c9213098d5f68c92846faaa669adc641ccd8b514216c723e73c748f54c5c3b1d

Sharing

Copy URL

Twitter E-mail

General

Target

c9213098d5f68c92846faaa669adc641ccd8b514216c723e73c748f54c5c3b1d
Size

84KB
MD5

f145ee743f16f504ef5b6bb2773df1d9
SHA1

5df7b559ff85c8017ee61aafa0b3829ff94acb33
SHA256

c9213098d5f68c92846faaa669adc641ccd8b514216c723e73c748f54c5c3b1d
SHA512

8c4e77e450313a66cbc17ad17f37da8b20c0355ebf7a63a3e58337e755d24c7c6bf1fa1f0c6b71018ebfd42c80b1857d7099066c3da595c7e3ee16aeaf062838
SSDEEP

1536:4CWj/YRxD4MXOC7rJkZBY7BWtn3+gpQZ0vuiYTQ3y4WoCPBCIzyj:4BzY6C7r2ZyAnqZ0vdXmMImj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9213098d5f68c92846faaa669adc641ccd8b514216c723e73c748f54c5c3b1d

Files

c9213098d5f68c92846faaa669adc641ccd8b514216c723e73c748f54c5c3b1d
.dll windows:4 windows x86 arch:x86

f76b31d6045f0a6e3eda12e4a6eb3b3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpynA
GetWindowsDirectoryA
FreeEnvironmentStringsW
GetTempFileNameA
SetLocalTime
IsValidCodePage
GetLocalTime
SetEnvironmentVariableA
CreateJobObjectW
SetCommState
GlobalGetAtomNameW
LCMapStringW
CreateEventA
OpenSemaphoreA
UnregisterWait
TerminateThread
DisconnectNamedPipe
HeapValidate
lstrcpynW
ReadProcessMemory
FileTimeToLocalFileTime
AddRefActCtx
SetConsoleCursorPosition
MoveFileA
ReplaceFileW
GlobalFindAtomW
MoveFileExA
InterlockedExchangeAdd
GetShortPathNameW
ReadConsoleW
LocalSize
GetStringTypeA
OpenProcess
InitializeCriticalSection
IsValidLocale
SetSystemTime
GetFileAttributesExA
WriteProfileStringA
DeleteCriticalSection
SetWaitableTimer
IsBadHugeWritePtr
WaitCommEvent
SetErrorMode
WriteConsoleInputA
RtlMoveMemory
CreateProcessW
GetFileSize
ExitThread
GetLogicalDriveStringsW
FlushFileBuffers
IsWow64Process
SwitchToThread
TerminateJobObject
EnumSystemLocalesA
RaiseException
MultiByteToWideChar
SetVolumeLabelA
OpenFileMappingA
GetEnvironmentStringsW
GetUserDefaultLangID
IsBadCodePtr
SetTimeZoneInformation
GetVolumeNameForVolumeMountPointW
ExpandEnvironmentStringsA
InterlockedCompareExchange
VirtualProtect
GetModuleFileNameA
CreateMutexA
InterlockedIncrement
LoadLibraryA
GetModuleHandleA
GetProcessHeap
lstrlenW
HeapAlloc
GetCommandLineA
InterlockedExchange
EnterCriticalSection
CopyFileA
CreateFileMappingA
GetSystemTimeAsFileTime
MapViewOfFile
InitializeCriticalSectionAndSpinCount
WriteFile
GetTickCount
CreateProcessA
CreateDirectoryA
lstrlenA
InterlockedDecrement
GetComputerNameA
UnregisterWaitEx
GetProcAddress

ole32

StringFromGUID2
CoTaskMemRealloc
OleSetMenuDescriptor
CoDisconnectObject
OleTranslateAccelerator
OleRun
OleDoAutoConvert
StgIsStorageFile
OleCreate
OleLoadFromStream
CoLockObjectExternal
CreateAntiMoniker
FreePropVariantArray
CoRevertToSelf
MkParseDisplayName
CoUninitialize
CoTaskMemFree
CoInitialize

