c9b933bfedc9150977c9643f97cfecd9

Sharing

Copy URL Twitter E-mail

General

Target

c9b933bfedc9150977c9643f97cfecd9
Size

248KB
MD5

c9b933bfedc9150977c9643f97cfecd9
SHA1

cf7f8651c6037b84b3453ab992acdf05721a9c89
SHA256

4707e1b8438ea71602f91c8ca8c2b2b63e815aa4638496a2c7fac668764c1e5d
SHA512

d371b5614135152e57fac8dabf454bd60c0a9e0ac31839f7914c5d3c5822d4b83ae68e78b1a60c9683bef22c085194071cd6cbc6a0f0d41caa84a6e0ccb0ffca
SSDEEP

6144:puvSN2keJKXPmeh+7UxVxpWJ0DlhFIiAM586Xm:pKkeKBU43IwlPgMnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9b933bfedc9150977c9643f97cfecd9

Files

c9b933bfedc9150977c9643f97cfecd9
.dll windows:4 windows x86 arch:x86

7f0abbd839e24b176c5c8f4b762ffdd7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueA
RegSetValueExA

oleaut32

SafeArrayAccessData
VariantInit
VariantCopyInd
VariantCopy
VariantClear
VarUI4FromStr
SysStringLen
SysStringByteLen
SysReAllocString
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SafeArrayUnlock
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetElement
OleIconToCursor
OleTranslateColor
SafeArrayCreateVector

kernel32

GlobalHandle
lstrlenW
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForMultipleObjects
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
Sleep
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateMutexA
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitProcess
FileTimeToSystemTime
FindFirstFileA
FindResourceA
FindResourceExA
FlushInstructionCache
FreeEnvironmentStringsA
FreeLibrary
FreeResource
GetACP
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileSize
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadLocale
SizeofResource
GetTimeFormatA
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GetTickCount
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByte
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFree
LocalLock
LocalUnlock
LockResource
MapViewOfFile
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
RtlUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree

comctl32

PropertySheetA
CreatePropertySheetPageA

Exports

Exports

AddPicture2
BindSurfaceToAddr
D3D9ResourceGetMappedPitch
D3D9ResourceGetMappedSize
EnumAvValueRelease
EnumImageDataInItemReset
EventElapsedTime
GetDevSplineArray
GetDevice
GetImageItemCount
GetLimitation
GetTypeNameOfMedia
Launch
MakeMyColorDataFromBinary
Memcpy
Memcpy2DToArray
MutexOperation
RegisterFatBinary
RegisterFunction
SetExpectedAPIVersionEx
UnregisterDriveStatusCallback

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f0abbd839e24b176c5c8f4b762ffdd7

Headers

File Characteristics

Imports

advapi32

oleaut32

kernel32

ole32

comctl32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 164KB

.data Size: 72KB - Virtual size: 116KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 164KB - Virtual size: 164KB

.data
Size: 72KB - Virtual size: 116KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB