b3b4c7911b0899a787985d0830b36840ee168b8aa9702c9747a0ed39a6c0ea74

Sharing

Copy URL

Twitter E-mail

General

Target

b3b4c7911b0899a787985d0830b36840ee168b8aa9702c9747a0ed39a6c0ea74
Size

126KB
MD5

83a47862ec274966fe101c8ec8b60dce
SHA1

c70614a2e38b6d8003d35c3b9ec40c5da9e7385a
SHA256

b3b4c7911b0899a787985d0830b36840ee168b8aa9702c9747a0ed39a6c0ea74
SHA512

805896e1a4e1f5567b0b196f45296e92cfa2b4350dc9a994ab9a228767d04c91d8d72fb27f439ea0b15b47dd92f4ad2ffab3b10925c952a0ed35d6be57006199
SSDEEP

3072:55e22o6FJDmbmp9rJ0m2ZforCWy0EKSqGU5D12:55e2UDXp9rWQ2WyZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3b4c7911b0899a787985d0830b36840ee168b8aa9702c9747a0ed39a6c0ea74

Files

b3b4c7911b0899a787985d0830b36840ee168b8aa9702c9747a0ed39a6c0ea74
.dll windows:5 windows x64 arch:x64

587774cdffbdffa1b1764000fe5db92d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidCreate

user32

DestroyWindow
UnregisterClassA
GetDlgItem
SendMessageA
SetWindowTextA
SetFocus
LoadStringA
MessageBeep
GetWindowRect
MoveWindow
EndDialog
DialogBoxParamA
FindWindowA
PostMessageA
wsprintfA
MessageBoxA
GetDesktopWindow

advapi32

RegQueryInfoKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
HeapAlloc
GetLocaleInfoA
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
EncodePointer
FreeLibrary
GetModuleFileNameA
GetProcAddress
GetLastError
LoadLibraryA
Sleep
OutputDebugStringA
_lclose
CloseHandle
WriteFile
CreateFileA
GetVersionExA
GetSystemTime
ReadFile
SetFilePointer
lstrcmpiA
_lwrite
OpenFile
_llseek
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
RtlUnwindEx
HeapFree
GetModuleHandleW
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW

Exports

Exports

?AppcGetVersion@@YAHPEAD0@Z
?StopConnection@@YAHH@Z
GetLocalIpAddress
GetMacAddress
GetState
IsRmtPgmCallFree
RmtPgmCall

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

587774cdffbdffa1b1764000fe5db92d

Headers

File Characteristics

Imports

rpcrt4

user32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 7KB - Virtual size: 73KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 944B

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 7KB - Virtual size: 73KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 944B