA

version

GetFileVersionInfoA
VerQueryValueA

Sections

CODE
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 1KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b1b6a6c6abe13797b66007cb4f5d8e3

Headers

File Characteristics

Imports

kernel32

gdi32

comctl32

user32

version

Sections

CODE Size: 99KB - Virtual size: 98KB

DATA Size: 179KB - Virtual size: 179KB

.rsrc5 Size: 1024B - Virtual size: 686B

.rsrc9 Size: 1KB - Virtual size: 101KB

.rsrc0 Size: 2KB - Virtual size: 1KB

.rsrc4 Size: 3KB - Virtual size: 2KB

.rsrc1 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 988B

.reloc Size: 1024B - Virtual size: 592B

CODE
Size: 99KB - Virtual size: 98KB

DATA
Size: 179KB - Virtual size: 179KB

.rsrc5
Size: 1024B - Virtual size: 686B

.rsrc9
Size: 1KB - Virtual size: 101KB

.rsrc0
Size: 2KB - Virtual size: 1KB

.rsrc4
Size: 3KB - Virtual size: 2KB

.rsrc1
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 988B

.reloc
Size: 1024B - Virtual size: 592B