b31d043a40765409dd67c34da84c498030603b2131cc7cc075049f014dc5680b

Sharing

Copy URL Twitter E-mail

General

Target

b31d043a40765409dd67c34da84c498030603b2131cc7cc075049f014dc5680b
Size

510KB
MD5

282d8f2205cf0813a779ba3e39574402
SHA1

3a90e1925c7915c31b08c087e3a5ac81259a2023
SHA256

b31d043a40765409dd67c34da84c498030603b2131cc7cc075049f014dc5680b
SHA512

3f238aeb0e68d62679ba1af1802d56fd3920b9286da27ec3e0061a5f67c79d10c53592e76bc67985bb55395e51610cccfc52d87b03e9dbd782b1dfa7fda0d478
SSDEEP

6144:PxnqckUltosY1Ejn1yZXm7oyEf/Cwly7eGBtbf3GJxquKURiWGrMZseIUso6nll:PUUl2xuB77oyEBCv3u0UYWGrxoSll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b31d043a40765409dd67c34da84c498030603b2131cc7cc075049f014dc5680b

Files

b31d043a40765409dd67c34da84c498030603b2131cc7cc075049f014dc5680b
.dll windows:6 windows x86 arch:x86

e658411091bfd762b5b17af652f50557

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

jsdbgui.pdb

Imports

kernel32

OpenEventW
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
LoadLibraryA
VirtualFree
VirtualAlloc
GetCommandLineA
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WaitForSingleObject
WriteFile
OutputDebugStringA
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CreateFileA
FlushFileBuffers
CreateActCtxW
SearchPathW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
CreateFileW
CreateFileMappingW
MapViewOfFile
ActivateActCtx
DeactivateActCtx
InterlockedCompareExchange
EnumUILanguagesW
CloseHandle
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpW
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
LocalFree
FormatMessageW
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetProcAddress
MulDiv
FindResourceExW
LockResource
SetLastError
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
GetModuleHandleW
ReleaseActCtx
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedExchange
GetVersionExW
GetModuleFileNameW

user32

MessageBoxW
SetForegroundWindow
IsIconic
GetForegroundWindow
SetRect
InsertMenuW
LoadStringW
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
UnregisterClassA
IsChild
GetCaretPos
GetClassInfoExW
RemoveMenu
SetScrollInfo
DeleteMenu
GetCapture
SetCursor
GetWindowDC
SystemParametersInfoW
DrawEdge
ReleaseCapture
SetCapture
UpdateWindow
CreateDialogParamW
SetRectEmpty
CreatePopupMenu
LoadCursorW
DrawTextW
RegisterClassExW
SetDlgItemTextW
GetMenuItemCount
GetKeyState
GetDesktopWindow
GetScrollPos
GetUpdateRect
IsWindowVisible
PtInRect
BeginPaint
GetSysColor
FillRect
EndPaint
ClientToScreen
GetWindowRect
SetWindowPos
GetDC
ReleaseDC
GetSystemMetrics
LoadAcceleratorsW
GetParent
EnableWindow
GetFocus
TranslateAcceleratorW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
EndDialog
ShowWindow
LoadMenuW
EnableMenuItem
GetSubMenu
TrackPopupMenuEx
DestroyMenu
CheckMenuItem
GetActiveWindow
DialogBoxParamW
PostMessageW
GetMessagePos
DefWindowProcW
GetWindowLongW
CallWindowProcW
GetDlgItem
IsWindow
GetSysColorBrush
GetScrollInfo
AppendMenuW
SetScrollPos
SetFocus
InvalidateRect
ScreenToClient
GetClientRect
MoveWindow
SetWindowLongW
CreateWindowExW
KillTimer
DestroyWindow
SetTimer
SendMessageW
CharNextW
LoadImageW
DestroyAcceleratorTable

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
ReleaseStgMedium
OleDuplicateData
OleCreateStaticFromData
OleSetContainedObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoInitialize
CoUninitialize
CoTaskMemAlloc

oleaut32

VariantChangeType
VariantChangeTypeEx
SysAllocStringLen
SysStringLen
SysAllocString
VariantCopy
VariantClear
VariantInit
SafeArrayDestroy
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VarUI4FromStr
SysFreeString

oleacc

CreateStdAccessibleObject
LresultFromObject

advapi32

RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW

gdi32

GetTextMetricsW
GetTextExtentPoint32W
SelectObject
DeleteDC
BitBlt
DeleteObject
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
PatBlt
CreatePatternBrush
CreateBitmap
GetObjectW
StretchBlt
SetBrushOrgEx
SetStretchBltMode
ExtTextOutW
SetBkColor
GetDeviceCaps
MoveToEx
LineTo
TextOutW
SetTextColor
ExtCreatePen
GetTextExtentPointW
SetBkMode
CreateFontIndirectW

msimg32

TransparentBlt

urlmon

ord423
CreateUri

shlwapi

ord219
ord437

iertutil

ord70
ord65
ord64
ord68
ord61
ord71
ord650

Exports

Exports

CreateScriptTab

Sections

.text
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e658411091bfd762b5b17af652f50557

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

oleaut32

oleacc

advapi32

gdi32

msimg32

urlmon

shlwapi

iertutil

Exports

Exports

Sections

.text Size: 366KB - Virtual size: 366KB

.data Size: 7KB - Virtual size: 14KB

.rsrc Size: 107KB - Virtual size: 107KB

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 366KB - Virtual size: 366KB

.data
Size: 7KB - Virtual size: 14KB

.rsrc
Size: 107KB - Virtual size: 107KB

.reloc
Size: 28KB - Virtual size: 27KB