b837ac9220191cc1ce030a1e52e3dd719339414501edc66fc3185c49c19737bc

Sharing

Copy URL

Twitter E-mail

General

Target

b837ac9220191cc1ce030a1e52e3dd719339414501edc66fc3185c49c19737bc
Size

2.7MB
MD5

c6264bc13aefbf28aa7f75bec6d39df5
SHA1

f27724e6a36ceafcf8b6c0935d9fc5f035f23de0
SHA256

b837ac9220191cc1ce030a1e52e3dd719339414501edc66fc3185c49c19737bc
SHA512

c2731facc2b39629001a19120d8914c13ebf9b03045dcf994533a75611d567c501768cbb7a045c6aea32482ea6d5aa43b15846b3dccca9f83e8a31d275d3c1c3
SSDEEP

49152:nBmVBsw/gbxqs6zg92Lrirtwkpl7sv0V/jOlIGr:n4pA0sMv6RwkX7svplI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b837ac9220191cc1ce030a1e52e3dd719339414501edc66fc3185c49c19737bc

Files

b837ac9220191cc1ce030a1e52e3dd719339414501edc66fc3185c49c19737bc
.dll windows:5 windows x86 arch:x86

18fbce1a3bc5d2121b689f7945609ee9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

SHFileOperationW

user32

SetWindowsHookExA
SetWinEventHook
SetMenuDefaultItem
LoadBitmapW
SetClassLongW
EnumDesktopsA
GetWindowTextLengthA
BroadcastSystemMessageA
GetQueueStatus
GetTabbedTextExtentW
GetTopWindow
IsClipboardFormatAvailable
ChildWindowFromPoint
ModifyMenuW
GetPropW

shlwapi

PathStripToRootA
PathRemoveBlanksA
PathGetArgsA
PathBuildRootW
PathIsRelativeA
StrRChrIA
StrChrNW
PathFindSuffixArrayW

wininet

InternetAutodial
InternetConnectW
InternetQueryOptionW

kernel32

GetComputerNameW
CreateMutexW
CreateFileW
SetConsoleScreenBufferSize
EnterCriticalSection
CancelIo
LocalHandle
GetPrivateProfileSectionNamesA
QueryDosDeviceA
GetModuleFileNameW
GetBinaryTypeW
QueryActCtxW
GetModuleFileNameA
GetModuleHandleW
GetStdHandle
GetSystemPowerStatus
FreeEnvironmentStringsA
CommConfigDialogA
WideCharToMultiByte
GetSystemTime
GetCurrentActCtx
FillConsoleOutputCharacterW
DeleteTimerQueue
OutputDebugStringA
VerifyVersionInfoW
lstrcmpW

msvfw32

DrawDibGetPalette
ICDraw

avifil32

AVIStreamInfoW

rasapi32

RasGetEapUserIdentityA
RasGetProjectionInfoA
RasGetErrorStringA

gdi32

PathToRegion
SetWindowOrgEx
GetGraphicsMode
CreateCompatibleBitmap
SetTextJustification
PolyTextOutA
GetSystemPaletteEntries
CreateFontW
CloseMetaFile
CreateHatchBrush
StartDocW
SetWorldTransform

iphlpapi

IcmpCreateFile

netapi32

DsGetDcNameW

advapi32

SetSecurityDescriptorDacl
InitializeSid
GetEffectiveRightsFromAclW
InitiateSystemShutdownExW
InitializeSecurityDescriptor
OpenServiceA
RegCreateKeyA
RegUnLoadKeyW
AddAce
ClearEventLogW
ObjectCloseAuditAlarmA

setupapi

SetupTermDefaultQueueCallback
CM_Locate_DevNodeW
SetupOpenInfFileW
SetupDiGetDeviceRegistryPropertyW
SetupDiRegisterDeviceInfo
CM_Free_Res_Des_Handle
CM_Add_Res_Des

secur32

MakeSignature

winmm

mmioSeek
GetDriverModuleHandle

msvcrt

feof
iswpunct

crypt32

CertEnumCRLsInStore
CryptFindCertificateKeyProvInfo
CertDuplicateStore
CertGetCertificateChain
CertStrToNameW
CryptSIPLoad

ws2_32

bind
getpeername
ntohl

winspool.drv

AddPrinterW
AbortPrinter

oleaut32

SystemTimeToVariantTime
VariantChangeTypeEx
BSTR_UserSize

rpcrt4

RpcServerUnregisterIf
RpcMgmtEpEltInqNextW

comctl32

CreateToolbarEx
DestroyPropertySheetPage

wintrust

WinVerifyTrust

clusapi

ClusterRegDeleteValue

mprapi

MprConfigInterfaceSetInfo
MprAdminInterfaceTransportRemove
MprAdminInterfaceGetCredentials
MprAdminInterfaceGetInfo
MprConfigTransportGetInfo

ole32

OleSetContainedObject
CoResumeClassObjects
CoGetObjectContext
OleUninitialize
OleGetAutoConvert
OleLoadFromStream
GetRunningObjectTable
StgCreateStorageEx
CoQueryClientBlanket
GetClassFile
OleSave

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18fbce1a3bc5d2121b689f7945609ee9

Headers

DLL Characteristics

File Characteristics

Imports

shell32

user32

shlwapi

wininet

kernel32

msvfw32

avifil32

rasapi32

gdi32

iphlpapi

netapi32

advapi32

setupapi

secur32

winmm

msvcrt

crypt32

ws2_32

winspool.drv

oleaut32

rpcrt4

comctl32

wintrust

clusapi

mprapi

ole32

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.CRT Size: 4KB - Virtual size: 3KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 104KB - Virtual size: 103KB

.crt Size: 12KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 32KB - Virtual size: 29KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.CRT
Size: 4KB - Virtual size: 3KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 104KB - Virtual size: 103KB

.crt
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 32KB - Virtual size: 29KB