4d60967bed933ed257694fced2345fd7fba75cd9b18ecf45e0d2bd9b0361896c

Sharing

Copy URL Twitter E-mail

General

Target

4d60967bed933ed257694fced2345fd7fba75cd9b18ecf45e0d2bd9b0361896c
Size

8.4MB
MD5

8269c408d1aae6909012d5e0f579908e
SHA1

41e73c8875a37c7d886f157d34e4c73379a1aee2
SHA256

4d60967bed933ed257694fced2345fd7fba75cd9b18ecf45e0d2bd9b0361896c
SHA512

a2ee55ac357d53788e6f3eb4333dac76d311da7953ab655637695e17051c6c54d93b069caead5d191562dc951988c308b5126d3a2eded25f26d3a54bd36b2a69
SSDEEP

98304:e7V+6ysqzMoTvubceUq4qALVTsjxJrLik6+FYR1v8VLf8NxtFI1U1jxHekBNXT:ecvubcB/TsjXKp+FYR1setFI1U1jxHfv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d60967bed933ed257694fced2345fd7fba75cd9b18ecf45e0d2bd9b0361896c

Files

4d60967bed933ed257694fced2345fd7fba75cd9b18ecf45e0d2bd9b0361896c
.dll regsvr32 windows:5 windows x86 arch:x86

71f817f8f8ec75279863c624b9e9ae8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\NoBurner\DebugBurner\STTool\Output\release\STLibrary.pdb

Imports

shlwapi

StrToInt64ExA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathIsDirectoryA
StrToIntExA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

netapi32

NetApiBufferFree
NetWkstaGetInfo

kernel32

GetFileType
SetStdHandle
ExitProcess
RaiseException
RtlUnwind
GetCommandLineA
HeapValidate
HeapReAlloc
SetEnvironmentVariableA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
GlobalFlags
GlobalFindAtomA
lstrcmpW
GlobalGetAtomNameA
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetFileSizeEx
GetFileAttributesA
GetFullPathNameA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
GlobalAddAtomA
GlobalDeleteAtom
GetLocaleInfoA
InterlockedExchange
GetModuleFileNameW
GetModuleHandleW
CompareStringA
FormatMessageA
LocalFree
GetCurrentProcessId
FileTimeToLocalFileTime
lstrlenA
GetVersionExA
GetDriveTypeA
GetVolumeInformationA
SetLastError
GetTickCount
FlushFileBuffers
SetFilePointer
CreateEventA
FileTimeToSystemTime
GetFileTime
CreateFileW
CreateDirectoryA
GetVersion
DeleteCriticalSection
CreateSemaphoreA
InitializeCriticalSection
GetWindowsDirectoryA
InterlockedCompareExchange
CompareStringW
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
CreateFileA
FindResourceA
lstrcmpA
MapViewOfFile
LoadResource
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
SetEvent
GetLogicalDrives
GetPrivateProfileIntA
WideCharToMultiByte
Sleep
SizeofResource
LeaveCriticalSection
ReadFile
FindFirstFileA
GetLastError
CopyFileA
EnterCriticalSection
GetPrivateProfileStringA
ResetEvent
CreateFileMappingA
LocalAlloc
WritePrivateProfileStringA
LockResource
GetCurrentDirectoryA
OutputDebugStringA
DeleteFileA
FreeLibrary
OutputDebugStringW
WriteFile
MultiByteToWideChar
ReleaseSemaphore
HeapSize
GetTimeZoneInformation
GetACP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapCreate
HeapDestroy
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetProcessHeap
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetModuleFileNameA
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalFree
GlobalUnlock
GlobalAlloc
GlobalLock
GetFileSize
VirtualAlloc
VirtualFree
FindNextFileA
FindClose
TerminateProcess
CreateProcessA
MoveFileA
lstrcatA
GetTempPathA
CloseHandle
WinExec
ReleaseMutex
GetCurrentThreadId
CreateMutexA
GetModuleHandleA
DeviceIoControl
SetCurrentDirectoryA
LoadLibraryA
GetProcAddress

ws2_32

WSACleanup
WSAStartup
send
closesocket
socket
recv
htons
htonl
inet_addr
connect

bch_sdk

BCH_1023_278_Encode
BCH_1023_278_Decode

user32

GetSubMenu
GetMenuItemCount
GetMenuItemID
GetWindowThreadProcessId
DestroyMenu
SetWindowTextA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
TranslateMessage
PeekMessageA
DispatchMessageA
MessageBoxA
wsprintfW
FindWindowA
SendMessageA
PostMessageA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
LoadCursorA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
UnregisterClassA
CharUpperA
GetSystemMetrics
SetWindowsHookExA
CallNextHookEx
GetKeyState
ValidateRect
UnhookWindowsHookEx
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState

gdi32

GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
RectVisible
SelectObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA

shell32

SHCreateDirectoryExA
ShellExecuteExA

ole32

StringFromGUID2

oleaut32

SysAllocStringByteLen
SysFreeString
VariantClear
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysAllocString
VariantInit
VariantChangeType

setupapi

SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
CM_Get_Parent
CM_Get_Child
CM_Get_Device_IDA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Sibling

rpcrt4

UuidCreateSequential

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
MPQCRun
MPRun
MPRunLog
STCheckFlashRR
STForceEnd
STFreeBase
STGetIB
STISPRun
STInitLoadISP
STMPLoadFreeCsv
STQCRun
STRun

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71f817f8f8ec75279863c624b9e9ae8d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

version

netapi32

kernel32

ws2_32

bch_sdk

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

ole32

oleaut32

setupapi

rpcrt4

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 3.6MB - Virtual size: 3.6MB

.data Size: 67KB - Virtual size: 1.2MB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 112KB - Virtual size: 112KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 3.6MB - Virtual size: 3.6MB

.data
Size: 67KB - Virtual size: 1.2MB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 112KB - Virtual size: 112KB