c5cfb01df419e9e809a85e8e79887151

Sharing

Copy URL Twitter E-mail

General

Target

c5cfb01df419e9e809a85e8e79887151
Size

124KB
MD5

c5cfb01df419e9e809a85e8e79887151
SHA1

b063faf5785cc4f9afd181eb333fa49c479e3544
SHA256

8bf1a28c516b3a044faac46c71d6b5f51fe3b058b4b776fd9f864ebc6673d21a
SHA512

06cd3b8ed9607fd2dcbb88eff72c920cf55263e3a692ea5654ada58e49bdbbe1d78ae6a228b36eeb7f2481cf9fa37cdc7befa7908e97dce102dadcd251ec1b8f
SSDEEP

1536:Ml4YtNijyNiUyhi2F7/A2i0VnsuT92BKd6AH0fBblm2XCauu:MRtNpi3F7libZm0Zblm2XNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5cfb01df419e9e809a85e8e79887151

Files

c5cfb01df419e9e809a85e8e79887151
.dll regsvr32 windows:4 windows x86 arch:x86

e51708fc05d5ad4b4573786e3c6aa5fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
DebugBreak
OutputDebugStringA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA
LocalFree
lstrcatA
GetWindowsDirectoryA
Sleep
TerminateProcess
GetSystemDirectoryA
GetCommandLineA
FlushInstructionCache
GetStdHandle
GetACP
TlsGetValue
SetEndOfFile
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleHandleA
GetStartupInfoA
GetFileType
SetHandleCount
FlushFileBuffers
SetFilePointer
IsBadWritePtr
SetLastError
VirtualAlloc
VirtualFree
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCPInfo
LCMapStringW
LCMapStringA
ExitProcess
GetFileSize
ReadFile
GetModuleFileNameA
GetLongPathNameA
CreateFileA
WriteFile
CloseHandle
GlobalAlloc
GlobalLock
GlobalFree
lstrlenW
WideCharToMultiByte
GetTickCount
FindFirstFileA
FindClose
lstrlenA
MultiByteToWideChar
lstrcpyW
HeapReAlloc
HeapAlloc
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
HeapSize
RtlUnwind
HeapFree
GetVersion
GetOEMCP

user32

DestroyWindow
GetClientRect
SetWindowLongA
CreateWindowExA
wvsprintfA
CharNextA
ShowWindow
SetTimer
KillTimer
SetWindowPos
GetWindowRect
GetParent
wsprintfA
MessageBoxA
CallWindowProcA
GetWindowLongA
LoadStringA
GetFocus
GetWindow
DefWindowProcA
IsWindow

ole32

CreateStreamOnHGlobal
CoGetMalloc
StringFromIID
CoCreateFreeThreadedMarshaler

oleaut32

SysStringLen
LoadRegTypeLi
DispCallFunc
VariantChangeType
SysAllocString
SysAllocStringByteLen
VariantInit
VariantClear
SysFreeString
SysStringByteLen

atl

ord22
ord18
ord15
ord16
ord21
ord23
ord43
ord44
ord46
ord48
ord32
ord30
ord47
ord31
ord10
ord11
ord39
ord58

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e51708fc05d5ad4b4573786e3c6aa5fe

Headers

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

atl

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 72KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 76KB - Virtual size: 72KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 15KB