2028c02091cee4ecc7ac26e7b6a08cf0a37a017441f9832ab06752a77e245618

Sharing

Copy URL Twitter E-mail

General

Target

2028c02091cee4ecc7ac26e7b6a08cf0a37a017441f9832ab06752a77e245618
Size

800KB
MD5

b952bcf2b1df3f893b51f0284db99608
SHA1

98bdf4d861da766d661db1067ee244e95ed6e85b
SHA256

2028c02091cee4ecc7ac26e7b6a08cf0a37a017441f9832ab06752a77e245618
SHA512

444f46b41db077d260cf4ccc5514a388be09b00457f2a3933e23402d29f26e9b33929cd11317d04c8ccafd108575cf3dd492454e04f31d8c6bc19dac945a0e4b
SSDEEP

6144:+i05kH9OyU2uv5SRf/FWgFgtLgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukTu:RrHGPv5SmptcDmUWuVZkxikdXcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2028c02091cee4ecc7ac26e7b6a08cf0a37a017441f9832ab06752a77e245618

Files

2028c02091cee4ecc7ac26e7b6a08cf0a37a017441f9832ab06752a77e245618
.dll regsvr32 windows:4 windows x64 arch:x64

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xbpbxnxouib8mt

Imports

mprapi

MprAdminInterfaceTransportAdd

user32

GetDoubleClickTime

kernel32

GetBinaryTypeW
SetLastError
GetCurrentThreadId
MulDiv
ExitProcess
EnumResourceTypesA
GetModuleHandleA
GetModuleFileNameW
CreateDirectoryA
GetLastError

crypt32

CryptFreeOIDFunctionAddress

winmm

midiInReset

Exports

Exports

?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sbss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xlhmxa
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wjpbkj
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.guc
Size: 4KB - Virtual size: 311B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qgb
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kdvv
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ltdr
Size: 4KB - Virtual size: 735B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lyhs
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crofbi
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hrjm
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hukzx
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mprapi

user32

kernel32

crypt32

winmm

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.code Size: 12KB - Virtual size: 8KB

.sbss Size: 4KB - Virtual size: 1KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 80KB - Virtual size: 76KB

.pdata Size: 4KB - Virtual size: 360B

.crt Size: 160KB - Virtual size: 158KB

DATA Size: 44KB - Virtual size: 41KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 996B

.xlhmxa Size: 8KB - Virtual size: 4KB

.wjpbkj Size: 280KB - Virtual size: 276KB

.guc Size: 4KB - Virtual size: 311B

.qgb Size: 4KB - Virtual size: 1KB

.kdvv Size: 4KB - Virtual size: 1KB

.ltdr Size: 4KB - Virtual size: 735B

.lyhs Size: 8KB - Virtual size: 4KB

.crofbi Size: 4KB - Virtual size: 2KB

.hrjm Size: 8KB - Virtual size: 4KB

.hukzx Size: 28KB - Virtual size: 27KB

.text
Size: 4KB - Virtual size: 1KB

.code
Size: 12KB - Virtual size: 8KB

.sbss
Size: 4KB - Virtual size: 1KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 80KB - Virtual size: 76KB

.pdata
Size: 4KB - Virtual size: 360B

.crt
Size: 160KB - Virtual size: 158KB

DATA
Size: 44KB - Virtual size: 41KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 996B

.xlhmxa
Size: 8KB - Virtual size: 4KB

.wjpbkj
Size: 280KB - Virtual size: 276KB

.guc
Size: 4KB - Virtual size: 311B

.qgb
Size: 4KB - Virtual size: 1KB

.kdvv
Size: 4KB - Virtual size: 1KB

.ltdr
Size: 4KB - Virtual size: 735B

.lyhs
Size: 8KB - Virtual size: 4KB

.crofbi
Size: 4KB - Virtual size: 2KB

.hrjm
Size: 8KB - Virtual size: 4KB

.hukzx
Size: 28KB - Virtual size: 27KB