aebc8658d3b2aedafab000294ad49f86473a02fcb4938c722d42ab95a6c12547

Sharing

Copy URL

Twitter E-mail

General

Target

aebc8658d3b2aedafab000294ad49f86473a02fcb4938c722d42ab95a6c12547
Size

218KB
MD5

c43d9ce155273c402a91e82c71b7e53a
SHA1

984cdac4942e43c297b804b549499135f02f1ae0
SHA256

aebc8658d3b2aedafab000294ad49f86473a02fcb4938c722d42ab95a6c12547
SHA512

3b0995485b47c5199657b8a26c70268a55d34660dea95764158927545a0a01a63052210c4d9b1b555befade1b66b9052b0dfe21c79591616c1038ff98bf02be5
SSDEEP

3072:T+GPUTsjpMlXeZe/mD2fkJrET7U1vF8YgNzrbuncskUjSf8DyvOPPXXWOltCBuEc:TJFtCBtKBxmE7MA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aebc8658d3b2aedafab000294ad49f86473a02fcb4938c722d42ab95a6c12547

Files

aebc8658d3b2aedafab000294ad49f86473a02fcb4938c722d42ab95a6c12547
.dll windows:4 windows x86 arch:x86

7748b9366714c0fab1587e360e064fa5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW

comctl32

InitCommonControlsEx
PropertySheetW

dinput8

DirectInput8Create

kernel32

ActivateActCtx
CloseHandle
CreateActCtxW
CreateThread
DeactivateActCtx
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
ReleaseActCtx
Sleep

ntdll

_vsnprintf

ole32

OleInitialize
OleUninitialize

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
malloc
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcscmp
wcslen
wcsstr

user32

CreateWindowExW
EnableWindow
GetAncestor
GetDlgItem
GetWindowLongW
MapDialogRect
MsgWaitForMultipleObjects
SendDlgItemMessageW
SendMessageW
SetWindowPos
SetWindowTextW
ShowWindow

Exports

Exports

CPlApplet

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 388B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7748b9366714c0fab1587e360e064fa5

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comctl32

dinput8

kernel32

ntdll

ole32

ucrtbase

user32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 80B

.rodata Size: 4KB - Virtual size: 12B

.rdata Size: 16KB - Virtual size: 13KB

.eh_fram Size: 4KB - Virtual size: 2KB

.bss Size: - Virtual size: 388B

.edata Size: 12KB - Virtual size: 10KB

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 116KB - Virtual size: 113KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 80B

.rodata
Size: 4KB - Virtual size: 12B

.rdata
Size: 16KB - Virtual size: 13KB

.eh_fram
Size: 4KB - Virtual size: 2KB

.bss
Size: - Virtual size: 388B

.edata
Size: 12KB - Virtual size: 10KB

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 116KB - Virtual size: 113KB

.reloc
Size: 4KB - Virtual size: 1KB