d5d84c1a75162822e2ddb0facd7b2ce0

General

Target

d5d84c1a75162822e2ddb0facd7b2ce0
Size

13KB
MD5

d5d84c1a75162822e2ddb0facd7b2ce0
SHA1

9f2997b1666334d550129102c79a688fc3fa3fa0
SHA256

ced7f078fc5cbf040e90baaa7fd01d3bd1d1dafae7b4117658f9160ff22ab148
SHA512

7465ae5003130d1b75709eba13fd8176f4f2b23c8a43b72431c9e39c9d7946840c26f9e00ec4f0e839d52454b0bbc051becf08b587d0d7dea2fd5d2fccc5c00b
SSDEEP

192:x7PFWJwzT6Ou0Js5J6AdTRNHdSxWCjqfNb1lZ4Bp9YrQXxydlmC1XMiNuq8:xbFWiJM60TRNHiWCWNb1lbMy/1X3NQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5d84c1a75162822e2ddb0facd7b2ce0

Files

d5d84c1a75162822e2ddb0facd7b2ce0
.dll windows:4 windows x86 arch:x86

0033b2ad5a06d98b60608c5f0bb8fdec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
GetCurrentProcessId
VirtualFreeEx
ReadProcessMemory
GetCurrentProcess
CreateEventA
SetThreadPriority
CreateThread
OutputDebugStringA
GetComputerNameA
ExitProcess
TerminateProcess
IsBadReadPtr
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
VirtualProtectEx
VirtualAlloc

user32

UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetWindowTextA
FindWindowA
GetWindowThreadProcessId
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0033b2ad5a06d98b60608c5f0bb8fdec

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 11KB - Virtual size: 10KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1024B - Virtual size: 776B

.text
Size: 11KB - Virtual size: 10KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1024B - Virtual size: 776B