bd00676319be6e4dccf9fd479f80eb16738a0ee54eff239b68c71db13bc612c8

Sharing

Copy URL

Twitter E-mail

General

Target

bd00676319be6e4dccf9fd479f80eb16738a0ee54eff239b68c71db13bc612c8
Size

28KB
MD5

3919590bab11f8cce260dabe72cdad36
SHA1

a363c292fd54c65c4ef6d077de1e86540d0e7e13
SHA256

bd00676319be6e4dccf9fd479f80eb16738a0ee54eff239b68c71db13bc612c8
SHA512

86713d7e840e620f7993fdf30d400a2c5c4650dd0c6763e4b7d30d6fcd713c00ddab9c41cfa87a19f8f9f6524674c1227aefb9e17eb482fe88018855f117b756
SSDEEP

768:63H8euqT1WTMUKTvzeEdueFB/26yd4d2ANFmYgxsdNswU:63H8ePTf70eFB/yd4d2OksdNswU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd00676319be6e4dccf9fd479f80eb16738a0ee54eff239b68c71db13bc612c8

Files

bd00676319be6e4dccf9fd479f80eb16738a0ee54eff239b68c71db13bc612c8
.dll windows:6 windows x86 arch:x86

fee08043765aed5768f071e8157fc563

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveFileSpecA
PathFileExistsA
PathFileExistsW
PathAppendA

gdiplus

GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipGetImageEncoders
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage

shell32

SHGetFolderPathA
CommandLineToArgvW

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
GetProcAddress
GetCommandLineW
LocalFree
GetStdHandle
AllocConsole
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
LoadLibraryA
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcess
InitializeSListHead

user32

GetDC
GetAsyncKeyState

gdi32

SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
GetDeviceCaps
BitBlt
AddFontResourceExA

comdlg32

GetOpenFileNameA

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?sync_with_stdio@ios_base@std@@SA_N_N@Z

vcruntime140

_CxxThrowException
memmove
memcpy
__std_exception_destroy
memset
__std_exception_copy
__std_type_info_destroy_list
__CxxFrameHandler3
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_initterm_e
_crt_atexit
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

_strdup
strcpy_s
_wcsdup

api-ms-win-crt-time-l1-1-0

_time64
_localtime64
strftime

api-ms-win-crt-stdio-l1-1-0

puts
setvbuf
_open_osfhandle
__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-filesystem-l1-1-0

_access
_mkdir

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-math-l1-1-0

_fdopen

Exports

Exports

flplusplus_add_latehook

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fee08043765aed5768f071e8157fc563

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

gdiplus

shell32

kernel32

user32

gdi32

comdlg32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB