a8431d501b9b0bd77612c21a664442ab0adb1c4e3270447034859b9d32b424ca

Sharing

Copy URL Twitter E-mail

General

Target

a8431d501b9b0bd77612c21a664442ab0adb1c4e3270447034859b9d32b424ca
Size

1.7MB
MD5

4d25d2563e008d9a8e1eb74e0444c1d1
SHA1

53bca3b5013c3c082163d7bf5f3fa3e852057ee4
SHA256

a8431d501b9b0bd77612c21a664442ab0adb1c4e3270447034859b9d32b424ca
SHA512

b3acff838277630b868dc4047166b6b4871902b0c36e96aa7cd937f0aa1761a671b4f474908ddacb13890bd06e50f69b90a45c1365df76115472d8091a42f0b0
SSDEEP

24576:/5EtSmeh1V3y3brqanymTBBXeo5BiNaVWPzvMOWX3OP6LZX7OIPS5y6dN:/5Xmqy3brdVVBoa8PzvMOWuyLphPiyON

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8431d501b9b0bd77612c21a664442ab0adb1c4e3270447034859b9d32b424ca

Files

a8431d501b9b0bd77612c21a664442ab0adb1c4e3270447034859b9d32b424ca
.dll windows:4 windows x86 arch:x86

4c1227b27e2056b9bfdb2a8f25b5cc9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
??3@YAXPAX@Z
_getcwd
_fullpath
_chdir
getenv
sscanf
_errno
_unlink
_open
_utime
_chmod
_stat
_chsize
_filelength
_commit
_write
_lseek
_read
_close
_sopen
_mktemp
__CxxFrameHandler
sprintf
_fpreset
longjmp
_setjmp3
fclose
rename
_rmdir
remove
fopen
setbuf
_access
_mkdir
_findnext
_findclose
_findfirst
_getdiskfree
localtime
time
qsort
strncpy
tolower
_fcvt
_ecvt
strtod
atof
_CIatan2
_CIatan
_CItan
_CIsin
_CIcos
_CIexp
_CIlog
_CIpow
_CIsqrt
modf
_ltoa
atol
atoi
strpbrk
strtok
_strnicmp
_stricmp
strncmp
strchr
__mb_cur_max
_isctype
_pctype
free
_initterm
malloc
_adjust_fdiv
strrchr
toupper
memmove
_ftol
??1type_info@@UAE@XZ

kernel32

LoadResource
GlobalAlloc
GlobalFree
GlobalMemoryStatus
GetVersionExA
GetSystemInfo
VirtualQuery
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetProfileIntA
IsDBCSLeadByte
lstrcmpA
lstrcmpiA
GetLocaleInfoA
GetUserDefaultLCID
SetLocaleInfoA
GetProfileStringA
GetSystemDefaultLangID
WinExec
FindResourceA
FreeResource
SizeofResource
LockResource
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GlobalUnlock
GlobalSize
GlobalLock
GetPrivateProfileIntA
GetCurrentProcessId
lstrcpynA
CloseHandle
ReleaseSemaphore
WaitForSingleObject
CreateThread
CreateSemaphoreA
ExitThread
InitializeCriticalSection
DeleteCriticalSection
GetVersion
GetModuleHandleA
lstrcpyA
GetTempPathA
GetLastError
GetDiskFreeSpaceA
GlobalHandle
FindNextFileA
FindClose
FindFirstFileA
OpenFile
_lclose
_hwrite
_hread

user32

EnableMenuItem
ExitWindowsEx
CheckMenuItem
GetSystemMetrics
GetCursorPos
CreateCursor
GetMenuStringA
GetMenuItemID
ShowCursor
LoadCursorA
SetCursor
DestroyCursor
CharUpperBuffA
CharLowerBuffA
SetScrollPos
SetScrollRange
ShowScrollBar
wvsprintfA
PostThreadMessageA
PostQuitMessage
SetWindowPos
KillTimer
SetTimer
SetFocus
PostMessageA
GetFocus
MapVirtualKeyA
GetUpdateRect
GetKeyState
GetMessageTime
ScreenToClient
GetMessagePos
DefWindowProcA
GetWindowLongA
GetWindowRect
InvalidateRect
EndPaint
FillRect
ReleaseDC
GetDC
BeginPaint
GetTopWindow
IsWindow
RegisterClassA
DestroyWindow
UnregisterClassA
SetWindowLongA
ModifyMenuA
GetSystemMenu
CreateWindowExA
GetParent
SetActiveWindow
GetWindowThreadProcessId
GetClassNameA
GetWindow
GetClassInfoA
ShowWindow
IsWindowVisible
UpdateWindow
ValidateRect
GetWindowTextA
SetWindowTextA
MoveWindow
GetMenu
ClientToScreen
GetClientRect
SetRect
SetParent
SetCapture
ReleaseCapture
SetWindowRgn
SendMessageA
CreateIconIndirect
IsIconic
IsZoomed
GetWindowPlacement
FlashWindowEx
GetActiveWindow
CharUpperA
IntersectRect
WindowFromDC
MapWindowPoints
SystemParametersInfoA
SetSysColors
GetForegroundWindow
GetSysColor
PeekMessageA
wsprintfA
ChangeDisplaySettingsA
LoadStringA
InvertRect
GetWindowDC
MessageBoxA
MessageBeep
OpenClipboard
CloseClipboard
GetClipboardData
GetClipboardFormatNameA
EnumClipboardFormats
SetClipboardData
RegisterClipboardFormatA
EmptyClipboard
GetAsyncKeyState
GetKeyboardState
CreateMenu
SetMenu
DestroyMenu
DeleteMenu
AppendMenuA
CreatePopupMenu
GetSubMenu
GetMenuItemCount
GetMenuState

gdi32

StretchBlt
StartPage
StartDocA
EndDoc
SetBkMode
GetClipRgn
CreateDIBPatternBrushPt
Ellipse
RoundRect
Rectangle
CreateDCA
CreateFontA
GetTextFaceA
CreateFontIndirectA
EnumFontFamiliesA
CreateICA
GetTextMetricsA
GetTextExtentPoint32A
CreatePen
MoveToEx
LineTo
ExtTextOutA
GdiFlush
CombineRgn
SetDIBitsToDevice
AnimatePalette
GetSystemPaletteUse
SetSystemPaletteUse
UnrealizeObject
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
CreatePatternBrush
RealizePalette
GetObjectA
CreateCompatibleDC
CreateDIBSection
SetStretchBltMode
SetTextAlign
SetMapMode
EndPage
CreateRectRgn
SelectClipRgn
StretchDIBits
SelectObject
BitBlt
IntersectClipRect
GetClipBox
RestoreDC
SaveDC
GetViewportExtEx
SetDIBColorTable
DeleteDC
CreateDIBitmap
GetPaletteEntries
SetPaletteEntries
GetStockObject
GetSystemPaletteEntries
CreatePalette
GetCurrentObject
SelectPalette
CreateSolidBrush
DeleteObject
PtInRegion

comdlg32

GetOpenFileNameA
CommDlgExtendedError

winmm

timeGetTime
timeEndPeriod
mciSendCommandA
timeBeginPeriod
DefDriverProc
timeGetDevCaps

ole32

CoInitialize
CoUninitialize
CoCreateInstance

shell32

Shell_NotifyIconA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

imm32

ImmNotifyIME
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringA

Exports

Exports

imIMEGetActiveCompositionWindow
imIMEGetCandidateWindowActive
imIMEGetCompositionActive
imIMEGetCompositionJustFixed
imIMEGetLastSelectionLeft
imIMEServiceAvailable
imIMEServiceFixActiveInput
imIMEServicePushActivatedContext
imIMESetActiveCompositionWindow
imIMESetCandidateWindowActive
imIMESetCandidateWindowPos
imIMESetCompositionActive
imIMESetCompositionJustFixed
imIMESetEnabled
imIMESetLastSelectionLeft
imIMEUnpackSelection
imIMEUnpackText
imIMEUseInputWindow

Sections

.text
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c1227b27e2056b9bfdb2a8f25b5cc9d

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

winmm

ole32

shell32

advapi32

imm32

Exports

Exports

Sections

.text Size: 456KB - Virtual size: 453KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 76KB

.rsrc Size: 32KB - Virtual size: 28KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 456KB - Virtual size: 453KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 76KB

.rsrc
Size: 32KB - Virtual size: 28KB

.reloc
Size: 20KB - Virtual size: 19KB