e5c0dbd5260e7b2d0c69923e008d3c2ee36bc32b2c0edfea35a6b396b642e87a

Sharing

Copy URL Twitter E-mail

General

Target

e5c0dbd5260e7b2d0c69923e008d3c2ee36bc32b2c0edfea35a6b396b642e87a
Size

244KB
MD5

248be606b109f2bde6951ccedf2cf767
SHA1

4b95ffd448432aaff8f0994c4b79848001b5270a
SHA256

e5c0dbd5260e7b2d0c69923e008d3c2ee36bc32b2c0edfea35a6b396b642e87a
SHA512

d37b2ee37faae82228282e9756ff76e23ea8ad52055798ff7651ce47341b55968f8d48a00cfa59a71926431b693d63a21f1f433d13003b34a609fc8892da2106
SSDEEP

3072:kGHWiXl7TIUcJmjDngo1UwBHytV0/3+fnVLR:lW4WJSgo1UwBStV0/3snV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5c0dbd5260e7b2d0c69923e008d3c2ee36bc32b2c0edfea35a6b396b642e87a

Files

e5c0dbd5260e7b2d0c69923e008d3c2ee36bc32b2c0edfea35a6b396b642e87a
.dll regsvr32 windows:4 windows x86 arch:x86

d58a11e330b641a83750729749647519

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

GetDeviceCaps

kernel32

DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MulDiv
MultiByteToWideChar
SizeofResource

ntdll

_vsnprintf

ole32

OleRegGetMiscStatus

oleaut32

LoadRegTypeLib

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen

user32

GetDC
ReleaseDC

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 196B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d58a11e330b641a83750729749647519

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

kernel32

ntdll

ole32

oleaut32

ucrtbase

user32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 104B

.rodata Size: 4KB - Virtual size: 24B

.rdata Size: 44KB - Virtual size: 42KB

.bss Size: - Virtual size: 196B

.edata Size: 68KB - Virtual size: 67KB

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 80KB - Virtual size: 78KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 104B

.rodata
Size: 4KB - Virtual size: 24B

.rdata
Size: 44KB - Virtual size: 42KB

.bss
Size: - Virtual size: 196B

.edata
Size: 68KB - Virtual size: 67KB

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 80KB - Virtual size: 78KB

.reloc
Size: 4KB - Virtual size: 2KB