8fbcab20d4ceb8e97b41c8c2fa9c7a632d0ec646a1a53ae39a57e5e84194a73bN

Sharing

Copy URL Twitter E-mail

General

Target

8fbcab20d4ceb8e97b41c8c2fa9c7a632d0ec646a1a53ae39a57e5e84194a73bN
Size

88KB
MD5

392ab6d5730c47acadcf1f40d86dd920
SHA1

21088d2c882fad0c6326e9eabd701d3c030a85f3
SHA256

8fbcab20d4ceb8e97b41c8c2fa9c7a632d0ec646a1a53ae39a57e5e84194a73b
SHA512

1216742ae6ea6615108b5bd90402abe67e0f77ed6cce2ed55442f6ab3bdd9c73f55fe188a4372de74a054be2942e622f1709ccc59a578db1a3a538fccfae1d9c
SSDEEP

1536:ujWwAA2BoFq9gagLkmIFAQdO6/Ggx1Rpy6OlRJBErK:upAbBDg1AmIFZdOFaRpy6OlRJ+rK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fbcab20d4ceb8e97b41c8c2fa9c7a632d0ec646a1a53ae39a57e5e84194a73bN

Files

8fbcab20d4ceb8e97b41c8c2fa9c7a632d0ec646a1a53ae39a57e5e84194a73bN
.dll regsvr32 windows:4 windows x86 arch:x86

96dec88042e24b7a63504c4592c88566

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
WritePrivateProfileSectionA
GetSystemTimeAsFileTime
GetShortPathNameA
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersion
GetVersionExA
FindResourceA
LoadResource
LockResource
LoadLibraryA
GetProcAddress
FreeLibrary
RaiseException
DisableThreadLibraryCalls
lstrlenW
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
TerminateThread
CreateEventA
OpenEventA
ResetEvent
WaitForSingleObject
SetLastError
InterlockedDecrement
lstrlenA
GetCurrentProcess
FlushInstructionCache
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetLastError
GetLocalTime
VirtualQuery
GetModuleFileNameA
GetTempPathA
DeleteFileA
MoveFileA
LeaveCriticalSection
EnterCriticalSection
GetTickCount

user32

GetWindowRect
ScreenToClient
OffsetRect
InvalidateRgn
DrawEdge
DefWindowProcA
GetParent
UnregisterClassA
InvalidateRect
GetWindowLongA
MapWindowPoints
CallWindowProcA
TrackMouseEvent
LoadStringA
GetClassInfoExA
LoadCursorA
ReleaseDC
GetDC
RegisterClassExA
KillTimer
IsWindow
SetTimer
GetActiveWindow
GetDesktopWindow
MessageBoxA
DrawTextA
ShowWindow
GetClientRect
SetWindowTextA
DestroyWindow
CreateWindowExA
SetWindowLongA
SendMessageA

gdi32

SetWindowOrgEx
CreateRectRgn
CombineRgn
SelectClipRgn
GetStockObject
SetTextColor
SetBkMode
OffsetWindowOrgEx
SaveDC
CreateDIBitmap
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
RestoreDC
CreateCompatibleDC

shell32

ord680
ShellExecuteA

ole32

CoCreateInstance
CLSIDFromString
StringFromCLSID
CoTaskMemFree

oleaut32

VariantClear

atl80

ord44
ord22
ord64
ord49
ord23
ord61
ord15
ord32
ord30
ord43

shlwapi

PathRemoveFileSpecA
PathAppendA
SHDeleteKeyA
SHDeleteValueA
SHGetValueA
SHSetValueA
PathFileExistsA

comctl32

InitCommonControlsEx

msimg32

TransparentBlt

msvcp80

?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?uncaught_exception@std@@YA_NXZ

msvcr80

_mbsrchr
_resetstkoflw
malloc
_purecall
memcmp
getenv
_mbsstr
_mbschr
_beginthreadex
_ismbcspace
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
sprintf
memcpy
atoi
_snprintf
memcpy_s
_mbsicmp
_mbscmp
strchr
strcmp
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
atol
strlen
??3@YAXPAX@Z
strrchr
strcpy
??_V@YAXPAX@Z
free
_CxxThrowException
memmove_s
sprintf_s
fprintf
fseek
strncpy
fclose
ftell
fopen
strcat
_stricmp
memset
_vsnprintf
_recalloc
_mbsnbcpy

wininet

HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
HttpOpenRequestA
InternetConnectA
InternetOpenA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96dec88042e24b7a63504c4592c88566

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

atl80

shlwapi

comctl32

msimg32

msvcp80

msvcr80

wininet

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 10KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 10KB

.reloc
Size: 8KB - Virtual size: 6KB