523930d5d4793ff11f7d06bd4bef42ccd968af600d76120be6a086c764cd6f02

Sharing

Copy URL Twitter E-mail

General

Target

523930d5d4793ff11f7d06bd4bef42ccd968af600d76120be6a086c764cd6f02
Size

23KB
MD5

877bf087daa26f483c8901b7109fb41d
SHA1

df7bb78d7bf5269eb524e7805236b7718186ba04
SHA256

523930d5d4793ff11f7d06bd4bef42ccd968af600d76120be6a086c764cd6f02
SHA512

91f5fca8233a892f03d09c991a2178174ada48cf8550e79d6006a7ee1dad8531796e308c5de818677ad300254b6b623d83949b8fd62aa42a3e436e732c8ad987
SSDEEP

384:i/q2YxS5rtYF3m4g8GMmMbFb/RzFjvC3IGds/utrm+y03u:Cq2YjFW4kf47Z23IGdFy0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
523930d5d4793ff11f7d06bd4bef42ccd968af600d76120be6a086c764cd6f02

Files

523930d5d4793ff11f7d06bd4bef42ccd968af600d76120be6a086c764cd6f02
.dll windows:4 windows x86 arch:x86

1074b90871b2acfbb7542a3db90ad55a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProfileStringA
GetPrivateProfileStringA
WritePrivateProfileStringA
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
MultiByteToWideChar
WriteProfileStringA
lstrlenA
GetWindowsDirectoryA
IsBadWritePtr
IsBadReadPtr
GetComputerNameW
SetLastError
GetSystemTime
GetCurrentThreadId
GetFileAttributesA
GetVersion
GetDiskFreeSpaceA
GetDriveTypeA
GetTempFileNameA
GetTempPathA
lstrcpyA
GetVersionExA
DisableThreadLibraryCalls
GetSystemDirectoryA
GetCurrentProcessId
LoadLibraryW

user32

GetWindowTextLengthA
GetWindowTextA
GetTopWindow
wsprintfA
GetWindow
SetWindowPos
MessageBoxA

gdi32

GetDeviceCaps
DeleteDC
CreateDCA

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyA
RegCloseKey

shell32

SHChangeNotify

ole32

CoCreateInstance

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringByteLen
LoadTypeLi
RegisterTypeLi

msvcrt

_ultoa
memmove
memset
_adjust_fdiv
malloc
_initterm
strcat
strlen
toupper
_findclose
_findfirst
strcpy
_splitpath
strchr
remove
strtoul
free
atoi
strpbrk
strstr
strncmp
localtime
mktime
atol
strncpy
strcmp
_vsnprintf
time

Exports

Exports

AllTrim
CDateLong
CLongDate
CLongDateTime
CLongTime
CTimeLong
ChangeChar
CopyMem
CountChars
CountNulls
DelIniItem
DelIniSection
DelWinIniItem
DelWinIniSection
DriveInfo
FileExists
FindTopWindow
FlushIniFile
FlushWinIni
GetIconLocation
GetIniItem
GetIniSection
GetRegisterError
GetScreenResolution
GetSystemVersion
GetWinIniItem
GetWinIniSection
GetWindowsVersion
IconAddItem
IconCreateGroup
IconCreateLink
IconDeleteGroup
IconDeleteItem
IconFocusGroup
IconNotify
InStr_Reverse
LicClientCount
LicDisposeToken
LicObtainToken
LicValidateServer
MakeWindowChild
MakeWindowFloating
NCZUP_GetDebug
NCZUP_SetDebug
NCZUP_Version
NextFreeDrive
OleInstalled
ParseToken
PathExists
PutIniItem
PutWinIniItem
RegDeleteKeyTree
RegisterDllFile
RegisterTlbFile
RetrieveTempDrive
RetrieveTempFileName
SplitFileName
UniLicCheck
UseIShell
WinDir
WinSysDir

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1074b90871b2acfbb7542a3db90ad55a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcrt

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 8KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 980B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 980B

.reloc
Size: 1KB - Virtual size: 1KB