d54967ed7b21a0ff0a4979a928ba663b

Sharing

Copy URL

Twitter E-mail

General

Target

d54967ed7b21a0ff0a4979a928ba663b
Size

135KB
MD5

d54967ed7b21a0ff0a4979a928ba663b
SHA1

721cd3689b1cab80834cfc07b0e515028da527ba
SHA256

89bfa3f8c79c8d4e0287794a36be59f689e7f316bc0d1517eedc3700872080fc
SHA512

964dd358bc1cf8105b49b6543e69f17b09cb2e3bf755e3b4eedc33edf2bbf78bd67402dc76245aadd597962cf2a194d316c5ae973d4f62717c468315ebae017e
SSDEEP

1536:nuSM379pilzy4aCUBGbrufhif3ba/Qtps4zWeYXuOtMl3:nu79WdaC2urufq33UeYuOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d54967ed7b21a0ff0a4979a928ba663b

Files

d54967ed7b21a0ff0a4979a928ba663b
.dll windows:4 windows x86 arch:x86

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileW
DeleteFileA
GetFileTime
FindAtomA
OpenFile
CopyFileA
ReadConsoleA
CreateProcessA
GetLastError
CopyFileExW
WriteFile
GlobalFree
GetStdHandle
CreateThread
GetCommandLineA
CopyFileA
GetComputerNameA
WriteFile
GetCPInfo
FindFirstFileA
ReadConsoleA
GetFileSize
OpenFile
GetStdHandle
OpenFileMappingA
ReadFile
DeleteFileA
GetConsoleMode
FindAtomA
DeleteFileW
DeleteAtom
DeleteFileA
CopyFileA
GetComputerNameA
GetFileTime
ReadConsoleA
CopyFileExA
CopyFileW
GetCommandLineA
ExitThread
OpenFileMappingA
FindAtomA

user32

CalcMenuBar
DialogBoxParamW
CloseWindow
GetCursor
DrawTextA
GetDC
AlignRects
CopyImage
InsertMenuA
GetWindowTextLengthA
DrawTextW
CopyImage
AlignRects
GetMenu
DrawIcon
BlockInput
CopyRect
GetDlgItem
GetFocus
AppendMenuW
IsWindow
GetWindowTextLengthA
CalcMenuBar
EndDialog
CopyIcon
AppendMenuA

gdi32

DeleteDC
AbortPath
AddFontResourceW
SetTextColor
DeleteObject
AddFontResourceA
RestoreDC
AddFontResourceExA
AddFontResourceExW
ClearBitmapAttributes
GetBitmapBits
GetPixel
GetPixel
AddFontMemResourceEx
GetBrushOrgEx
BeginPath
GetBrushOrgEx
CreateSolidBrush
SetTextColor
AddFontResourceA
AddFontResourceExW
CancelDC
DeleteObject
AddFontResourceW
GetClipBox
ClearBrushAttributes
AddFontMemResourceEx
ExcludeClipRect
CloseFigure
GetBitmapBits
GetCurrentPositionEx
ClearBitmapAttributes
AddFontResourceExA
GetBrushOrgEx
ExtTextOutA
CloseFigure
CreateSolidBrush
GetPixel
BeginPath
AddFontMemResourceEx
ClearBitmapAttributes
AbortPath
ExtTextOutA
GetPixel
AddFontResourceW
GetClipBox
RestoreDC
GetBitmapBits
BeginPath
AddFontResourceExA
GetPixel
ClearBrushAttributes
SetTextColor
AddFontResourceExW
AddFontResourceTracking
GetBrushOrgEx
AddFontMemResourceEx
DeleteDC
CreateSolidBrush
AddFontResourceA
AbortPath

comctl32

ImageList_Read
ImageList_DragMove
ImageList_Destroy
ImageList_GetIconSize
ImageList_DragEnter
ImageList_DragShowNolock
InitCommonControls
ImageList_AddIcon
ImageList_GetImageCount
ImageList_Replace
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_GetImageRect
ImageList_LoadImage
InitCommonControls
ImageList_DrawIndirect
ImageList_Remove
ImageList_EndDrag
ImageList_Destroy

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 393B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 102KB - Virtual size: 102KB

.bbs Size: - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 3KB

.tls Size: - Virtual size: 393B

.rdata Size: 512B - Virtual size: 197B

.rsrc Size: 1024B - Virtual size: 52KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 102KB - Virtual size: 102KB

.bbs
Size: - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 393B

.rdata
Size: 512B - Virtual size: 197B

.rsrc
Size: 1024B - Virtual size: 52KB