d14f926fc2178c3f2ff309a2046855d99e7851d01345872be4f43f1ec0170432

Sharing

Copy URL Twitter E-mail

General

Target

d14f926fc2178c3f2ff309a2046855d99e7851d01345872be4f43f1ec0170432
Size

148KB
MD5

d652d4b043ce10bfcae767504d30df14
SHA1

04b8b5a503cd16ba41d165100ee7846f9db7e606
SHA256

d14f926fc2178c3f2ff309a2046855d99e7851d01345872be4f43f1ec0170432
SHA512

808cb2afa9f6b379efa27ec1ee477d9ee981faab2068586d13294f4f49839c7ad24342e942d76b26ba422504e709a4042cffab15a76fc60c143107b5b463ea3a
SSDEEP

3072:1YQHLUOARjhDgoOUDaRNdiuaiNJtoxzztBJEPM1T/TJh:1YQrcRjlJaRNdiutd2hUP8xh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d14f926fc2178c3f2ff309a2046855d99e7851d01345872be4f43f1ec0170432

Files

d14f926fc2178c3f2ff309a2046855d99e7851d01345872be4f43f1ec0170432
.dll windows:4 windows x86 arch:x86

9b069b3294f8b7b994665d6ae1596d3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LockResource
LoadResource
GetModuleFileNameA
GlobalAlloc
GlobalLock
Sleep
RaiseException
FindResourceA
SizeofResource

user32

SetWindowPos
MapDialogRect
ReleaseDC
SendMessageA
UpdateWindow
GetWindowLongA
RedrawWindow
GetDC
GetDlgItem
SetWindowTextA
ScreenToClient
GetWindowRect
GetDlgCtrlID
InvalidateRect
LoadImageA
SetScrollPos
GetNextDlgGroupItem
SetDlgItemInt
SetWindowRgn
SetScrollRange
SetWindowLongA
CreateWindowExA
DestroyWindow
GetSysColor
GetSystemMetrics
ShowWindow
EnableWindow
GetParent
ClientToScreen
GetDesktopWindow
GetClientRect
MessageBoxA
FillRect
wvsprintfA
KillTimer
LoadCursorA
SetRect
DefWindowProcA
LoadStringA
SetFocus
SendDlgItemMessageA
SetCursor
SetTimer
GetCursorPos
GetKeyState
SetCapture
ReleaseCapture
wsprintfA
GetDlgItemInt
GetWindowRgn
InflateRect
BeginPaint
IntersectRect
DialogBoxParamA
FrameRect
EndPaint
EndDialog
LoadBitmapA
SetDlgItemTextA
PeekMessageA

gdi32

SetStretchBltMode
DPtoLP
StretchBlt
SelectObject
DeleteEnhMetaFile
SetWinMetaFileBits
SetEnhMetaFileBits
DeleteDC
DeleteObject
CreateSolidBrush
GetStockObject
CombineRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
CreatePolygonRgn
GetPixel
SetBkColor
CreateBitmap
GetTextExtentPoint32A
SetTextColor
BitBlt
GetObjectA
CreateCompatibleDC
GetMapMode
SetMapMode
SetBkMode

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

comctl32

ord17

shell32

ShellExecuteA

winmm

PlaySoundA

msvcrt

_except_handler3
getc
rename
_strupr
remove
_memicmp
_hypot
_memccpy
_fcloseall
_flushall
_strset
_itoa
_searchenv
_setjmp3
_strdate
_strtime
clock
strchr
strcoll
time
strerror
_strerror
strcspn
strncat
strncmp
_stricoll
_strnicoll
strcat
_strncoll
strcpy
strlen
strcmp
strstr
ceil
strpbrk
rand
strtod
ldexp
strrchr
strtoul
strtol
calloc
strtok
strspn
strxfrm
memchr
_expand
_msize
floor
memmove
clearerr
memcmp
realloc
memset
fabs
memcpy
_strdup
_stricmp
_strlwr
_strnicmp
putc
fmod
sqrt
cos
_strnset
_strrev
log10
srand
_ftol
_CIpow
strncpy
_vsnprintf
free
fread
fclose
malloc
rewind
ftell
fseek
fopen
ungetc
tmpnam
tmpfile
sscanf
sprintf
_snprintf
pow
fgetc
exp
log
fwrite
fsetpos
fscanf
freopen
fputs
fputc
fprintf
fgets
fgetpos
cosh
fflush
ferror
feof
tanh
sinh
atan2
atan
asin
acos
tan
sin

Exports

Exports

ENTRYPOINT

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b069b3294f8b7b994665d6ae1596d3d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

shell32

winmm

msvcrt

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 512B - Virtual size: 170B

.data Size: 10KB - Virtual size: 64KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 67KB - Virtual size: 67KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 512B - Virtual size: 170B

.data
Size: 10KB - Virtual size: 64KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 67KB - Virtual size: 67KB

.reloc
Size: 7KB - Virtual size: 7KB