c7ce65476d4ba9c27b8bae293ef7891d07e321f527f2bbea5bda2bf084dad4d8

Sharing

Copy URL Twitter E-mail

General

Target

c7ce65476d4ba9c27b8bae293ef7891d07e321f527f2bbea5bda2bf084dad4d8
Size

6.5MB
MD5

b9391da2824fa636ec4bb5cbd3b5d821
SHA1

1f5272cf53231306f6a5a0e397dad8045a42e426
SHA256

c7ce65476d4ba9c27b8bae293ef7891d07e321f527f2bbea5bda2bf084dad4d8
SHA512

1375786682859fb0b7c6eb556bc35ed3781609c31a84509c5b0ffa18b9f85434d87898ef3444ac12253371e1439137fe68aa23e135544a303d1d85be653f3aa6
SSDEEP

98304:F6rM3FEOiKhQ3RxDF52KGoUetLf4ttKra9VewpYcbJvOLtZg1RtQKFT0p:FsQFUSSRxD32KGpetLW9qwpHb5oZmvo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7ce65476d4ba9c27b8bae293ef7891d07e321f527f2bbea5bda2bf084dad4d8

Files

c7ce65476d4ba9c27b8bae293ef7891d07e321f527f2bbea5bda2bf084dad4d8
.dll windows:6 windows x86 arch:x86

cb8e3911bc377968304c764103a2ce84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
GetModuleFileNameW
WriteFile
FreeEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetStdHandle
GetOEMCP
IsValidCodePage
IsDebuggerPresent
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
TlsSetValue
TlsGetValue
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
ExpandEnvironmentStringsW
TlsFree
DeleteCriticalSection
CreateEventW
CreateNamedPipeA
GetStartupInfoW
CreateProcessA
GetCurrentThread
GetEnvironmentStringsW
MapViewOfFile
SetEnvironmentVariableW
GetLocaleInfoA
GlobalMemoryStatus
GetStringTypeW
GlobalUnlock
GetACP
CompareStringW
WaitForSingleObjectEx
WaitForSingleObject
GetCommState
VirtualQuery
GetProcessHeap
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
HeapFree
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc

user32

ToAsciiEx
ClientToScreen
PostQuitMessage
IsIconic
LoadStringA
MessageBeep
GetCapture
GetKeyboardState
GetWindowPlacement
OffsetRect
GetWindowTextA
GetKeyboardLayout
SetRect
CheckMenuRadioItem
InvalidateRect
UnregisterClassA
GetWindowLongA
PeekMessageA
SetClassLongA
CheckRadioButton
MessageBoxW
ValidateRgn
LoadCursorA
GetCaretBlinkTime
GetMessageTime
SetKeyboardState
IsZoomed
DrawIconEx
CreateMenu
GetDC
SetPropA
UnionRect
SystemParametersInfoW
GetDesktopWindow
GetSysColor
SetMenu
AppendMenuA
SystemParametersInfoA
ScrollWindowEx
GetSystemMetrics
DestroyMenu
DialogBoxParamA
ToUnicode
GetWindowThreadProcessId

gdi32

GetBitmapBits
SetViewportOrgEx
LineTo
SetBkColor
GetRgnBox
CreateCompatibleDC
CreateRectRgnIndirect
GetObjectType
GetBkColor
SetPaletteEntries
CreatePen
GetStockObject
ExtCreatePen
MoveToEx
PatBlt
GetMetaFileBitsEx
CreateFontIndirectA
Rectangle
CreateRectRgn
RectVisible
IntersectClipRect
TextOutA
CreatePenIndirect

advapi32

GetLengthSid
RegOpenKeyExW
SetSecurityDescriptorOwner
RegQueryValueExW
RegOpenKeyExA

Sections

.text
Size: 527KB - Virtual size: 527KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.9MB - Virtual size: 74.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb8e3911bc377968304c764103a2ce84

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 527KB - Virtual size: 527KB

.data Size: 5.9MB - Virtual size: 74.6MB

.idata Size: 4KB - Virtual size: 4KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 527KB - Virtual size: 527KB

.data
Size: 5.9MB - Virtual size: 74.6MB

.idata
Size: 4KB - Virtual size: 4KB

.reloc
Size: 12KB - Virtual size: 11KB