c571fa58067d843d90e5381a6b3441e9

Sharing

Copy URL Twitter E-mail

General

Target

c571fa58067d843d90e5381a6b3441e9
Size

172KB
MD5

c571fa58067d843d90e5381a6b3441e9
SHA1

7af524eadfa7cebc63518a0d54097c00739ee745
SHA256

e3e4f80eb228802293a33b9a0ee9b88a11017b309b81b61aaa603015d5185291
SHA512

63bcabe3a558f7fc5eae10ee41fae970eab0eff7af2e88faed4eab0dbc52e96e38f9f9ed1fbd81d1bb1f5c24dbe43760d3e511a564a417511d4600095a3ebd34
SSDEEP

3072:03Ne5Rah/8hNrXeVN4TCrVHAQEyj9hjzY4INqOFh+tROGs7:UA+hkhNrG4TCB+4hjzfsqOFyRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c571fa58067d843d90e5381a6b3441e9

Files

c571fa58067d843d90e5381a6b3441e9
.dll windows:4 windows x86 arch:x86

0791e51d0f66bd05ddc19fbd3bbf87f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsChild
GetWindowDC
GetSystemMetrics
ShowScrollBar
OffsetRect
GetSysColor
GetWindowRect
InsertMenuItemA
SetWindowPlacement
PtInRect
EnumChildWindows
GetClassNameA
SetParent
GetLastActivePopup
MsgWaitForMultipleObjects
IsDialogMessageA
GetSubMenu
UnhookWindowsHookEx
CharToOemA
GetActiveWindow
GetClipboardData
CharLowerA
CreateWindowExA
ChildWindowFromPoint
GetScrollInfo
IsWindowVisible
GetMenu
IsWindow
DefWindowProcA
GetDlgItem
BeginPaint
FillRect
SetWindowPos
IsCharLowerA
CharUpperA
GetSysColorBrush
EmptyClipboard
GetDCEx
SetCapture
GetClassInfoA
SetActiveWindow
DispatchMessageW
InflateRect
GetSystemMenu
RemovePropA
GetWindowThreadProcessId
EnableScrollBar
GetClientRect
GetClassLongA
ShowOwnedPopups
SetMenuItemInfoA
SetForegroundWindow
GetKeyboardLayoutNameA
MoveWindow
PeekMessageA
DefFrameProcA
TranslateMessage
SetWindowLongA
KillTimer
MapVirtualKeyA
SendMessageA
GetDesktopWindow
IsWindowEnabled
GetKeyboardType
DrawMenuBar
PostMessageA
GetKeyboardLayout
OpenClipboard
GetCursorPos
RegisterWindowMessageA
DrawIconEx
MessageBoxA
CharUpperBuffA
GetIconInfo
SetCursor
GetKeyNameTextA
PostQuitMessage
MessageBeep
WindowFromPoint
GetWindow
ActivateKeyboardLayout
GetDC
SetClipboardData
DispatchMessageA
RegisterClipboardFormatA
DestroyWindow
DefMDIChildProcA
CreatePopupMenu
EnableMenuItem
GetForegroundWindow
CreateIcon
GetKeyState
SendMessageW
GetMenuItemCount
CallWindowProcA
IsCharUpperA
ReleaseCapture
GetWindowTextA
IsRectEmpty
CharNextW
CallNextHookEx
CharNextA
CloseClipboard
GetScrollPos
SetRect
IntersectRect
GetScrollRange
wsprintfA
GetCapture
SetScrollInfo
IsDlgButtonChecked

kernel32

LoadLibraryA
ExitProcess
lstrcpyA
WriteFile
WideCharToMultiByte
VirtualAlloc

gdi32

GetBkColor
GetBkMode
GetPaletteEntries
GetTextColor
CreateDIBitmap

Exports

Exports

_4lS3IbLoBgCNxj
fepQgB
TUiau
_iE9mz2dCr0zOP@8
_UALZXpOVlTr@4
_eusfc7F@20
_fDbJXp@16
ksrZ2du7560@16
rFrU_SRWKtkWc
_0HFziv@16
_C65sJlw_@12

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0791e51d0f66bd05ddc19fbd3bbf87f4

Headers

File Characteristics

Imports

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 148KB

.data Size: 150KB - Virtual size: 149KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 148KB

.data
Size: 150KB - Virtual size: 149KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB