b9cfc68a09cad1c4da1b753ef02dc7c7b99246e1b7ce4875b1185c1a91704c82

Sharing

Copy URL Twitter E-mail

General

Target

b9cfc68a09cad1c4da1b753ef02dc7c7b99246e1b7ce4875b1185c1a91704c82
Size

2.1MB
MD5

177d8224c35d98cd95916d53a69b627a
SHA1

f9af4a8609c7a74d5f06974fc81629ed97457051
SHA256

b9cfc68a09cad1c4da1b753ef02dc7c7b99246e1b7ce4875b1185c1a91704c82
SHA512

ea293976d23694198d42ed8fb789bd0970439e1c000751c3becec32db0fff3c47a51a9362aa8571027d186cca8cb7b87bcdf104833e50ac36ef6ece8b66c3406
SSDEEP

49152:AWkhvxUIiW2YMVBseuVh1WfWiZJaz4b+OpBTlr:AFmBkXh4b+OpFlr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9cfc68a09cad1c4da1b753ef02dc7c7b99246e1b7ce4875b1185c1a91704c82

Files

b9cfc68a09cad1c4da1b753ef02dc7c7b99246e1b7ce4875b1185c1a91704c82
.dll windows:4 windows x86 arch:x86

64bc462a5a0a515b3149b69ea3329e93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_except_handler3
??3@YAXPAX@Z
_getcwd
_fullpath
_chdir
getenv
sscanf
_errno
_unlink
_open
_utime
_chmod
_stat
_chsize
_filelength
_commit
_write
_lseek
_read
_close
_sopen
_mktemp
__CxxFrameHandler
sprintf
_fpreset
longjmp
_setjmp3
fclose
rename
_rmdir
remove
fopen
setbuf
_access
_mkdir
_findnext
_findclose
_findfirst
_getdiskfree
localtime
time
qsort
strncpy
tolower
_fcvt
_ecvt
strtod
atof
_CIatan2
_CIatan
_CItan
_CIsin
_CIcos
_CIexp
_CIlog
_CIpow
_CIsqrt
modf
_ltoa
atol
atoi
strpbrk
strtok
_strnicmp
_stricmp
strncmp
strchr
__mb_cur_max
_isctype
_pctype
free
_initterm
malloc
_adjust_fdiv
strrchr
toupper
memmove
_ftol
??1type_info@@UAE@XZ

kernel32

LoadResource
GlobalAlloc
GlobalFree
GlobalMemoryStatus
GetVersionExA
GetSystemInfo
VirtualQuery
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetProfileIntA
IsDBCSLeadByte
lstrcmpA
lstrcmpiA
GetLocaleInfoA
GetUserDefaultLCID
SetLocaleInfoA
GetProfileStringA
GetSystemDefaultLangID
WinExec
FindResourceA
FreeResource
SizeofResource
LockResource
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GlobalUnlock
GlobalSize
GlobalLock
GetPrivateProfileIntA
GetCurrentProcessId
lstrcpynA
CloseHandle
ReleaseSemaphore
WaitForSingleObject
CreateThread
CreateSemaphoreA
ExitThread
InitializeCriticalSection
DeleteCriticalSection
GetVersion
GetModuleHandleA
lstrcpyA
GetTempPathA
GetLastError
GetDiskFreeSpaceA
GlobalHandle
FindNextFileA
FindClose
FindFirstFileA
OpenFile
_lclose
_hwrite
_hread

user32

EnableMenuItem
ExitWindowsEx
CheckMenuItem
GetSystemMetrics
GetCursorPos
CreateCursor
GetMenuStringA
GetMenuItemID
ShowCursor
LoadCursorA
SetCursor
DestroyCursor
CharUpperBuffA
CharLowerBuffA
SetScrollPos
SetScrollRange
ShowScrollBar
wvsprintfA
PostThreadMessageA
PostQuitMessage
SetWindowPos
KillTimer
SetTimer
SetFocus
PostMessageA
GetFocus
MapVirtualKeyA
GetUpdateRect
GetKeyState
GetMessageTime
ScreenToClient
GetMessagePos
DefWindowProcA
GetWindowLongA
GetWindowRect
InvalidateRect
EndPaint
FillRect
ReleaseDC
GetDC
BeginPaint
IsWindow
GetTopWindow
RegisterClassA
DestroyWindow
UnregisterClassA
SetWindowLongA
MoveWindow
ModifyMenuA
GetSystemMenu
CreateWindowExA
GetParent
SetActiveWindow
GetWindowThreadProcessId
GetClassNameA
GetWindow
GetClassInfoA
ShowWindow
IsWindowVisible
UpdateWindow
ValidateRect
GetWindowTextA
SetWindowTextA
GetMenu
ClientToScreen
GetClientRect
SetRect
SetParent
SetCapture
ReleaseCapture
SetWindowRgn
SendMessageA
CreateIconIndirect
IsIconic
IsZoomed
GetWindowPlacement
FlashWindowEx
GetActiveWindow
CharUpperA
IntersectRect
WindowFromDC
MapWindowPoints
SystemParametersInfoA
SetSysColors
GetForegroundWindow
GetSysColor
PeekMessageA
wsprintfA
ChangeDisplaySettingsA
LoadStringA
InvertRect
GetWindowDC
MessageBoxA
MessageBeep
OpenClipboard
CloseClipboard
GetClipboardData
GetClipboardFormatNameA
EnumClipboardFormats
SetClipboardData
RegisterClipboardFormatA
EmptyClipboard
GetAsyncKeyState
GetKeyboardState
CreateMenu
SetMenu
DestroyMenu
DeleteMenu
AppendMenuA
CreatePopupMenu
GetSubMenu
GetMenuItemCount
GetMenuState

gdi32

StretchBlt
StartPage
StartDocA
EndDoc
SetBkMode
GetClipRgn
CreateDIBPatternBrushPt
Ellipse
RoundRect
Rectangle
CreateDCA
CreateFontA
GetTextFaceA
CreateFontIndirectA
EnumFontFamiliesA
CreateICA
GetTextMetricsA
GetTextExtentPoint32A
CreatePen
MoveToEx
LineTo
ExtTextOutA
GdiFlush
CombineRgn
SetDIBitsToDevice
AnimatePalette
GetSystemPaletteUse
SetSystemPaletteUse
UnrealizeObject
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
CreatePatternBrush
RealizePalette
GetObjectA
CreateCompatibleDC
CreateDIBSection
SetStretchBltMode
SetTextAlign
SetMapMode
EndPage
CreateRectRgn
SelectClipRgn
StretchDIBits
SelectObject
BitBlt
IntersectClipRect
GetClipBox
RestoreDC
SaveDC
GetViewportExtEx
SetDIBColorTable
DeleteDC
CreateDIBitmap
GetPaletteEntries
SetPaletteEntries
GetStockObject
GetSystemPaletteEntries
CreatePalette
GetCurrentObject
SelectPalette
CreateSolidBrush
DeleteObject
PtInRegion

comdlg32

GetOpenFileNameA
CommDlgExtendedError

winmm

timeGetTime
timeEndPeriod
mciSendCommandA
timeBeginPeriod
DefDriverProc
timeGetDevCaps

ole32

CoInitialize
CoUninitialize
CoCreateInstance

shell32

Shell_NotifyIconA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

imm32

ImmNotifyIME
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringA

Exports

Exports

imIMEGetActiveCompositionWindow
imIMEGetCandidateWindowActive
imIMEGetCompositionActive
imIMEGetCompositionJustFixed
imIMEGetLastSelectionLeft
imIMEServiceAvailable
imIMEServiceFixActiveInput
imIMEServicePushActivatedContext
imIMESetActiveCompositionWindow
imIMESetCandidateWindowActive
imIMESetCandidateWindowPos
imIMESetCompositionActive
imIMESetCompositionJustFixed
imIMESetEnabled
imIMESetLastSelectionLeft
imIMEUnpackSelection
imIMEUnpackText
imIMEUseInputWindow

Sections

.text
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64bc462a5a0a515b3149b69ea3329e93

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

winmm

ole32

shell32

advapi32

imm32

Exports

Exports

Sections

.text Size: 456KB - Virtual size: 453KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 12KB - Virtual size: 76KB

.rsrc Size: 32KB - Virtual size: 28KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 456KB - Virtual size: 453KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 12KB - Virtual size: 76KB

.rsrc
Size: 32KB - Virtual size: 28KB

.reloc
Size: 20KB - Virtual size: 19KB