74d8fdbac41c7e267e1216ea9e44ec905132f2906ddad5825571b2691db3efd2

Sharing

Copy URL

Twitter E-mail

General

Target

74d8fdbac41c7e267e1216ea9e44ec905132f2906ddad5825571b2691db3efd2
Size

66KB
MD5

e8208429a7ae2703e64777830e6a6898
SHA1

35de328a98db25a8a12847e608954df5c92d2642
SHA256

74d8fdbac41c7e267e1216ea9e44ec905132f2906ddad5825571b2691db3efd2
SHA512

de28556f73fe8e2cbed811550122ca49fc6058bdfabb1c20bc83038536b01c44af07f79c3f6c217b6f340902c0dbc1656993a218147a739bea0b7bddba43681c
SSDEEP

1536:mx241Eg3LbDGNmS+FVsaWsEx7ce3RQQd/YmZy:Q2Bg3LGNmSSsaWsuz/Ymg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74d8fdbac41c7e267e1216ea9e44ec905132f2906ddad5825571b2691db3efd2

Files

74d8fdbac41c7e267e1216ea9e44ec905132f2906ddad5825571b2691db3efd2
.dll regsvr32 windows:4 windows x86 arch:x86

79c797e6f39040da0230ca4388404664

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

DeleteObject

ole32

ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc

user32

CreatePopupMenu
DestroyMenu
MessageBoxW
LoadBitmapW
RegisterClipboardFormatW
LoadStringW
InsertMenuItemW
CharUpperW

advapi32

RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetDesktopFolder
SHGetPathFromIDListW

msvcrt

_adjust_fdiv
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
wcslen
_purecall
memcmp
memset
rand
srand
free
malloc
wcscmp
wcsstr
memmove
memcpy
_CxxThrowException
__CxxFrameHandler
_initterm

kernel32

GetVersionExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WaitForSingleObject
WaitForMultipleObjects
InterlockedDecrement
GlobalSize
GlobalLock
GlobalUnlock
lstrlenW
CreateProcessW
GetModuleHandleW
ReadFile
GetFileSize
InterlockedIncrement
GetUserDefaultLangID
GetSystemDefaultLangID
InitializeCriticalSection
GetFileAttributesW
GetModuleHandleA
GetProcAddress
FindFirstFileW
FindClose
GetFileInformationByHandle
GetCurrentDirectoryW
SetLastError
CreateFileW
SetFileTime
CloseHandle
GetTickCount
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
LocalFree
FormatMessageW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79c797e6f39040da0230ca4388404664

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

ole32

user32

advapi32

shell32

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 316B

.sxdata Size: 512B - Virtual size: 4B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 316B

.sxdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 4KB