b15c456001f3a62f5f273f2125188b4531ae79aeed3820509a3b9cf5b5999de9

Sharing

Copy URL Twitter E-mail

General

Target

b15c456001f3a62f5f273f2125188b4531ae79aeed3820509a3b9cf5b5999de9
Size

792KB
MD5

1f0e6ddef38729b6dfb096f3ec71154d
SHA1

13b1a386a90a835019f17674e7b16ffd614764e8
SHA256

b15c456001f3a62f5f273f2125188b4531ae79aeed3820509a3b9cf5b5999de9
SHA512

4c8b2ce24d6ca99c7ff4a94bf497df16f6f99483361385f271efcb16ae2cf8847fbfd4a09c22fe05c446e03f88f75cec602a143ea18df5bf70150ddd1dc4e28a
SSDEEP

6144:Ei05kH9OyU2uv5SRf/FWgFgtLgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukTc:frHGPv5SmptcDmUWuVZkxikdXcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b15c456001f3a62f5f273f2125188b4531ae79aeed3820509a3b9cf5b5999de9

Files

b15c456001f3a62f5f273f2125188b4531ae79aeed3820509a3b9cf5b5999de9
.dll regsvr32 windows:4 windows x64 arch:x64

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

xbpbxnxouib8mt

Imports

mprapi

MprAdminInterfaceTransportAdd

user32

GetDoubleClickTime

kernel32

GetBinaryTypeW
SetLastError
GetCurrentThreadId
MulDiv
ExitProcess
EnumResourceTypesA
GetModuleHandleA
GetModuleFileNameW
CreateDirectoryA
GetLastError

crypt32

CryptFreeOIDFunctionAddress

winmm

midiInReset

Exports

Exports

?AfxFreeLibrary@@YAHPEAUHINSTANCE__@@@Z
?AfxLoadLibrary@@YAPEAUHINSTANCE__@@PEBG@Z
?AfxLockGlobals@@YAXH@Z
?AfxUnlockGlobals@@YAXH@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sbss
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xlhmxa
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wjpbkj
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.guc
Size: 4KB - Virtual size: 311B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qgb
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kdvv
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ltdr
Size: 4KB - Virtual size: 735B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lyhs
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crofbi
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tdcpa
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a873558f9739b47d573400f9a0176b2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mprapi

user32

kernel32

crypt32

winmm

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 1KB

.code Size: 12KB - Virtual size: 8KB

.sbss Size: 4KB - Virtual size: 1KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 80KB - Virtual size: 76KB

.pdata Size: 4KB - Virtual size: 360B

.crt Size: 160KB - Virtual size: 158KB

DATA Size: 44KB - Virtual size: 41KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 4KB - Virtual size: 996B

.xlhmxa Size: 8KB - Virtual size: 4KB

.wjpbkj Size: 280KB - Virtual size: 276KB

.guc Size: 4KB - Virtual size: 311B

.qgb Size: 4KB - Virtual size: 1KB

.kdvv Size: 4KB - Virtual size: 1KB

.ltdr Size: 4KB - Virtual size: 735B

.lyhs Size: 8KB - Virtual size: 4KB

.crofbi Size: 4KB - Virtual size: 2KB

.tdcpa Size: 28KB - Virtual size: 27KB

.text
Size: 4KB - Virtual size: 1KB

.code
Size: 12KB - Virtual size: 8KB

.sbss
Size: 4KB - Virtual size: 1KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 80KB - Virtual size: 76KB

.pdata
Size: 4KB - Virtual size: 360B

.crt
Size: 160KB - Virtual size: 158KB

DATA
Size: 44KB - Virtual size: 41KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 4KB - Virtual size: 996B

.xlhmxa
Size: 8KB - Virtual size: 4KB

.wjpbkj
Size: 280KB - Virtual size: 276KB

.guc
Size: 4KB - Virtual size: 311B

.qgb
Size: 4KB - Virtual size: 1KB

.kdvv
Size: 4KB - Virtual size: 1KB

.ltdr
Size: 4KB - Virtual size: 735B

.lyhs
Size: 8KB - Virtual size: 4KB

.crofbi
Size: 4KB - Virtual size: 2KB

.tdcpa
Size: 28KB - Virtual size: 27KB