c88c07c98d3039a7a639229aadc8ee6db6a9f21ec9f8ec9d2c6f4548de015840

Sharing

Copy URL Twitter E-mail

General

Target

c88c07c98d3039a7a639229aadc8ee6db6a9f21ec9f8ec9d2c6f4548de015840
Size

466KB
MD5

69bcb5ba62b9fa7a1d5a1dde806921fa
SHA1

15c4405f448c3d9849e8b5fc85c4270568ba22a9
SHA256

c88c07c98d3039a7a639229aadc8ee6db6a9f21ec9f8ec9d2c6f4548de015840
SHA512

813f641a6802d4bbdc21a43de6f92e6f704bbcff4c4dca9c84d31e9f4a041aa6a63ca50bdb2fd4ef5085ee59be69ae8ce36a0a6aa556485b067956063f65c206
SSDEEP

6144:Oj7ra4P+Fud21fM61P0+pBxmkWAnO3jvwyrKwU7ouNovA16Ojh8wUfy:Oj72AUc806N9vIkhiqEuNTcf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c88c07c98d3039a7a639229aadc8ee6db6a9f21ec9f8ec9d2c6f4548de015840

Files

c88c07c98d3039a7a639229aadc8ee6db6a9f21ec9f8ec9d2c6f4548de015840
.dll windows:6 windows x64 arch:x64

5107c24e4fb54a70014d9e094bc16dcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mfc110u

ord11253
ord11252
ord5327
ord9824
ord9820
ord9822
ord9823
ord9821
ord2644
ord7758
ord9791
ord3154
ord3157
ord13222
ord5873
ord5787
ord6155
ord3016
ord3253
ord3252
ord445
ord3892
ord10008
ord10922
ord10549
ord8582
ord1082
ord11692
ord8751
ord2643
ord13218
ord5871
ord11651
ord7085
ord3001
ord1046
ord8668
ord2136
ord2217
ord6118
ord7931
ord13692
ord4018
ord3538
ord1622
ord4829
ord4828
ord12073
ord280
ord286
ord1492
ord1494
ord1658
ord1661
ord7592
ord12275
ord4450
ord8304
ord8305
ord12432
ord7902
ord4122
ord2866
ord285
ord290
ord1495
ord5580
ord2848
ord3639
ord3632
ord11740
ord13588
ord7398
ord8360
ord8302
ord5543
ord1431
ord1423
ord3655
ord7246
ord293
ord4449
ord12395
ord13853
ord13710
ord3525
ord967
ord6462
ord3112
ord3218
ord4039
ord8680
ord5775
ord2292
ord2296
ord322
ord8681
ord9786
ord5430
ord11739
ord11771
ord7765
ord11759
ord5577
ord3673
ord6477
ord977
ord5992
ord14109
ord5993
ord14110
ord5991
ord14108
ord7566
ord12045
ord13909
ord11502
ord11503
ord1962
ord7516
ord12457
ord3890
ord3952
ord8939
ord14036
ord7498
ord14030
ord12055
ord12056
ord2385
ord5059
ord7868
ord7563
ord4384
ord12376
ord12438
ord9969
ord11767
ord7928
ord1441
ord7245
ord8011
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord13949
ord6493
ord4274
ord11244
ord13175
ord5594
ord5116
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord984
ord4959
ord5239
ord5427
ord8891
ord11609
ord3660
ord11463
ord14029
ord1032
ord8507
ord5215
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord8750
ord3541
ord3540
ord6117
ord3698
ord6190
ord2160
ord4595
ord1027
ord296
ord3537
ord1482
ord3670
ord1483
ord323
ord1033
ord2273
ord2315
ord2318
ord2284
ord2317
ord472
ord2182
ord2282
ord2111
ord2214
ord2306

msvcr110

fclose
_wtoi
_wfopen
fwscanf
_mbsinc
sscanf
memset
_wtof
__CxxFrameHandler3
swscanf
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_swprintf
_initterm_e
_initterm
_malloc_crt
free
_amsg_exit
__CppXcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
__C_specific_handler
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
??2@YAPEAX_K@Z
memcpy
fmod

kernel32

IsProcessorFeaturePresent
EncodePointer
DecodePointer
QueryPerformanceCounter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTickCount64
LocalFree
LocalAlloc
GetCurrentDirectoryW
GetModuleFileNameW
SetCurrentDirectoryW
GetCurrentThreadId

user32

LoadIconW
InvalidateRect
EnableWindow
SendMessageW
GetWindowRect

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

oleaut32

SysFreeString
SysAllocString

thmtexteditor20.arx

??0CTHMTextComboBox@@QEAA@XZ
??1CTHMTextComboBox@@UEAA@XZ
?SetDefaultCharFormat@CTHMTextComboBox@@QEAAHAEAU_charformatw@@@Z
?ReplaceTextW@CTHMTextComboBox@@QEAAHPEB_W0AEAU_charrange@@@Z
?ClearProtectText@CTHMTextComboBox@@QEAAHPEB_WAEAU_charformatw@@@Z
?SetProtectText@CTHMTextComboBox@@QEAAHPEB_WAEAU_charrange@@AEAU_charformatw@@@Z
?AddSymbols@CTHMTextComboBox@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@UtagLOGFONTW@@@Z
?SetMText@CTHMTextComboBox@@QEAAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetMText@CTHMTextComboBox@@QEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetPropName@CTHMTextComboBox@@QEAAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetWindowText2@CTHMTextComboBox@@QEBAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z

Exports

Exports

GetDimCommonData
GetDimDefaultData
GetDimTolerance
GetToleranceDlg
MakeCombineDimText
TestDll

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5107c24e4fb54a70014d9e094bc16dcc

Headers

DLL Characteristics

File Characteristics

Imports

mfc110u

msvcr110

kernel32

user32

advapi32

oleaut32

thmtexteditor20.arx

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 372KB - Virtual size: 371KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 372KB - Virtual size: 371KB

.reloc
Size: 3KB - Virtual size: 3KB