9467e50f18911c98327e867591846a98f54bd7d9e1370b4825bb7f718a24bf93

Sharing

Copy URL Twitter E-mail

General

Target

9467e50f18911c98327e867591846a98f54bd7d9e1370b4825bb7f718a24bf93
Size

256KB
MD5

b443068efbfee60e10c4a0942b79c38a
SHA1

7b373a2ccb161655046fd533e3f33e6ee9dd1e21
SHA256

9467e50f18911c98327e867591846a98f54bd7d9e1370b4825bb7f718a24bf93
SHA512

fd28928e9c69a7fe906bd622249b280b45ffb1780ef2cc61fee2bb99af587d895527c7069e0e4706bae326706d33d84a586453a447b714cb7856b08e56daf019
SSDEEP

3072:1/Z0GT2j+jSq1Wz7bpts1PHrnE7L2eLp2qphD4s6nH9Vo0PToeBoOfLhq6baW9a5:dSaBWz7baPHk9Vf86euOfLhq6OJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9467e50f18911c98327e867591846a98f54bd7d9e1370b4825bb7f718a24bf93

Files

9467e50f18911c98327e867591846a98f54bd7d9e1370b4825bb7f718a24bf93
.dll windows:4 windows x86 arch:x86

3835c99e46379636677f40404b36541b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
GetTimeZoneInformation
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetCommandLineA
RtlUnwind
GetTickCount
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
GlobalFlags
GetProcessVersion
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetCurrentThread
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcmpA
GlobalFree
GlobalAlloc
GlobalLock
lstrlenW
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
GlobalUnlock
SetUnhandledExceptionFilter
GlobalReAlloc

user32

SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
CharNextA
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
UnregisterClassA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
LoadIconA
PostMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
IsWindowVisible
ScrollWindow
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
CopyAcceleratorTableA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
LoadStringA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowPlacement
OffsetRect
RegisterWindowMessageA
FindWindowA
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
SendMessageA
GetWindow
EnableWindow
GetScrollInfo
SystemParametersInfoA
GetWindowRect
UpdateWindow
IsIconic
IsChild
InvalidateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
EndDialog
MessageBoxA
CreateDialogIndirectParamA
ScreenToClient
CopyRect
GetDC
ReleaseDC
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
MoveWindow
GetDlgCtrlID
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
AdjustWindowRectEx
GetClientRect
IsWindow
wsprintfA
CharUpperA
GetSystemMetrics
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
GetWindowTextA
CallWindowProcA

gdi32

RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
DPtoLP
GetObjectA
PtVisible
GetBkColor
GetMapMode
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
GetTextColor
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
VariantClear
VariantInit
VariantCopy
VariantChangeType
SysAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocStringByteLen
SysStringLen
LoadTypeLi
VariantTimeToSystemTime

Exports

Exports

GetNewInf

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3835c99e46379636677f40404b36541b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Exports

Exports

Sections

.text Size: 144KB - Virtual size: 142KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 32KB - Virtual size: 45KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 28KB - Virtual size: 25KB

.text
Size: 144KB - Virtual size: 142KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 32KB - Virtual size: 45KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 28KB - Virtual size: 25KB