978126cb8cfdf7fb7c5c20dc904f961bbe7dd0e48d3e2943f2de63c3f3e098ad

General

Target

978126cb8cfdf7fb7c5c20dc904f961bbe7dd0e48d3e2943f2de63c3f3e098ad
Size

2.0MB
MD5

15d42f194de931879a732a3787f089ac
SHA1

e720a4bfe790a515a28ac8cda4575534ddf725c1
SHA256

978126cb8cfdf7fb7c5c20dc904f961bbe7dd0e48d3e2943f2de63c3f3e098ad
SHA512

c6fa24d552a35cd04baf91f7094b094e96d73e00ee0dab2f44a28da2a88bab368f35c4b9c17fbdd4f1f2ff77cb18d32d4813b67a5f3ec1e5f71dddd36543dfdd
SSDEEP

49152:gsqJ+e+nW1/MEhy+seOvVFk7oWqRP5F1YiRT6FeHgproEZcTI:NqJ+/0/MCyamFk7w5VYosZsEZeI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978126cb8cfdf7fb7c5c20dc904f961bbe7dd0e48d3e2943f2de63c3f3e098ad

Files

978126cb8cfdf7fb7c5c20dc904f961bbe7dd0e48d3e2943f2de63c3f3e098ad
.dll windows:5 windows x86 arch:x86

a15f12c387eb57dc12d140e08abcdc8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

GetRecordInfoFromGuids

mprapi

MprConfigTransportCreate

user32

SetMessageExtraInfo
SetForegroundWindow

kernel32

GetModuleHandleW
OutputDebugStringA
GetModuleHandleA
AreFileApisANSI
SetPriorityClass
GetStringTypeA
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
GetLastError
CompareStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeW
EnterCriticalSection
HeapFree
Sleep
ExitProcess
GetLocaleInfoA
HeapAlloc
InitializeCriticalSectionAndSpinCount
WriteFile
GetStdHandle
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
LoadLibraryA
RtlUnwind

gdi32

SetDCPenColor

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1020KB - Virtual size: 1018KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 900KB - Virtual size: 896KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 92KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a15f12c387eb57dc12d140e08abcdc8e

Headers

File Characteristics

Imports

oleaut32

mprapi

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 1020KB - Virtual size: 1018KB

.rdata Size: 900KB - Virtual size: 896KB

.data Size: 88KB - Virtual size: 92KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 52KB - Virtual size: 48KB

.text
Size: 1020KB - Virtual size: 1018KB

.rdata
Size: 900KB - Virtual size: 896KB

.data
Size: 88KB - Virtual size: 92KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 52KB - Virtual size: 48KB