12a07b747c492a93c30ce249ad3610839d66da0a31895ed91aefced0382af2f7

Sharing

Copy URL Twitter E-mail

General

Target

12a07b747c492a93c30ce249ad3610839d66da0a31895ed91aefced0382af2f7
Size

268KB
MD5

3517efe197a0c91a68ac515d0e8bb77b
SHA1

ca6baee582452641b2e8150388c46cb7c674da74
SHA256

12a07b747c492a93c30ce249ad3610839d66da0a31895ed91aefced0382af2f7
SHA512

1a68478eebfc613643b4334a2be82bc62268aa9d061b467e153e97ac551606e2f7e2d6ba785d55169dfac4d50dbbaacfb2d53cceec5c3fe629540d08a73b452c
SSDEEP

3072:UX8l5OUIG3FhSo3bu1KBP/0ujtx6JooBiwzox/yL064S4:UX8jFIG3KoL7Pw7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12a07b747c492a93c30ce249ad3610839d66da0a31895ed91aefced0382af2f7

Files

12a07b747c492a93c30ce249ad3610839d66da0a31895ed91aefced0382af2f7
.dll regsvr32 windows:4 windows x86 arch:x86

67decf37bbd313517a78aadc1ede18a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesA
RtlUnwind
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCommandLineA
GetFullPathNameA
HeapFree
ExitProcess
TerminateProcess
HeapSize
HeapReAlloc
GetACP
GetDriveTypeA
SetHandleCount
HeapAlloc
RaiseException
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetEndOfFile
GetCurrentThreadId
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GlobalLock
GlobalUnlock
GetModuleFileNameA
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
FreeLibrary
GetProcessVersion
LoadLibraryA
GlobalFindAtomA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFlags
GetModuleHandleA
GetProcAddress
MulDiv
SetErrorMode
GetVersion
lstrcatA
TlsSetValue
TlsGetValue
LocalReAlloc
LeaveCriticalSection
EnterCriticalSection
GlobalReAlloc
DeleteCriticalSection
TlsFree
GlobalHandle
LocalAlloc
TlsAlloc
InitializeCriticalSection
GlobalDeleteAtom
CloseHandle
GlobalAlloc
GetCurrentThread
lstrcmpA
lstrcmpiA
GetEnvironmentStringsW
GlobalFree
LockResource
GetCurrentDirectoryA
FindResourceA
LoadResource
lstrcpynA
lstrcpyA
GetLastError
SetLastError
HeapDestroy
HeapCreate
GetStdHandle
GetFileType
GetStartupInfoA

user32

GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
GetMenu
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SystemParametersInfoA
IsIconic
GetWindowPlacement
RegisterWindowMessageA
wsprintfA
SetWindowTextA
ClientToScreen
GetWindow
GetWindowRect
PtInRect
GetClassNameA
LoadStringA
SendDlgItemMessageA
IsDialogMessageA
LoadCursorA
GetSysColorBrush
UnregisterClassA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
SetCursor
PostMessageA
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetFocus
IsWindow
SetFocus
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
GetWindowTextA
ShowWindow
GetMenuItemID
GetMenuItemCount
LoadIconA
MessageBoxA
SendMessageA
UpdateWindow
AdjustWindowRectEx
MapWindowPoints
GetSysColor
CopyRect
GetClientRect
GetTopWindow
GetClassInfoA
GetCapture
WinHelpA
GetSubMenu
RegisterClassA
GetDlgCtrlID
SetWindowPos

gdi32

GetDeviceCaps
GetClipBox
SetTextColor
SetBkColor
GetObjectA
SelectObject
GetStockObject
SaveDC
DeleteDC
RestoreDC
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
CreateBitmap
DeleteObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

comctl32

ord17

ole32

CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID

oleaut32

SysFreeString
VariantChangeType
SysAllocString
VariantClear
SysStringLen

Exports

Exports

??0CZyxMarkMsoWord@@QAE@XZ
??1CZyxMarkMsoWord@@QAE@XZ
?GetVersion@CZyxMarkMsoWord@@QAEKXZ
?Mark@CZyxMarkMsoWord@@QAENPBD0PAVCProgressCtrl@@@Z
?Test@CZyxMarkMsoWord@@QAEXXZ
?TryMark@CZyxMarkMsoWord@@IAEXPBD0@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67decf37bbd313517a78aadc1ede18a2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 52KB - Virtual size: 65KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 44KB - Virtual size: 40KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 52KB - Virtual size: 65KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 44KB - Virtual size: 40KB