df9893665abd890a538e3f4319b09fe9

General

Target

df9893665abd890a538e3f4319b09fe9
Size

168KB
MD5

df9893665abd890a538e3f4319b09fe9
SHA1

6ba889cabeeff8ff58ccc2b7f946c583fba5a593
SHA256

e33765d5e9ba9bbb919aea0acf27638680c15c46a1790e350947d6173195977f
SHA512

67b2035c3f87c5a78d7efc5cf1c4ed78ed12109a16f7c667c13c2dfd597c085e6266d7c82631bbadc67c8f5e2e92a177c02d4ae5e330a573f7f71fc49cfcd487
SSDEEP

3072:k1IM6ptoGzKtuNMSL1KyY6cDcw6IKPhjoXfhFYex1j2UuZiVeqUL4vlX5h3sqmB:wITtzc8xt1PmXfrbl2dqUMvl5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df9893665abd890a538e3f4319b09fe9

Files

df9893665abd890a538e3f4319b09fe9
.dll windows:4 windows x86 arch:x86

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Write
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_Remove
ImageList_Draw

gdi32

GetDIBColorTable
CreateDIBitmap

user32

GetCursor
OpenIcon
GetClientRect
GetClipboardData
GetCursorPos
GetMenu
DrawMenuBar
GetDC

kernel32

VirtualAlloc
ReadFile
GetModuleHandleA
LoadLibraryA
SetEndOfFile
GetLastError
ResetEvent
ExitProcess

Exports

Exports

UYS3Zdz67@24
BwEO5d
_oiPxl37Yg@16
_07aJGH@8
_cTzcbZDl
cihl3DJrW1Ge
_fw3qEh3A
_RUJ5N
LsERixT58no8Y
_6ZOTxx2u0x
_cT90GypzD3W@24
_clEQfN6ibVY8U
_IqhP3CPp@16
124EIM@20
DHjC2tq@8
_Zo9wLjajXExH9
05TUiBVj
_SWA6DoceDk@24
DUvhlIWEgxJpJS@4
OEjcY98GT@8
_tXRTxmXrGnsbc@20
t_GKzV1qXOQQxm
s702xPvTqJMAfn@8
8LDtqD
_UjMcbLXsOQP@20
jMuCr7v7@16

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07024baf21aa85d398b4e6ce172f4b2e

Headers

File Characteristics

Imports

comctl32

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 182KB

.data Size: 148KB - Virtual size: 148KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 182KB

.data
Size: 148KB - Virtual size: 148KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB