27e51237725abd9e2e0b906611aa37b983a0edcacfa9f8113b08eddbb3c021adN

Sharing

Copy URL

Twitter E-mail

General

Target

27e51237725abd9e2e0b906611aa37b983a0edcacfa9f8113b08eddbb3c021adN
Size

524KB
MD5

d4c976ade86f701de64d7767edafad10
SHA1

2ce687f3c62507e8721ed45ca09238b2370e6657
SHA256

27e51237725abd9e2e0b906611aa37b983a0edcacfa9f8113b08eddbb3c021ad
SHA512

b32ba2c0b48595b6d5c758289d15ddf5789a7b41c7942da9ed435bb8f6f869d8cf2146204c59c6fdb2ad8c6a8e006774e6200d41a4eb76e4369615bf8fa31de9
SSDEEP

6144:Jo7wfQNg7OUdakdAtuJI7l0VsU7cFXKLtxcMEKyyCT4ESk/Ka9MmwBV+UdvrEFpw:J9XFJIeCjazc0TWhwBjvrEH7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27e51237725abd9e2e0b906611aa37b983a0edcacfa9f8113b08eddbb3c021adN

Files

27e51237725abd9e2e0b906611aa37b983a0edcacfa9f8113b08eddbb3c021adN
.dll regsvr32 windows:4 windows x86 arch:x86

4f0aa553f93e0e2d9e9ceecae20a8317

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RaiseException
HeapSize
HeapReAlloc
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
TerminateProcess
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcpyA
ExitProcess
GetCommandLineA
HeapAlloc
HeapFree
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GetProfileIntA
GetFileTime
GetFileSize
GetFileAttributesA
FindResourceExA
SizeofResource
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
FileTimeToSystemTime
CopyFileA
GlobalSize
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetProcessVersion
GetLastError
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FormatMessageA
LocalFree
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
GetUserDefaultLCID
IsDBCSLeadByte
InterlockedDecrement
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
_lcreat
GlobalReAlloc
OpenFile
_lwrite
LockResource
GlobalFree
lstrcmpA
lstrcmpiA
lstrcpynA
FindResourceA
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
lstrlenA
lstrcatA
_lclose
FreeEnvironmentStringsW

user32

RemoveMenu
AppendMenuA
CharUpperA
DestroyIcon
LoadStringA
GetSysColorBrush
GetMenuStringA
InsertMenuA
UnregisterClassA
wvsprintfA
LockWindowUpdate
EnumChildWindows
EndDialog
CreateDialogIndirectParamA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetClassNameA
GetSysColor
GrayStringA
DrawTextA
TabbedTextOutA
GetClientRect
SetRectEmpty
GetCapture
ReleaseCapture
SetCapture
LoadCursorA
PtInRect
GetSystemMetrics
RegisterClipboardFormatA
MoveWindow
ScreenToClient
IsChild
IsRectEmpty
IntersectRect
CreateMenu
DestroyMenu
GetMenuItemCount
GetMenu
GetSubMenu
GetMenuItemID
UpdateWindow
InflateRect
GetWindowRect
ShowWindow
OffsetRect
DrawEdge
CopyRect
SetParent
SetWindowPos
CallWindowProcA
DefWindowProcA
SetWindowLongA
DestroyWindow
UnhookWindowsHookEx
wsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetDCEx
GetDialogBaseUnits
GetDlgCtrlID
GetTabbedTextExtentA
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostMessageA
PostQuitMessage
InvalidateRect
SendMessageA
GetDC
ReleaseDC
GetActiveWindow
EnableWindow
GetDesktopWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FillRect
SetRect
GetWindowPlacement

gdi32

MoveToEx
GetCurrentPositionEx
CreateRectRgn
SetBkColor
PlayMetaFileRecord
GetObjectType
EnumMetaFile
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetMapMode
PatBlt
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectA
CopyMetaFileA
CreateDCA
GetTextMetricsA
GetTextExtentPoint32A
GetTextAlign
EnumFontFamiliesExA
UnrealizeObject
SetTextColor
GetClipBox
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CombineRgn
SelectClipRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetROP2
SetBkMode
GetStockObject
GetDeviceCaps
GetViewportOrgEx
CreateBitmap
SetMetaFileBitsEx
GetBitmapBits
GetObjectA
GetDIBits
Polygon
Ellipse
CreatePen
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SetBitmapDimensionEx
DeleteDC
SaveDC
LPtoDP
RestoreDC
SetViewportOrgEx
SetViewportExtEx
PlayMetaFile
CreateMetaFileA
CloseMetaFile
GetMetaFileBitsEx
SetMapMode
SetWindowExtEx
SetWindowOrgEx
SelectObject
Rectangle
DeleteObject
DeleteMetaFile

comdlg32

ChooseColorA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegQueryValueA
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA

shell32

ExtractIconA

comctl32

ord17

ole32

OleDuplicateData
ReadFmtUserTypeStg
CoDisconnectObject
StringFromCLSID
CreateOleAdviseHolder
CoTaskMemFree
OleSaveToStream
ReleaseStgMedium
CreateDataAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoTaskMemAlloc
CreateDataCache
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
ReadClassStm
OleLoadFromStream

olepro32

ord250
ord253
ord252
ord251
ord254

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
SysAllocStringLen
VariantCopy
VariantChangeType
VariantClear
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysFreeString
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f0aa553f93e0e2d9e9ceecae20a8317

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

olepro32

oleaut32

Exports

Exports

Sections

.text Size: 280KB - Virtual size: 276KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 56KB - Virtual size: 101KB

.rsrc Size: 16KB - Virtual size: 13KB

.reloc Size: 32KB - Virtual size: 29KB

.text
Size: 280KB - Virtual size: 276KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 56KB - Virtual size: 101KB

.rsrc
Size: 16KB - Virtual size: 13KB

.reloc
Size: 32KB - Virtual size: 29KB