d422bececce11502b7f6d3478e9ab263

Sharing

Copy URL

Twitter E-mail

General

Target

d422bececce11502b7f6d3478e9ab263
Size

82KB
MD5

d422bececce11502b7f6d3478e9ab263
SHA1

1b160b1b54ea81f87e02eca8a06a65a30fc52c86
SHA256

8905b39a5316fda649e7b267259dcf05caa6a7872f81f304a529ca3843373b2e
SHA512

acfb080ababfe247556086316dfb807814f2c1b7e65161bb9348307cc48609b2788f56a17126647b567c4bcfa81b9f91653545f499e345fbb93e6591b8652645
SSDEEP

1536:jz2hGo5ztmeD5sCYJwBwvR4L9eKn6HzZQurJOIxmFy2uTEwgrlVyIE6TZTYYZDNY:/2hGodDWCIgz886HzZQZPuI7Vq6tJlNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TbWrap.dll

Files

d422bececce11502b7f6d3478e9ab263
.cab
TbWrap.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c95686594e4c73cd2e3dbc3cbfa8939c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHGetValueA
SHSetValueA
SHDeleteValueA

kernel32

CloseHandle
SetLastError
GetProcAddress
GetModuleHandleA
GetFileAttributesW
GetVersion
OutputDebugStringA
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
LoadLibraryA
GetACP
MultiByteToWideChar
GetCPInfo
GetStringTypeW
GetStringTypeA
CreateFileA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
LCMapStringW
HeapSize
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ReadFile
ExitProcess
DeleteCriticalSection
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCommandLineA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
InterlockedIncrement
SetEnvironmentVariableA
GetLastError
CopyFileA
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
lstrlenA
InterlockedDecrement
GetVersionExA
GetModuleFileNameA
GetShortPathNameA
GetOEMCP
SetEndOfFile
CompareStringA
CompareStringW
LCMapStringA
HeapFree
HeapAlloc
RtlUnwind

user32

LoadImageA
FillRect
DialogBoxParamA
EnableWindow
CheckRadioButton
InvalidateRect
IsDlgButtonChecked
LoadBitmapA
EnumWindows
GetClassNameA
FindWindowExA
SendMessageTimeoutA
EndDialog
SetForegroundWindow
GetWindowDC
LoadStringA
GetWindowRect
UpdateWindow
GetSysColor
SetWindowPos
GetPropA
BeginPaint
EndPaint
RemovePropA
GetCursorPos
PtInRect
LoadCursorA
SetCursor
TrackMouseEvent
DefWindowProcA
GetParent
PostMessageA
GetDlgItem
ShowWindow
GetWindowTextA
GetClientRect
ClientToScreen
ScreenToClient
GetDC
DrawTextA
ReleaseDC
SetPropA
SetWindowLongA
SendMessageA

gdi32

GetDeviceCaps
SetBkMode
GetStockObject
GetObjectA
CreateFontIndirectA
SelectObject
SetTextColor
DeleteObject

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SysFreeString
SysAllocString
OleLoadPicture

Exports

Exports

About
DllRegisterServer
DllUnregisterServer
Event
Init
Refresh
Settings
UnInit

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c95686594e4c73cd2e3dbc3cbfa8939c

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 23KB

.rsrc Size: 52KB - Virtual size: 49KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 23KB

.rsrc
Size: 52KB - Virtual size: 49KB

.reloc
Size: 8KB - Virtual size: 7KB