e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f

Sharing

Copy URL Twitter E-mail

General

Target

e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f
Size

6.4MB
MD5

325842488c0096f1b4572f0c79bb4f0c
SHA1

e0e94604b5a38707d2e887604f972394e6036e6e
SHA256

e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f
SHA512

52142fb9a1de3e8d9e2982822091ee3cbed1c9ad40ee012e8981a671060fe6162bc6815f49e59ae950c7e2c149f23911c21baf5af757a889766a767730a89afd
SSDEEP

196608:C+HMsgx7T7cl0uPv0jsz4FDvvSd3qgX3Y3fh:HgxRKamL6J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f

Files

e56611f34fbcf426f6c212da677fc9e0e6a64840d7da393a0f008e3c363a063f
.dll windows:6 windows x86 arch:x86

9402d35fd5b17838460aa3268b29747f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringW
LoadLibraryExW
SetFilePointerEx
ReadFile
GetConsoleMode
SetStdHandle
FlushFileBuffers
CloseHandle
GetModuleFileNameW
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
WriteConsoleW
ReadConsoleW
CreateFileW
SetEndOfFile
VerSetConditionMask
GetLastError
VerifyVersionInfoW
LoadLibraryW
WritePrivateProfileStringW
SetThreadPriority
GetConsoleCP
CompareFileTime
GetFileType
GetStdHandle
GetOEMCP
GetACP
WideCharToMultiByte
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetStringTypeW
HeapFree
GetSystemTimeAsFileTime
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetProcessHeap
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
IsValidCodePage

user32

MessageBoxA
GetSystemMetrics
ShowOwnedPopups
EndPaint
KillTimer
GetClientRect
GetScrollInfo
GetWindowTextW
TrackPopupMenu
DefWindowProcA
DestroyCaret
EnumChildWindows
ScrollWindowEx
SetWindowTextA
SetDlgItemTextA
GetDC
GetKeyboardLayout
SetWindowLongW
SetWindowsHookExA
GetDesktopWindow
LoadCursorA
EnableMenuItem

gdi32

LineTo
GetPaletteEntries
CreatePenIndirect
SetMapMode
Rectangle
GetTextExtentExPointA
EndPage
ExtTextOutA
MoveToEx

advapi32

RegUnLoadKeyW
RegLoadKeyW

shell32

SHGetFileInfoW

oleaut32

SafeArrayGetLBound

Exports

Exports

?__cjwwbfxyax@@YAKXZ
?__evazso@@YADXZ
?__irdbeol@@YANXZ
?__jcurznorajewmm@@YAHXZ
?__ovyiolxfuuw@@YANXZ
?__vjulqnapain@@YAOXZ
?__xigfqdrygm@@YAJXZ
?__xwzlnkzjfrfq@@YA_JXZ

Sections

.text
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.9MB - Virtual size: 38.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vatnot
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vijktz
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9402d35fd5b17838460aa3268b29747f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

oleaut32

Exports

Exports

Sections

.text Size: 458KB - Virtual size: 457KB

.data Size: 5.9MB - Virtual size: 38.0MB

.idata Size: 3KB - Virtual size: 3KB

.vatnot Size: 512B - Virtual size: 46B

.vijktz Size: 512B - Virtual size: 49B

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 458KB - Virtual size: 457KB

.data
Size: 5.9MB - Virtual size: 38.0MB

.idata
Size: 3KB - Virtual size: 3KB

.vatnot
Size: 512B - Virtual size: 46B

.vijktz
Size: 512B - Virtual size: 49B

.reloc
Size: 12KB - Virtual size: 12KB