c840ceabe2c718c13f5545060fafdc4c

Sharing

Copy URL

Twitter E-mail

General

Target

c840ceabe2c718c13f5545060fafdc4c
Size

364KB
MD5

c840ceabe2c718c13f5545060fafdc4c
SHA1

ad3314157d38f2bc3df49a1a6408fabe34ce3059
SHA256

e645df27fe9650873c9941b8bdfd14b6c0f22c4942cf06c099dea2406d72112a
SHA512

eedf9b50ee81d54178f9acf7a846840bcdc02689b11d7fd1f280e632867e174ff27903c3f96e1fe48f750fffe0fe9690cbbe3a828d299e04c15f998c7e1ee8cf
SSDEEP

6144:1LjPgudzTj5IXU6rov5J2B31hsuRu3JYtIZYkcooRYykhMfwDzMZyCJC:1LjgyRIk6Uv5J2Blf4GIZYBooR4MfwDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c840ceabe2c718c13f5545060fafdc4c

Files

c840ceabe2c718c13f5545060fafdc4c
.dll windows:4 windows x86 arch:x86

82e3103265e769060ceb738cec7c9588

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCanonicalizeA

kernel32

lstrcpynW
MulDiv
lstrcmpW
GetFileAttributesW
FindFirstFileW
FindClose
lstrcatW
GetCommandLineW
GetProcAddress
GetCurrentProcessId
lstrcmpiW
CreateFileW
ReadFile
lstrcpyW
CloseHandle
FoldStringW
LocalLock
LocalSize
LocalUnlock
lstrlenW
LocalAlloc
LocalFree
WriteFile
GlobalFree
GetStartupInfoA
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
MapViewOfFile
CreateFileMappingW
GetFileInformationByHandle
GlobalUnlock
CompareStringW
GetTimeFormatW
GetDateFormatW
GetUserDefaultLCID
GetLocalTime
QueryPerformanceCounter
GetTickCount
Beep
GetHandleInformation
HeapAlloc
GetProcessHeap
HeapFree
SetLastError
WideCharToMultiByte
LocalReAlloc
FormatMessageW
GetUserDefaultUILanguage
GetLastError
GetLocaleInfoW
GlobalLock

advapi32

RegCloseKey
RegCreateKeyW
IsTextUnicode
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
RegQueryValueExW

msvcrt

wcsncpy

shell32

DragFinish
ShellAboutW
DragAcceptFiles
DragQueryFileW

winmm

mmioOpenA

winspool.drv

ClosePrinter
GetPrinterDriverW
OpenPrinterW

comctl32

CreateStatusWindowW

comdlg32

PageSetupDlgW
FindTextW
GetSaveFileNameW
CommDlgExtendedError
ReplaceTextW
GetOpenFileNameW
GetFileTitleW
ChooseFontW
PrintDlgExW

Exports

Exports

ahmk

Sections

.code
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82e3103265e769060ceb738cec7c9588

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

msvcrt

shell32

winmm

winspool.drv

comctl32

comdlg32

Exports

Exports

Sections

.code Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 300KB - Virtual size: 298KB

.rdata Size: 4KB - Virtual size: 1B

.data Size: 4KB - Virtual size: 1B

.data Size: 4KB - Virtual size: 1B

.reloc Size: 4KB - Virtual size: 1B

.rsrc Size: 4KB - Virtual size: 792B

.reloc Size: 4KB - Virtual size: 1KB

.code
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 300KB - Virtual size: 298KB

.rdata
Size: 4KB - Virtual size: 1B

.data
Size: 4KB - Virtual size: 1B

.data
Size: 4KB - Virtual size: 1B

.reloc
Size: 4KB - Virtual size: 1B

.rsrc
Size: 4KB - Virtual size: 792B

.reloc
Size: 4KB - Virtual size: 1KB