648173de35fb44f2f2aae8a1b145f6cc32907fb58852cd7ed41144fd9697cc8a

Sharing

Copy URL Twitter E-mail

General

Target

648173de35fb44f2f2aae8a1b145f6cc32907fb58852cd7ed41144fd9697cc8a
Size

40KB
MD5

288e41187e5d85536dcd70a3f5d0a971
SHA1

0b109d6489b334f1650e4d3b211d76278bcabcc0
SHA256

648173de35fb44f2f2aae8a1b145f6cc32907fb58852cd7ed41144fd9697cc8a
SHA512

1d938a09bd5d3f936649640011069c3cfb864f8f03ada54f9cb4563b39f62971664a3b8398899720d8beadc4297e27f8c8eb30f04d31d26de3b690e13a133098
SSDEEP

384:xMurt6eW33cmwG4ZccGAbrVcQEDUWZoW:2urQF3slG4PGASr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
648173de35fb44f2f2aae8a1b145f6cc32907fb58852cd7ed41144fd9697cc8a

Files

648173de35fb44f2f2aae8a1b145f6cc32907fb58852cd7ed41144fd9697cc8a
.dll windows:6 windows x86 arch:x86

b18fcb6327eb8eb41b606bbbc1e2b10a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

floor
memset
LdrFindResourceEx_U
LdrAccessResource
memcpy

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-1-0

DisableThreadLibraryCalls

api-ms-win-core-localization-l1-1-0

GetUserDefaultLCID
GetACP
GetLocaleInfoW
NlsGetCacheUpdateCount

api-ms-win-core-misc-l1-1-0

GlobalAlloc
GlobalFree
LocalFree
LocalAlloc

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GetCurrentThreadId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

gdi32

GetViewportOrgEx
GetWindowOrgEx
GetMapMode
AnyLinkedFonts
GetTextCharacterExtra
SetMapMode
TranslateCharsetInfo
ExtTextOutW
GetBkMode
DeleteDC
DeleteObject
CreateCompatibleBitmap
GetGlyphIndicesW
GetCharABCWidthsW
SelectObject
CreateFontW
SetTextColor
SetBkColor
GetBkColor
CreateCompatibleDC
GdiRealizationInfo
GdiIsPlayMetafileDC
GetObjectType
SetWindowOrgEx
GetLayout
GetTextAlign
GetTextExtentExPointWPri
GdiSetLastError
SetTextAlign
GetWindowExtEx
GetViewportExtEx
SetViewportExtEx
SetWindowExtEx
CreateFontIndirectW
GetObjectW
GetCurrentObject
SetViewportOrgEx

user32

SendMessageW
SetProcessDefaultLayout
GetKeyboardLayout
CreateCaret
EnableMenuItem
CheckMenuItem
GetClientRect
GetKeyboardLayoutList
SetWindowLongW
GetWindowLongW
MessageBeep
SendMessageA
InvalidateRect
InflateRect
GetSystemMetrics

usp10

ScriptStringAnalyse
ScriptRecordDigitSubstitution
ScriptStringGetOrder
ScriptGetFontProperties
UspFreeMem
ScriptApplyDigitSubstitution
ScriptStringFree
ScriptStringCPtoX
ScriptStringOut
ScriptStringXtoCP
LpkPresent
ScriptGetProperties
ScriptIsComplex
ScriptStringGetLogicalWidths
UspAllocTemp
UspAllocCache

Exports

Exports

LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b18fcb6327eb8eb41b606bbbc1e2b10a

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-localization-l1-1-0

api-ms-win-core-misc-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

gdi32

user32

usp10

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 24KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB