e6e248be24782f28a492055ebb35886ad057d8a5ff4d7315f22af1fe29d9df0d

Sharing

Copy URL

Twitter E-mail

General

Target

e6e248be24782f28a492055ebb35886ad057d8a5ff4d7315f22af1fe29d9df0d
Size

382KB
MD5

26624208981e08658186ff15904ea89d
SHA1

ff6256d719147c5aeab4c7c0d304fae2c82bfcf2
SHA256

e6e248be24782f28a492055ebb35886ad057d8a5ff4d7315f22af1fe29d9df0d
SHA512

c32ba04953064327f0902a3c521085e5a9fc2e91737ca4f43dec0cdd79dd7b3672fc4fc86145db73ebe148ae1090631d46a93bd952bd47e28452a55b17a4dd1f
SSDEEP

6144:kQ9zmZjVZ4SYnWMi1mpO8EAO40DjtHOY/zm7EGZ++N7PWL2Aw:z9oV6nTp+nVOY/zm7EGZRrQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6e248be24782f28a492055ebb35886ad057d8a5ff4d7315f22af1fe29d9df0d

Files

e6e248be24782f28a492055ebb35886ad057d8a5ff4d7315f22af1fe29d9df0d
.dll regsvr32 windows:6 windows x86 arch:x86

a0531243dad29a1a7a4f28a861f0946d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
SetFileApisToOEM
FlushProcessWriteBuffers
TlsAlloc
IsSystemResumeAutomatic
GetThreadUILanguage
GetTickCount
GetOEMCP
GetSystemDefaultLangID
GetCommandLineA
GetCurrentProcessorNumber
GetUserDefaultUILanguage
AreFileApisANSI
UnregisterApplicationRestart
GetThreadLocale
GetUserDefaultLangID
VirtualAlloc
IsDebuggerPresent
GetLastError
GetLargePageMinimum
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
ReadConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
HeapSize
GetFileType
GetStdHandle
CloseHandle
ReadFile
FindClose
GetTickCount64
LoadLibraryExW
HeapFree
HeapReAlloc
HeapAlloc
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
EncodePointer
SetLastError

user32

GetForegroundWindow
CloseClipboard
IsProcessDPIAware
GetClipboardViewer
GetActiveWindow
GetMenuCheckMarkDimensions
GetDialogBaseUnits
EmptyClipboard
IsWow64Message
DestroyCaret
GetOpenClipboardWindow
GetCapture
CharNextW
GetProcessWindowStation
GetFocus
SetProcessDPIAware
InSendMessage
GetMessageTime
AnyPopup
CreateMenu

advapi32

RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW

shell32

InitNetworkAddressControl

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoFreeUnusedLibraries
CoUninitialize

oleaut32

VarUI4FromStr

Exports

Exports

DllInstall
DllRegisterServer
EntryPoint
aglaftj
akcmiuilsva
aowtryzucs
awsndsaotu
bchlysevhgofy
bechwjwapgut
bodexsmhzvclrkfg
bpgeyjrzyqnzyjp
byukuaorskvfauext
cfcdqkufrzcrhpym
chzvaeuzcjhvkz
clxjzuioth
cvsvbehjysrrfeo
cxjtiyve
ebacjflahhgq
edvwtoblopc
esozblraaj
fbvowytzgpd
fcryodzgrzrihu
gaxrxxisi
gfbbhyi
gigemmsbbrq
gknunpsjxhvrtfbq
gxziiegohiekpmt
hgquenofmcac
istqdhcehmrqdbrl
iwmoowt
iwzuyalxjikvd
jbgconlabmhzgj
kasickdgmo
kikmvrpslquwede
kxsasysmeukmpqync
kzhrqxylkaw
loisjgbzplpj
lqgiabellxpksz
ltrbgrl
lxlqxkl
mocchydogcjdfvw
mtojzxzq
ndgjnzc
obbwgznli
orjulhgri
pqmyyuzugh
puerqjvfgpffzwng
qbtwodxjqdfmv
qcfgtcvzepwnnpl
qnangbfq
qqqflqlpmdshy
rcndvmpkhergcjrqp
rgqzeioojpnpiyc
rucoqabjnanq
sjasubocwd
slbczxwcjfqofg
tewascthrerpc
thhzpyrgsqr
tkdmztxwoqxbosxhn
ubgekvdpaeoqsas
uuzkrjtbylme
vbixgmzv
vbncfuatdmrnlr
vczmxrcjmsmulwgd
vjqyyjq
vusxclmmhtsm
vzkinrksztrqbwjf
wrowyinvxyqp
wsmzvrnnkjvlziifj
xeutbsqyoqz
ydtvzsserj
yeznrmikalero
yielpbvpgorfeiii
ylzwehwbuozce
zdjkfcibiuxeu
zggbxhzw
zozdfvltpwhupgftq
zsugvpqfmqofr

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0531243dad29a1a7a4f28a861f0946d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 4KB - Virtual size: 7KB

.tls Size: 512B - Virtual size: 9B

.gfids Size: 1024B - Virtual size: 768B

.rsrc Size: 164KB - Virtual size: 163KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 136KB - Virtual size: 136KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 4KB - Virtual size: 7KB

.tls
Size: 512B - Virtual size: 9B

.gfids
Size: 1024B - Virtual size: 768B

.rsrc
Size: 164KB - Virtual size: 163KB

.reloc
Size: 9KB - Virtual size: 9KB