310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b

Sharing

Copy URL

Twitter E-mail

General

Target

310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b
Size

2.5MB
MD5

f0fb3e42854cebfea2da182afebf47af
SHA1

b63493ed583b9aec2096a79152a1447e667830d5
SHA256

310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b
SHA512

4ef3d5bfe691e51333762be4f601276ce2bb443e7afba85b0d217399aacd9a8e1d248de6971b9c9dd159ef183fa448895a6e6421a0fb811ee8cf3f8c126b759e
SSDEEP

49152:Fgi3PmnDiN+0BI/mQNpgAZb40zOaoiOPUGWbmKL4:R3PmnDeBomYpLZ/zwiOMGWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b

Files

310013941d447cfc320ce410a880392b05a0986bff8e8c449e1a0f413020f31b
.dll windows:5 windows x86 arch:x86

c9f93910b9e39904c5717dbcd0df9168

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetMenuItemBitmaps
GetWindow
GetMessageA
GetWindowRgn
CheckMenuItem
IsWinEventHookInstalled
DrawIcon

oleaut32

SafeArrayAllocDescriptorEx
GetErrorInfo

ws2_32

WSAGetLastError

gdi32

GetWindowOrgEx
OffsetClipRgn
BeginPath
GetTextCharset
CreateRoundRectRgn

kernel32

TerminateProcess
CloseHandle
GetProcessShutdownParameters
ChangeTimerQueueTimer
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
DeleteCriticalSection
SetStdHandle
GetModuleFileNameW
GetBinaryTypeW
LoadLibraryExW
GetTimeFormatA
ConvertDefaultLocale
VerSetConditionMask
UnlockFileEx
SetConsoleCP

advapi32

RegQueryInfoKeyA
LookupPrivilegeNameW

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 320KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lq8zSJD
Size: 308KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hm299*2
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=Womat6
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt0
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9f93910b9e39904c5717dbcd0df9168

Headers

File Characteristics

Imports

user32

oleaut32

ws2_32

gdi32

kernel32

advapi32

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 4KB - Virtual size: 2KB

.code Size: 320KB - Virtual size: 321KB

lq8zSJD Size: 308KB - Virtual size: 305KB

hm299*2 Size: 1.3MB - Virtual size: 1.3MB

=Womat6 Size: 164KB - Virtual size: 161KB

.crt0 Size: 180KB - Virtual size: 177KB

.CRT Size: 4KB - Virtual size: 4B

.rsrc Size: 40KB - Virtual size: 38KB

DATA Size: 56KB - Virtual size: 53KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 4KB - Virtual size: 2KB

.code
Size: 320KB - Virtual size: 321KB

lq8zSJD
Size: 308KB - Virtual size: 305KB

hm299*2
Size: 1.3MB - Virtual size: 1.3MB

=Womat6
Size: 164KB - Virtual size: 161KB

.crt0
Size: 180KB - Virtual size: 177KB

.CRT
Size: 4KB - Virtual size: 4B

.rsrc
Size: 40KB - Virtual size: 38KB

DATA
Size: 56KB - Virtual size: 53KB