e0dd48645bdb50745a4f2ee0f57337e7faef44c6113612c4fb0f3f540978b893

Sharing

Copy URL Twitter E-mail

General

Target

e0dd48645bdb50745a4f2ee0f57337e7faef44c6113612c4fb0f3f540978b893
Size

255KB
MD5

4d43bb3e213322752fd6741a4026c630
SHA1

d11fd746245d7211d86a811f88c34275c0604155
SHA256

e0dd48645bdb50745a4f2ee0f57337e7faef44c6113612c4fb0f3f540978b893
SHA512

794ca8ee33164a74d7ceb1c2ca39212cf39bd6e3f85cea142fa0f692a944cdef97a6c3aa93d78ac4ba3c730b643b02643df76fcaba36e751b828cfc0b2468a26
SSDEEP

3072:CfE4y+wVrC4a/njGKQVEPchMoa7789HduIM9wrkLzFuGeVQ0EaHCyKRV52Y:C9ylQ/nOVEUeoa7AFEIM6osGP0A5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0dd48645bdb50745a4f2ee0f57337e7faef44c6113612c4fb0f3f540978b893

Files

e0dd48645bdb50745a4f2ee0f57337e7faef44c6113612c4fb0f3f540978b893
.dll windows:5 windows x86 arch:x86

034bf73084288fa3d58eb5894bcb80b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
HeapSize
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
DeleteCriticalSection
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ExitProcess
GetProcAddress
InterlockedDecrement
SetLastError
GetModuleHandleW
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RaiseException
HeapAlloc
HeapFree
GetLastError
GetModuleFileNameW
GetStdHandle
WriteFile
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
GetCurrentThreadId
RtlUnwind
EncodePointer
DecodePointer
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GetModuleFileNameA
GetShortPathNameA
GetProfileStringA
WriteProfileStringA
MulDiv
Sleep
GetFullPathNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
lstrcpynA
lstrcmpA
lstrcatA
lstrlenA

user32

SetScrollPos
SetScrollRange
GetScrollRange
RegisterClassExA
LoadIconA
GetDesktopWindow
ReleaseDC
GetDC
GetCursorPos
GetWindow
DefWindowProcA
GetDialogBaseUnits
KillTimer
SetTimer
CreateDialogParamA
CreatePopupMenu
RegisterClassA
IsWindow
IsWindowEnabled
SetParent
DefDlgProcA
LoadBitmapA
GetScrollPos
UnregisterClassA
SetScrollInfo
LoadCursorA
SetCursor
SetWindowPos
EnableWindow
CharUpperA
GetWindowRect
GetDlgItemTextA
IsWindowVisible
WindowFromPoint
ScreenToClient
MessageBoxA
CreateWindowExA
GetScrollInfo
ClientToScreen
TrackPopupMenu
SetDlgItemTextA
ShowWindow
SetFocus
GetKeyState
CallWindowProcA
GetCapture
ReleaseCapture
SetCapture
PostMessageA
IsChild
DialogBoxParamA
MessageBeep
EnableMenuItem
SetDlgItemInt
SendDlgItemMessageA
SetWindowLongA
EndDialog
GetDlgItemInt
wsprintfA
AppendMenuA
SendMessageA
LoadMenuA
GetSubMenu
CheckMenuItem
DestroyMenu
GetParent
GetWindowTextA
SetWindowTextA
BeginPaint
EndPaint
GetFocus
GetSysColor
DestroyWindow
InvalidateRect
UpdateWindow
GetWindowLongA
DrawIcon
GetClassLongA
DrawTextA
DrawFocusRect
GetDlgItem
MoveWindow
GetSystemMetrics
GetClientRect
FillRect

gdi32

SetTextColor
SetBkColor
CreateSolidBrush
SetBkMode
SelectClipRgn
CreateRectRgnIndirect
DeleteDC
GetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
GetObjectA
GetDeviceCaps
GetStockObject
GetTextExtentPoint32A
LineTo
DeleteObject
MoveToEx
BitBlt
CreatePen
SelectObject

comdlg32

ChooseColorA

oleaut32

LoadTypeLi

comctl32

ImageList_Add
ImageList_Create

qgdi32

StretchColor
FloodFillRect
FloodFillRectHorz
saParamTokenGetByName
CreateFontByName
ReadDib
DrawDib
DestroyDib
saXML_SetBinValue
saXML_GetPrev
saXML_ReleaseItem
saXML_AddPrev
saGetPrtEvalProc
lstrcpy_A2U
saXML_SaveTreeToFile
saXML_GetParent
saXML_GetBinValue
saXML_GetValueByName
X_Open
X_Close
X_Readln
saGetSysColor
saGetPrivateLong
DrawUserFrame
GetGlobalFont
saQueryLanguageLayer
saPaintGdiString
saPixelFromUnitsCX
saGetCacheName
DrawBitmapInRect
StringToLong
llstrtrim
X_Read
StringToDouble
GetDotPen
saGetPrivateString
saSetProfileType
AllocGlobal
FreeGlobal
LongToString
CalculatorDialog
saGetDialogBaseUnits
lstrtok
saPixelToUnitsCX
saPixelToUnitsCY
saPixelFromUnitsCY
saWritePrivateLong
saWritePrivateString
_Yield
OkCancelDlgProc
saGetSysBrush
GetGlobalBitmap
lstrtrim
saXML_AddChildLast
saXML_SetName
saXML_SetValue
saXML_ReleaseTreeEx
saXML_CreateTreeEx
saXML_SaveTreeToFileKompatible
CreateIXFileCached
saShellRun
WaitCursorEnd
WaitCursorBegin
GetFileNameDlg
CreateBitmapFromFile
CreateBitmapFromIPicture
CreateIPictureFromHGlobal
BitmapHeight
BitmapWidth
WriteBitmapToFile
CreateIPictureFromFile
PitchToPixel
IncToPitch
CmToInc
IncToCm
PitchToInc
PixelToPitch
saGetPublicLong
lstrcpy_U2A
lstrlen_U
lSetBstr_A
saOem2Ansi
saAnsi2Oem
saXML_GetFirstChild
saXML_GetNext
saXML_GetChildByName
saXML_GetName
saXML_GetValue
DoubleToString
saXML_SetValueByName
lstrcpyn_U2A
dRnd
saXML_GetChildByNameEx

Exports

Exports

CreateIsaPrtForm
GetIID_IsaGrid02
GetIID_IsaGridCmd
GetIID_IsaGridColumnList
GetIID_IsaGridDropHandler
GetIID_IsaGridDyna
GetIID_IsaGridMsgHandler
GetIID_IsaGridRGB
GetIID_IsaGridValid
GetIID_IsaPrtForm
GetIID_IsaPrtPage
GetIID_IsaPrtValidate
saCTRL_Init
saDefWindowProc
saDrawPictureInRect
saGridCacheProfiles
saGridSetLayoutPath
saTV_AddKategorie
saTV_AddSubItem
saTV_DeleteChilds
saTV_DeleteReku
saTV_FindKategorie
saTV_FindSubItem
saTV_GetItemParam
saTV_GetItemText
saTV_SetItemText
saTV_Setup

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

034bf73084288fa3d58eb5894bcb80b8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

oleaut32

comctl32

qgdi32

Exports

Exports

Sections

.text Size: 159KB - Virtual size: 159KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 10KB - Virtual size: 13KB

.rsrc Size: 45KB - Virtual size: 45KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 159KB - Virtual size: 159KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 10KB - Virtual size: 13KB

.rsrc
Size: 45KB - Virtual size: 45KB

.reloc
Size: 14KB - Virtual size: 13KB