8e781a962335ada491914ce7d0a504aa065200c5c7565cba10b53b531803d4fc

Sharing

Copy URL Twitter E-mail

General

Target

8e781a962335ada491914ce7d0a504aa065200c5c7565cba10b53b531803d4fc
Size

956KB
MD5

c71c5108944ad45cc6e2d25a77916a44
SHA1

863214e150cf0a40383900852825259845154cde
SHA256

8e781a962335ada491914ce7d0a504aa065200c5c7565cba10b53b531803d4fc
SHA512

df38c36afb941e4fe54365fde2a64d1f786685ac8c2ddfd42216d9519e7607ea09ede34fa77ee3360589fe89a7659c15b63a1c4b1d9edea7d0019cb2ae5366da
SSDEEP

12288:F7Yt1oVcjtR7OnTtoRjNdFHIdQj6ZBbILA8L1dRB8GymgI:dYp1u5oRjNdFxj6ZBbIL/LNCFmr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e781a962335ada491914ce7d0a504aa065200c5c7565cba10b53b531803d4fc

Files

8e781a962335ada491914ce7d0a504aa065200c5c7565cba10b53b531803d4fc
.dll regsvr32 windows:4 windows x86 arch:x86

1927d0db3b7884104ff5f0a44713b4b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

DefDriverProc
timeGetTime

kernel32

CreateSemaphoreA
CloseHandle
GlobalReAlloc
OutputDebugStringA
UnmapViewOfFile
OpenFileMappingA
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
MultiByteToWideChar
DeleteCriticalSection
GetCommandLineA
GetLastError
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
LeaveCriticalSection
lstrlenA
GetModuleFileNameA
InitializeCriticalSection
Sleep
InterlockedIncrement
InterlockedDecrement
VirtualAlloc
VirtualFree
GetModuleHandleA
GetACP
GetVersion
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetVersionExA
TlsAlloc
TlsFree
SetLastError
TlsGetValue
DisableThreadLibraryCalls
WideCharToMultiByte
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetCPInfo
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
HeapFree
HeapAlloc
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadWritePtr
HeapDestroy
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
SetStdHandle
SetFilePointer
MapViewOfFile
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
IsBadReadPtr
LocalHandle
LocalUnlock
LocalFree
LocalAlloc
LocalLock
CreateFileMappingA
HeapCreate
TlsSetValue
IsBadCodePtr
RaiseException

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

user32

LoadStringA
MessageBoxA
DialogBoxParamA
SetDlgItemInt
GetDlgItemTextA
IsRectEmpty
GetDlgItemInt
IsDlgButtonChecked
SetWindowLongA
GetWindowLongA
CheckDlgButton
SendMessageA
GetDlgItem
EnableWindow
ShowWindow
EndDialog
CheckRadioButton
SetDlgItemTextA
PostMessageA
EndPaint
GetWindowRect
LoadBitmapA
BeginPaint
WinHelpA
ReleaseDC
wsprintfA
wvsprintfA
CreateDialogParamA
MoveWindow
InvalidateRect
DestroyWindow
DefWindowProcA
LoadStringW
GetDesktopWindow
GetDC

gdi32

GetSystemPaletteEntries
DeleteDC
BitBlt
CreateCompatibleDC
SelectObject
GetObjectA

ole32

CoCreateInstance
StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

AboutDialogProc
ConfigureDialogProc
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
DriverDialogProc
DriverProc

Sections

.text
Size: 467KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1927d0db3b7884104ff5f0a44713b4b2

Headers

File Characteristics

Imports

winmm

kernel32

advapi32

user32

gdi32

ole32

Exports

Exports

Sections

.text Size: 467KB - Virtual size: 466KB

.sdata Size: 231KB - Virtual size: 230KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 44KB - Virtual size: 69KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 164KB - Virtual size: 163KB

.text
Size: 467KB - Virtual size: 466KB

.sdata
Size: 231KB - Virtual size: 230KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 44KB - Virtual size: 69KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 164KB - Virtual size: 163KB