09d4e85c188660146fe539322aa7b3295d05a986c66a87f28606dcd18337ff8a

Sharing

Copy URL Twitter E-mail

General

Target

09d4e85c188660146fe539322aa7b3295d05a986c66a87f28606dcd18337ff8a
Size

235KB
MD5

6ee8c3de2d1da84a6e5995503adeb684
SHA1

f19119c6fd2ea92e0c42746f35247f5e93fdadf4
SHA256

09d4e85c188660146fe539322aa7b3295d05a986c66a87f28606dcd18337ff8a
SHA512

9404d93282718f5e482f5f22349576353dfb2518323a285f3cf369482cbe54b8d969ae15c9f9d3a92c7026890a9cbb92efffc0bbe04f3cea60b8737048a015de
SSDEEP

3072:tyk4RLVqf36Fjta/hHSrzMgEG1DJ42lQBV+UdE+rECWp7hKi:QZup9BV+UdvrEFp7hKi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09d4e85c188660146fe539322aa7b3295d05a986c66a87f28606dcd18337ff8a

Files

09d4e85c188660146fe539322aa7b3295d05a986c66a87f28606dcd18337ff8a
.dll regsvr32 windows:6 windows x86 arch:x86

087876877801167c2a48152dc97702d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

IEProxy.pdb

Imports

msvcrt

memcpy
_amsg_exit
_initterm
free
malloc
_XcptFilter

rpcrt4

RpcRaiseException
NdrGetUserMarshalInfo
NdrDcomAsyncClientCall
NdrStubCall2
NdrStubForwardingFunction
NdrClientCall2
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrDllUnregisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
CStdStubBuffer_QueryInterface

oleaut32

VARIANT_UserSize
BSTR_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserFree
VARIANT_UserMarshal
VARIANT_UserUnmarshal
VARIANT_UserFree
BSTR_UserSize
BSTR_UserMarshal

ole32

HGLOBAL_UserSize
CoTaskMemFree
HGLOBAL_UserMarshal
HGLOBAL_UserUnmarshal
HGLOBAL_UserFree
HMENU_UserSize
HMENU_UserMarshal
HMENU_UserUnmarshal
HMENU_UserFree
HICON_UserSize
HICON_UserMarshal
HICON_UserUnmarshal
HICON_UserFree
HDC_UserSize
HDC_UserMarshal
HDC_UserUnmarshal
HDC_UserFree
HWND_UserSize
HWND_UserMarshal
HWND_UserUnmarshal
HWND_UserFree
CoTaskMemRealloc

kernel32

DisableThreadLibraryCalls
InterlockedExchange
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

087876877801167c2a48152dc97702d2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

rpcrt4

oleaut32

ole32

kernel32

Exports

Exports

Sections

.text Size: 123KB - Virtual size: 122KB

.orpc Size: 7KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 123KB - Virtual size: 122KB

.orpc
Size: 7KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 14KB - Virtual size: 13KB