51e41006b72c60d561e0aaeaab7529a5cef7f1703f8f5296cb839f4a5a8fd59a

Sharing

Copy URL

Twitter E-mail

General

Target

51e41006b72c60d561e0aaeaab7529a5cef7f1703f8f5296cb839f4a5a8fd59a
Size

492KB
MD5

be1883ca039d4dae794ee9e7e272a0c4
SHA1

aa1c8f6d2e9a1d068ad57fcffc72f4fa681a2868
SHA256

51e41006b72c60d561e0aaeaab7529a5cef7f1703f8f5296cb839f4a5a8fd59a
SHA512

a44ed8324d33247ddf10d46c457c12bcfe50471f1eed77b45b0a83fd10d81e33cbfe398a20524372cd4887234e4e620cf216dc3cf2166b78da30bce622ff2813
SSDEEP

12288:FUzsBHGP7QeAnUGubsj8zHlR4ol+itORtE:5ZnQzHL4ol+pRtE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51e41006b72c60d561e0aaeaab7529a5cef7f1703f8f5296cb839f4a5a8fd59a

Files

51e41006b72c60d561e0aaeaab7529a5cef7f1703f8f5296cb839f4a5a8fd59a
.dll windows:6 windows x86 arch:x86

8d229773d7b87f67ecdd77df69e48d40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\code\clean_master\webwrap\webwrap\Release\webwrap.pdb

Imports

gdiplus

GdiplusStartup

kernel32

GetProcAddress
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
SetEvent
CreateEventW
WaitForMultipleObjects
FindResourceExW
OpenProcess
GetCurrentProcess
GetModuleHandleW
CloseHandle
WriteFile
FlushFileBuffers
CreateFileW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetEndOfFile
SetStdHandle
GetModuleFileNameW
WaitForSingleObject
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetTickCount
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
ExitProcess
GetTimeZoneInformation
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
InterlockedFlushSList
CreateThread
Sleep
FreeLibrary
IsDebuggerPresent
OutputDebugStringW
WideCharToMultiByte
GetStringTypeW
FormatMessageW
EncodePointer
GetCPInfo
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
LocalFree
GetCurrentProcessId
ReleaseMutex
CreateMutexW
DeleteFileW
CopyFileW
FindClose
FindNextFileW
GetFileSizeEx
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind

user32

GetMessageW
GetMonitorInfoW
SystemParametersInfoW
ReleaseCapture
DispatchMessageW
TranslateMessage
GetParent
PeekMessageW
GetClientRect
SetWindowPos
PostMessageW
MonitorFromWindow
GetWindowThreadProcessId
wsprintfW
GetShellWindow
ReleaseDC
GetDC
GetActiveWindow
GetWindowPlacement
ShowWindow
SendMessageW
PostThreadMessageW
CopyRect

gdi32

GetDeviceCaps

comdlg32

CommDlgExtendedError
GetSaveFileNameW

advapi32

RegGetValueW
LookupPrivilegeValueW
GetTokenInformation
DuplicateTokenEx
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegOpenKeyExW

shell32

SHFileOperationW
SHBrowseForFolderW
ShellExecuteW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetPathFromIDListW

ole32

CoInitialize
CoUninitialize
CoTaskMemFree

shlwapi

PathIsRootW
PathIsRelativeW
PathIsDirectoryW
PathRemoveFileSpecW
PathAppendW
StrStrIW
PathFileExistsW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 362KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d229773d7b87f67ecdd77df69e48d40

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

shlwapi

version

Sections

.text Size: 362KB - Virtual size: 361KB

.rdata Size: 98KB - Virtual size: 97KB

.data Size: 11KB - Virtual size: 14KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 362KB - Virtual size: 361KB

.rdata
Size: 98KB - Virtual size: 97KB

.data
Size: 11KB - Virtual size: 14KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 17KB - Virtual size: 17KB