d44ffa9749a95bc1177c90a9ece97e84

General

Target

d44ffa9749a95bc1177c90a9ece97e84
Size

160KB
MD5

d44ffa9749a95bc1177c90a9ece97e84
SHA1

470ccbb3ff4938509ba31c533aad32ef21f3950c
SHA256

e6acbeec35742c0b382b8b145e57492cb16e3ca59112866bf9cbcf0f950efd61
SHA512

0d24d1a65a3fc45dc591ba1f1c82dc7db4c6177a55c062d0ae06d72548da033c961de058d67b582061d0517c33b747677e8922aa15c5a850b6272e4536248516
SSDEEP

3072:3QuXCFRWCx1ThwKPjiqDiu0ocaXglrlJDZFQK1j6pPIonSmJBfXvl8vE/k:3Q7RWCx1FwTS5gZluK1KPIGSmJEM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d44ffa9749a95bc1177c90a9ece97e84

Files

d44ffa9749a95bc1177c90a9ece97e84
.dll windows:4 windows x86 arch:x86

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvfw32

MCIWndCreateA
ICGetDisplayFormat
ICDraw
ICCompressorChoose

ole32

CoCreateInstance
CoGetClassObject
ReadClassStg
OleUninitialize
OleInitialize
CoUninitialize
CoRevokeClassObject
CoInitialize

kernel32

ExitProcess
GetStartupInfoA
lstrcatA
SetUnhandledExceptionFilter
GetModuleHandleA
GetCommandLineA
CloseHandle
InitializeCriticalSection

advapi32

LsaICLookupSids
LsaCreateAccount
LsaCreateTrustedDomainEx
LsaCreateTrustedDomain

user32

ActivateKeyboardLayout
CreateDesktopW
RegisterClassA
SetFocus
ShowWindow
MessageBoxA

msvbvm60

__vbaErrorOverflow
__vbaExitEachAry
__vbaErase
__vbaCyErrVar
__vbaChkstk
__vbaFailedFriend
__vbaAryVar
__vbaFileClose
__vbaBoolStr
__vbaEraseKeepData

wininet

InternetCloseHandle
FindNextUrlCacheGroup
InternetCrackUrlA

dsound

DirectSoundCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate
DirectSoundCaptureCreate8

Sections

.text
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

Imports

msvfw32

ole32

kernel32

advapi32

user32

msvbvm60

wininet

dsound

Sections

.text Size: 33KB - Virtual size: 36KB

.rdata Size: 46KB - Virtual size: 48KB

.data Size: 69KB - Virtual size: 92KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 33KB - Virtual size: 36KB

.rdata
Size: 46KB - Virtual size: 48KB

.data
Size: 69KB - Virtual size: 92KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB