86856667aabee815ded17991467ebbe61c17fcd880e16bb0c4aa55a469a58286

Sharing

Copy URL

Twitter E-mail

General

Target

86856667aabee815ded17991467ebbe61c17fcd880e16bb0c4aa55a469a58286
Size

294KB
MD5

7c4301d94472bbf663268321530416f5
SHA1

5790fed8e92534e70f31db454db142d5d2222e57
SHA256

86856667aabee815ded17991467ebbe61c17fcd880e16bb0c4aa55a469a58286
SHA512

25d8fae807490b76c42a44c1def9e254fba809103069cc754029ecb7c0c6d179df688ac6c80341a5224d6413fac2cbef75e53b80203daaa3987783deeeae88af
SSDEEP

6144:AlL0UzdQeJPAvp2SSzMQwrsKHg885ubF+jl7F9w1:AlwUzdQkQSeHgYqlg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86856667aabee815ded17991467ebbe61c17fcd880e16bb0c4aa55a469a58286

Files

86856667aabee815ded17991467ebbe61c17fcd880e16bb0c4aa55a469a58286
.dll windows:5 windows x64 arch:x64

1e72572c77348c59f916f895a8ed3f6c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator\Desktop\dll\x64\Release\mysvchost.pdb

Imports

kernel32

GetModuleHandleW
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
InitializeCriticalSection
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
DeleteCriticalSection
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFlags
GlobalAddAtomA
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetCPInfo
GetOEMCP
HeapAlloc
ExitProcess
HeapFree
GetDateFormatA
GetTimeFormatA
FlsSetValue
HeapReAlloc
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapQueryInformation
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
FlsAlloc
GetACP
IsValidCodePage
GetStdHandle
HeapSetInformation
HeapCreate
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetDriveTypeA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GlobalGetAtomNameA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
lstrcmpA
GetFileTime
GetFileSizeEx
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GetProcAddress
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
LoadLibraryA
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
CopyFileA
CreateThread
GetCommandLineA
ReadFile
Sleep
CreateProcessA
GetStartupInfoA
CreatePipe
TerminateProcess
lstrlenA
GetCurrentProcess
CloseHandle
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
CreateFileA
GetModuleHandleA
MultiByteToWideChar
GetFileAttributesA
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemTimeAsFileTime
WideCharToMultiByte

user32

RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrA
SetWindowLongPtrA
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
MessageBoxA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindowThreadProcessId
SendMessageA
GetWindowLongA
DestroyMenu
ShowWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSystemMetrics
CharUpperA
UnhookWindowsHookEx
PostQuitMessage
PostMessageA
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextA
SystemParametersInfoA

advapi32

RegSetValueExA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

CreateBitmap
SaveDC
DeleteDC
SetViewportOrgEx
RestoreDC
SetTextColor
SetMapMode
GetClipBox
SetBkColor
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetDeviceCaps
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
OffsetViewportOrgEx

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

??4Cmysvchost@@QEAAAEAV0@AEBV0@@Z
ServiceMain

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e72572c77348c59f916f895a8ed3f6c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shlwapi

oleacc

gdi32

winspool.drv

comdlg32

oleaut32

Exports

Exports

Sections

.text Size: 183KB - Virtual size: 183KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 10KB - Virtual size: 33KB

.pdata Size: 13KB - Virtual size: 12KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 183KB - Virtual size: 183KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 10KB - Virtual size: 33KB

.pdata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 9KB - Virtual size: 9KB