19efcb2c4057438151ffe07c3638e595

Sharing

Copy URL Twitter E-mail

General

Target

19efcb2c4057438151ffe07c3638e595
Size

528KB
MD5

19efcb2c4057438151ffe07c3638e595
SHA1

5d42b47518fe343a89f38ae0451109054350191e
SHA256

45eb6ace7ca4211a02362dc1408da35902ffc7eb5d4da71ce90649a47be051b1
SHA512

f4cb5bb849b59107fb97b714c1c3d5b44ad78c9227d9ac874613820b0bed2c92f9fc739cc02c6f70dafe8f8226930cb34dacd529080bae87092d22478ed5f8c0
SSDEEP

6144:zwFBz35wX58EpIe4vViUHAvZ/wDrp4QSfOIHODd5FnEfAkL3lCh0J/zdrHEUbEc9:sFBz3mX58Eqeq9HSZYvpIxn56oN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19efcb2c4057438151ffe07c3638e595

Files

19efcb2c4057438151ffe07c3638e595
.dll windows:4 windows x86 arch:x86

f0067e919f920acd1b57578a2fd3b893

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ord17
ImageList_Draw

kernel32

VirtualQuery
FlushFileBuffers
CompareStringA
CompareStringW
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersion
CloseHandle
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
GetCurrentThread
HeapValidate
IsBadReadPtr
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
DebugBreak
WriteFile
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryW
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
InterlockedExchange
RaiseException
GetTimeZoneInformation
GetLocaleInfoW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
lstrlenA
CreateFileA
SetEnvironmentVariableA

user32

GetDesktopWindow
FillRect
GetSysColor
LoadCursorA

gdi32

SetPixel
CreateBitmap
GetStockObject
SetTextColor
SetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateSolidBrush
BitBlt
DeleteDC
SetPixelV
GetPixel
DeleteObject

Exports

Exports

??0SEC_AUX_DATA@@QAE@ABU0@@Z
??0SEC_AUX_DATA@@QAE@XZ
??1SEC_AUX_DATA@@UAE@XZ
??4SEC_AUX_DATA@@QAEAAU0@ABU0@@Z
??_7SEC_AUX_DATA@@6B@
?UpdateSysColors@SEC_AUX_DATA@@QAEXXZ
?m_bUpdateSysColorsCalled@SEC_AUX_DATA@@2HA
?secData@@3USEC_AUX_DATA@@A
RWAdjustHSL
RWBlendBlt
RWBlendColors
RWCloseThemeData
RWDrawDCFlatImageShadow
RWDrawDCFullImageShadow
RWDrawDCHighlightedImage
RWDrawDCImage
RWDrawFlatImageShadow
RWDrawFullImageShadow
RWDrawHighlightedImage
RWDrawImage
RWDrawThemeBackground
RWDrawThemeEdge
RWDrawThemeIcon
RWDrawThemeParentBackground
RWDrawThemeText
RWDrawThemedBMPItem
RWEnableThemeDialogTexture
RWEnableTheming
RWEnableXPThemesDrawing
RWGetCurrentThemeName
RWGetDNETColor
RWGetO2K3Color
RWGetSafeHwnd
RWGetSecData
RWGetThemeAppProperties
RWGetThemeBackgroundContentRect
RWGetThemeBackgroundExtent
RWGetThemeBackgroundRegion
RWGetThemeBool
RWGetThemeColor
RWGetThemeDocumentationProperty
RWGetThemeEnumValue
RWGetThemeFilename
RWGetThemeFont
RWGetThemeInt
RWGetThemeIntList
RWGetThemeMargins
RWGetThemeMetric
RWGetThemePartSize
RWGetThemePosition
RWGetThemePropertyOrigin
RWGetThemeRect
RWGetThemeString
RWGetThemeSysBool
RWGetThemeSysColor
RWGetThemeSysColorBrush
RWGetThemeSysFont
RWGetThemeSysInt
RWGetThemeSysSize
RWGetThemeSysString
RWGetThemeTextExtent
RWGetThemeTextMetrics
RWGetVisualStyle
RWGetWindowTheme
RWHitTestThemeBackground
RWIsAppThemed
RWIsDarkColor
RWIsDotNetStyleEnabled
RWIsOfc2003StyleEnabled
RWIsThemeActive
RWIsThemeBackgroundPartiallyTransparent
RWIsThemeDialogTextureEnabled
RWIsThemePartDefined
RWIsVistaAeroGlassStyleEnabled
RWIsVistaClassicStyleEnabled
RWIsWindowsClassicStyleEnabled
RWLightenColor
RWOpenThemeData
RWPaintGradientRect
RWResetColors
RWResetO2K3Colors
RWSetContrast
RWSetDotNetStyle
RWSetOfc2003Style
RWSetThemeAppProperties
RWSetVistaAeroGlassStyle
RWSetVistaClassicStyle
RWSetVisualStyle
RWSetWindowTheme
RWSetWindowsClassicStyle
RWTrackMouseEvent
RWTransparentBlt

Sections

.text
Size: 412KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f0067e919f920acd1b57578a2fd3b893

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 412KB - Virtual size: 409KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 8KB - Virtual size: 16KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 20KB - Virtual size: 17KB

.text
Size: 412KB - Virtual size: 409KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 8KB - Virtual size: 16KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 20KB - Virtual size: 17KB