user32

GetComboBoxInfo
DialogBoxParamA
GetClassNameW
MonitorFromWindow
SetWindowContextHelpId
CharNextA
ChildWindowFromPoint
BeginDeferWindowPos
CopyIcon
GetInputState
ChangeDisplaySettingsExW
PostThreadMessageW
CheckRadioButton
ChangeDisplaySettingsA
LoadStringW
GetTopWindow
WaitForInputIdle
GetMenuStringW
GetMessageExtraInfo
CallWindowProcW
InsertMenuItemW
GetSystemMenu
CharNextExA
SetCapture
SetActiveWindow
GetShellWindow
CharToOemA
PostThreadMessageA
GetWindowTextW
IsWindow
VkKeyScanW
GetGUIThreadInfo
SetScrollRange
GetWindowTextLengthW
WindowFromPoint
ShowWindow
MessageBeep
SetWindowWord
MapWindowPoints
WaitMessage
InsertMenuW
RemoveMenu
CallMsgFilterW
GetMonitorInfoW
SetWindowTextW
GetClassInfoExW
CreateCaret
CheckMenuRadioItem
CreateDialogParamA
SetRect
CreateIcon
ExitWindowsEx
GetWindow
GetWindowLongA
TranslateAcceleratorA
SendDlgItemMessageA
GetFocus
GetNextDlgTabItem
ScrollDC
IsZoomed
SetProcessDefaultLayout
GetProcessDefaultLayout
MessageBoxExW
MoveWindow
DefWindowProcW
GetForegroundWindow
DrawFrameControl
DefMDIChildProcW
GetMenu
CharToOemBuffA
GetMenuItemID
DrawIcon
CharUpperA
TranslateMDISysAccel
PostMessageA
FindWindowA
CallNextHookEx
GetMessageA
GetParent
UnhookWinEvent
GetClassNameA
KillTimer
RegisterWindowMessageA
DispatchMessageA
DefWindowProcA
SendMessageA
GetWindowThreadProcessId
CreateWindowExA
UnhookWindowsHookEx
DestroyWindow
PostQuitMessage
TranslateMessage
CharLowerBuffW

oleaut32

SysReAllocStringLen
SysReAllocString
SysStringByteLen
SysFreeString

shlwapi

PathCommonPrefixW
SHSetValueW
SHAutoComplete
UrlGetPartW
AssocQueryStringW
PathRenameExtensionW
PathRemoveExtensionW
PathQuoteSpacesW
PathIsUNCServerShareW
StrRetToBufW
StrCmpIW
StrStrA
SHRegGetUSValueW
PathFindExtensionA
UrlUnescapeW
StrCatW
SHDeleteKeyW
UrlEscapeW
StrToIntA

gdi32

GetDIBits
GetTextColor
GetObjectA
GetWinMetaFileBits
EnumFontFamiliesA
PolyBezierTo
SetStretchBltMode
CreateFontA
CreateRectRgn
DPtoLP
StrokePath
CreatePalette
PlayMetaFile
SetICMMode
CreateFontW
GetEnhMetaFileHeader
GetTextMetricsW
PolyBezier
GetRegionData
SetBkColor
CreateMetaFileA
CreateFontIndirectW
PlayEnhMetaFileRecord
CreateEnhMetaFileW
GetTextExtentPointA
SetPixel
PolyPolygon
GetNearestPaletteIndex
EnumFontFamiliesW
PaintRgn
ResizePalette
GetCharWidth32W
SetWindowOrgEx
ExtTextOutA
GetStretchBltMode
SetTextCharacterExtra
SetDIBColorTable
CreatePatternBrush
AddFontResourceW
SetBitmapBits
CreateCompatibleDC
GetSystemPaletteUse
GetWindowExtEx
GetCharABCWidthsA
ScaleViewportExtEx
PtInRegion

Exports

Exports

isaMapServices

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f76b31d6045f0a6e3eda12e4a6eb3b3d

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

gdi32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 2KB