d3554da5966a1605f630530588e22824

Sharing

Copy URL Twitter E-mail

General

Target

d3554da5966a1605f630530588e22824
Size

116KB
MD5

d3554da5966a1605f630530588e22824
SHA1

3f8e2f5d553b68a4997afab6086f7c7fd5ad2a34
SHA256

8f9c2df899aff8476ab7da8d62f5f5d9d824f74f6e6a74950d92cc57ad2aa3e9
SHA512

966a6913082d37dbbee834266a02899f5713dec4f01dfba109c0c28daa53f37d8d92b568c55e9982069601ccbc7f58c9a500a80d4225b0802df39b39f6ca6f21
SSDEEP

1536:CEG89DlSD/7DKHvBInpUVY6iMTBAzBpEgHMuWXhJq0XDdMOUBWRsas4V:n1MgqnGVY6iMTBA3THAuIdxU4saV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3554da5966a1605f630530588e22824

Files

d3554da5966a1605f630530588e22824
.dll windows:4 windows x86 arch:x86

981485aad6d38aa705ebb72a53bebb7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
SetLastError
FreeLibrary
DisableThreadLibraryCalls
GetVersionExA
GetFileAttributesW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetLocaleInfoW
GetGeoInfoW
GetTickCount
GetUserDefaultLCID
GetUserGeoID
LocalFree
LocalAlloc
GetUserDefaultLangID
HeapFree
FormatMessageW
lstrcmpW
GetProcessHeap
HeapAlloc
lstrlenW
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
CloseHandle
GetLastError
GetCommandLineA
GlobalFree
VirtualProtect
GetSystemDefaultLCID
GlobalAlloc

user32

PostMessageW
GetParent
GetWindowLongW
SetWindowLongW
GetDlgItem
LoadStringW
SetDlgItemTextW
IsWindowVisible
SendMessageW
GetDlgItemTextW
LoadIconW
DestroyIcon
EnableWindow
SetFocus
MessageBoxW
CheckDlgButton
SendDlgItemMessageW
SetCursor
LoadCursorW
CharLowerBuffW
KillTimer
ShowWindow
IsDlgButtonChecked

advapi32

RegOpenKeyExW
DuplicateTokenEx
GetTokenInformation
RevertToSelf
RegCloseKey
RegCreateKeyExW
SetThreadToken

gdi32

GetObjectType
GetCurrentObject
DeleteDC
GetDeviceCaps
GetObjectA

ole32

CreateBindCtx
OleUninitialize
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoInitializeEx

msvcr71

_except_handler3
_adjust_fdiv
_amsg_exit
_XcptFilter
_onexit
malloc
free
_wcsicmp
memset
_initterm
memcpy
_vsnwprintf
__CppXcptFilter
__dllonexit

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

981485aad6d38aa705ebb72a53bebb7b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

msvcr71

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 4KB - Virtual size: 34KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 4KB - Virtual size: 34KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 3KB