5773843439ad5e74b6cdf4eb8521d5d8227e40a5e80f89a53f80f9f77061da51

Sharing

Copy URL

Twitter E-mail

General

Target

5773843439ad5e74b6cdf4eb8521d5d8227e40a5e80f89a53f80f9f77061da51
Size

692KB
MD5

737730e905a5fa70f841d0056e2966ce
SHA1

f90326d3c248167e206612e64b663efd2d3bca6d
SHA256

5773843439ad5e74b6cdf4eb8521d5d8227e40a5e80f89a53f80f9f77061da51
SHA512

02135f4a4b6d984fd63c9d97c02a752a6bfb20d77d004c07b3e1cb2afbf6e4c9d155480941bc5d5ffc4c476c50147e709f77fd1f92344744a69fe285a9e7a82f
SSDEEP

12288:2c0eQOwf1dJ4O8c5n8IEzd0aUckMO41IVUH0tDTuLAyG7Vug8ECf/dnyH8jsQXMk:29eQOwf1d+cRli0aUck741IVUwW9fdyM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5773843439ad5e74b6cdf4eb8521d5d8227e40a5e80f89a53f80f9f77061da51

Files

5773843439ad5e74b6cdf4eb8521d5d8227e40a5e80f89a53f80f9f77061da51
.dll windows:6 windows x86 arch:x86

969cb25a4c57def715fc28980ee99b1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\projects\osara\build\x86\reaper_osara32.dll.pdb

Imports

user32

DestroyWindow
ShowWindow
GetClassWord
MessageBoxW
IsChild
GetWindowTextLengthW
GetWindowTextA
SetWindowTextW
SetWindowTextA
RemovePropA
GetPropA
SetPropA
DrawTextW
DrawTextA
SetMenuItemInfoW
SetMenuItemInfoA
GetMenuItemInfoW
GetMenuItemInfoA
InsertMenuItemW
InsertMenuItemA
InsertMenuW
InsertMenuA
MessageBoxA
GetKeyNameTextW
GetKeyNameTextA
CallWindowProcW
CallWindowProcA
DefWindowProcW
DefWindowProcA
FindWindowA
SetWindowLongA
EnableWindow
GetAncestor
GetGUIThreadInfo
UnhookWinEvent
SetWinEventHook
NotifyWinEvent
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetWindowThreadProcessId
GetTopWindow
GetClassNameW
GetClassNameA
FindWindowExW
FindWindowExA
EnumChildWindows
GetParent
GetWindowLongW
GetWindowLongA
ScreenToClient
ClientToScreen
SetCursorPos
GetWindowRect
GetWindowTextLengthA
GetWindowTextW
GetForegroundWindow
TrackPopupMenu
DestroyMenu
CreatePopupMenu
KillTimer
SetTimer
mouse_event
GetKeyState
GetFocus
SetFocus
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
CreateDialogParamA
SendMessageA

ole32

CoCreateInstance

oleacc

AccessibleObjectFromEvent

oleaut32

SysStringLen
SysFreeString

shell32

SHGetPathFromIDListA
DragQueryFileA
ShellExecuteA
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
SHBrowseForFolderA
DragQueryFileW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

GetUserNameA
GetUserNameW

kernel32

FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetFullPathNameW
HeapReAlloc
OutputDebugStringW
WriteFile
HeapFree
HeapAlloc
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
LoadLibraryExW
GetConsoleOutputCP
InterlockedFlushSList
RtlUnwind
RaiseException
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
GetLocaleInfoW
LCMapStringW
CompareStringW
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
GetCPInfo
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
WideCharToMultiByte
GetConsoleMode
ReadFile
HeapSize
ReadConsoleW
FreeLibrary
DeleteFileA
GetTickCount
InitializeCriticalSection
GetCommandLineW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
SetEndOfFile
DeleteFileW
RemoveDirectoryA
RemoveDirectoryW
GetLastError
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryA
LoadLibraryW
CopyFileA
CopyFileW
MoveFileA
MoveFileW
GetComputerNameA
GetComputerNameW
MultiByteToWideChar

Exports

Exports

ReaperPluginEntry

Sections

.text
Size: 528KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

969cb25a4c57def715fc28980ee99b1a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

ole32

oleacc

oleaut32

shell32

comdlg32

advapi32

kernel32

Exports

Exports

Sections

.text Size: 528KB - Virtual size: 528KB

.rdata Size: 121KB - Virtual size: 120KB

.data Size: 13KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 26KB - Virtual size: 25KB

.text
Size: 528KB - Virtual size: 528KB

.rdata
Size: 121KB - Virtual size: 120KB

.data
Size: 13KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 26KB - Virtual size: 25KB