d67cdff1743f5aef74d8a6705233ee45

Sharing

Copy URL Twitter E-mail

General

Target

d67cdff1743f5aef74d8a6705233ee45
Size

84KB
MD5

d67cdff1743f5aef74d8a6705233ee45
SHA1

80e6c0464f890c5abee7b7853949ed8831d7ef4e
SHA256

6fe118823534ec7da87e5dc70f968052fde7b259eb18d683cacac7ff462c5119
SHA512

873d9254f90d5fb97a6e084fb5b85b98923b25dbf15f49f0990a7a9de6f4e9c6d354a4d6792da77cff7788c635e18218f4611110e48d70b72bcb0671c13f0fd1
SSDEEP

1536:6UHZJzJkoUBeOStShwgYX6vjmnZB4jkHGvmJTdM8AClFR9CG2d:p5ZmreOSgjjwFXpdM8AClD9Chd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d67cdff1743f5aef74d8a6705233ee45

Files

d67cdff1743f5aef74d8a6705233ee45
.dll regsvr32 windows:4 windows x86 arch:x86

b31828da4d8d48959753143d40c80dc6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
WriteFile
CreateFileA
DeleteFileA
CreateDirectoryA
Sleep
GetTickCount
GetEnvironmentVariableA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenW
lstrlenA
HeapAlloc
GetProcessHeap
HeapDestroy
HeapFree
TerminateThread
GetCurrentThread
SetUnhandledExceptionFilter
GetModuleFileNameA
LoadLibraryW
ExpandEnvironmentStringsW
HeapCreate
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW

user32

wsprintfA

ws2_32

WSCInstallProvider
WSCEnumProtocols
ntohs
inet_ntoa
WSCGetProviderPath

rpcrt4

UuidCreate

Exports

Exports

DllMain
DllRegisterServer
DllUnregisterServer
WSPStartup

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b31828da4d8d48959753143d40c80dc6

Headers

File Characteristics

Imports

kernel32

user32

ws2_32

rpcrt4

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 5KB