5bf8fce6b0b1f234c5f1db29b79c765297036a3388c87e954e792817bb0e96cb

Sharing

Copy URL

Twitter E-mail

General

Target

5bf8fce6b0b1f234c5f1db29b79c765297036a3388c87e954e792817bb0e96cb
Size

168KB
MD5

ad4f24ca987335f58c58799b1984fc92
SHA1

6fe4dd2a0c64a372945494307a814501faa5c76f
SHA256

5bf8fce6b0b1f234c5f1db29b79c765297036a3388c87e954e792817bb0e96cb
SHA512

cc9bdb1527cdd82934dd9f4a2a8b1b4887612f3e5f52b5917099848bcb3c3c06691fa3aa147872055afcbb67eec4efdf0619221ca768cc964e390d2388643f6b
SSDEEP

3072:Majj3HXuNR6ZRRbS4gYGLqgrYCmo3IihpS2USHIcXBJfbcv1x7:Maj7R0G1ihpSazfox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf8fce6b0b1f234c5f1db29b79c765297036a3388c87e954e792817bb0e96cb

Files

5bf8fce6b0b1f234c5f1db29b79c765297036a3388c87e954e792817bb0e96cb
.dll windows:6 windows x86 arch:x86

959be6755d94715c14daa67b4242a050

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

olesvr32.pdb

Imports

msvcrt

_except_handler4_common
_XcptFilter
memset
_amsg_exit
_initterm
free
malloc

kernel32

GlobalFindAtomA
GlobalSize
lstrcmpiA
GlobalGetAtomNameA
lstrcmpA
GetCurrentThreadId
lstrlenA
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GlobalAlloc
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentThread
IsWow64Process
GetLastError
GlobalLock
GlobalAddAtomA
GlobalDeleteAtom
CloseHandle
GlobalUnlock
GlobalFree
LocalAlloc
LocalLock
LocalUnlock
GetTickCount
LocalFree

advapi32

RegQueryValueA
RegOpenKeyExA
OpenProcessToken
RegOpenUserClassesRoot
OpenThreadToken
SetThreadToken
RegCloseKey

user32

FreeDDElParam
PackDDElParam
DefWindowProcA
SendMessageA
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetWindowThreadProcessId
GetDesktopWindow
KillTimer
RegisterClassA
RegisterClipboardFormatA
IsWindow
GetWindow
DestroyWindow
EnumChildWindows
EnumPropsA
CreateWindowExA
SetWindowLongA
SetWindowWord
SetTimer
PostMessageA
GetParent
GetWindowLongA
UnpackDDElParam

gdi32

DeleteEnhMetaFile
DeleteMetaFile
GetBitmapBits
GetObjectA
CopyMetaFileA
SetBitmapBits
CreateBitmap
CopyEnhMetaFileA
DeleteObject

ntdll

EtwTraceMessage

Exports

Exports

DeleteClientInfo
DocWndProc
EnumForTerminate
FindItemWnd
ItemCallBack
ItemWndProc
OleBlockServer
OleQueryServerVersion
OleRegisterServer
OleRegisterServerDoc
OleRenameServerDoc
OleRevertServerDoc
OleRevokeObject
OleRevokeServer
OleRevokeServerDoc
OleSavedServerDoc
OleUnblockServer
SendDataMsg
SendRenameMsg
SrvrWndProc
TerminateClients
TerminateDocClients
WEP

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

959be6755d94715c14daa67b4242a050

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

advapi32

user32

gdi32

ntdll

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 1024B - Virtual size: 996B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 141KB - Virtual size: 141KB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 1024B - Virtual size: 996B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 141KB - Virtual size: 141KB