7db7ef21683cde7160f7f2cc6c45237a97122a8ecabed48a8e3a5984a7d60c52N

Sharing

Copy URL Twitter E-mail

General

Target

7db7ef21683cde7160f7f2cc6c45237a97122a8ecabed48a8e3a5984a7d60c52N
Size

74KB
MD5

4e1e509b97695d721cdf7aa5d1708ee0
SHA1

6d9d74752507f400ed423d5b0a276cba9fff20a7
SHA256

7db7ef21683cde7160f7f2cc6c45237a97122a8ecabed48a8e3a5984a7d60c52
SHA512

d1fde579d592052c0e85db84113003df534a1eb1d51f669f5ff5db8379f15fb6130692ec604a030de1d35ad24d5e42f705de247645b90f4ff6a9fa8603f12186
SSDEEP

1536:Hxt2nYqnGv6qsbohUwONJV6e/oCoOnY93Eek:HxoXoWnrV6e/oCoOnQ35k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7db7ef21683cde7160f7f2cc6c45237a97122a8ecabed48a8e3a5984a7d60c52N

Files

7db7ef21683cde7160f7f2cc6c45237a97122a8ecabed48a8e3a5984a7d60c52N
.dll windows:5 windows x86 arch:x86

3c766cf08702489601bc4cf8a57f352f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc100

ord12644
ord2847
ord8351
ord9994
ord6217
ord11154
ord8070
ord13294
ord10883
ord3395
ord11025
ord8235
ord13973
ord13972
ord14045
ord14062
ord14058
ord14060
ord14061
ord14059
ord2417
ord7349
ord2878
ord2881
ord12535
ord5534
ord1292
ord13219
ord3839
ord7490
ord12702
ord4785
ord1483
ord5207
ord12258
ord1316
ord901
ord4144
ord306
ord1315
ord1448
ord4283
ord316
ord2013
ord1939
ord2611
ord12720
ord3390
ord4381
ord266
ord946
ord383
ord5803
ord8305
ord2846
ord2416
ord12531
ord5532
ord2752
ord2973
ord2974
ord3620
ord10360
ord10007
ord11067
ord3373
ord3254
ord11190
ord9475
ord11107
ord7933
ord11882
ord782
ord1313
ord2119
ord7832
ord310
ord6678
ord7487
ord7193
ord781
ord1435
ord1479
ord2061
ord722
ord1173
ord7322
ord6010
ord11744
ord1331
ord1267
ord2617
ord869
ord300
ord7190
ord6628
ord7266
ord4393
ord4389
ord4385
ord4415
ord4406
ord4377
ord4419
ord4398
ord4364
ord4368
ord4401
ord3991
ord13980
ord3984
ord2661
ord13302
ord7074
ord13300
ord6128
ord10672
ord12482
ord5253
ord2338
ord11060
ord3484
ord2945
ord2944
ord11103
ord4622
ord4903
ord5095
ord8439
ord4881
ord5123
ord4625
ord4774
ord4606
ord11188
ord1496
ord1503
ord1509
ord1507
ord1514
ord4373
ord4738
ord4410
ord5444
ord6897
ord6898
ord6888
ord4772
ord7357
ord9286
ord8304
ord895
ord2872
ord6637
ord1929
ord1948
ord408
ord2050
ord1294
ord2084
ord1296

msvcr100

_encoded_null
free
malloc
_CxxThrowException
__CxxFrameHandler3
_malloc_crt
?terminate@@YAXXZ
_mbctoupper
atoi
_initterm
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_amsg_exit
_initterm_e

kernel32

InterlockedCompareExchange
InterlockedDecrement
EncodePointer
DecodePointer
InterlockedExchange
LocalFree
lstrlenA
MultiByteToWideChar
GetLastError
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount

user32

GetDlgItem
IsWindowEnabled
EnableWindow
UpdateWindow
GetWindowRect
SendMessageA
PeekMessageA
IsWindow

oleaut32

VariantClear
SysAllocString
SysFreeString

Exports

Exports

??0COWBWebBrowser@@QAE@XZ
??0COWBWebForm@@QAE@XZ
??0COWBWebForm_Hal@@QAE@XZ
??0CWebBrowser2@@QAE@XZ
??1COWBWebBrowser@@UAE@XZ
??1COWBWebForm@@UAE@XZ
??1COWBWebForm_Hal@@UAE@XZ
??1CWebBrowser2@@UAE@XZ
??_7COWBWebBrowser@@6B@
??_7COWBWebForm@@6B@
??_7COWBWebForm_Hal@@6B@
??_7CWebBrowser2@@6B@
?Ac@COWBWebForm@@MAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00@Z
?Ac@COWBWebForm@@MAEHXZ
?Ac@COWBWebForm_Hal@@UAEHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00@Z
?Ac@COWBWebForm_Hal@@UAEHXZ
?AlaniBul@COWBWebForm@@IAEPAVCOWBWebFormAlani@@H@Z
?Baglan@COWBWebForm@@MAEHPBD@Z
?Baglan@COWBWebForm@@MAEHXZ
?Baglan@COWBWebForm_Hal@@UAEHXZ
?Basla@COWBWebForm@@UAEXXZ
?CheckErrorMessage@COWBWebBrowser@@UAEHXZ
?CheckErrorMessage@COWBWebForm_Hal@@MAEHXZ
?CheckServerError@COWBWebBrowser@@UAEHXZ
?CheckServerError@COWBWebForm_Hal@@MAEHXZ
?CheckWaitMessage@COWBWebBrowser@@UAEHXZ
?CheckWaitMessage@COWBWebForm_Hal@@MAEHXZ
?ClearStatus@COWBWebBrowser@@QAEXXZ
?Click@COWBWebBrowser@@QAEHPBD0@Z
?Click@COWBWebBrowser@@QAEHPBDH@Z
?ClickMenuItem@COWBWebBrowser@@QAEHPBD@Z
?ClientToWindow@CWebBrowser2@@QAEXPAJ0@Z
?Create@CWebBrowser2@@QAEHPBDKABUtagRECT@@PAVCWnd@@IPAVCFile@@HPA_W@Z
?Create@CWebBrowser2@@UAEHPBD0KABUtagRECT@@PAVCWnd@@IPAUCCreateContext@@@Z
?CreateObject@CWebBrowser2@@SGPAVCObject@@XZ
?DebugMessagesOn@COWBWebBrowser@@QAEXXZ
?DegeriOku@COWBWebForm@@UAEHHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DegeriYaz@COWBWebForm@@UAEHHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?DoDataExchange@COWBWebBrowser@@MAEXPAVCDataExchange@@@Z
?ExecWB@CWebBrowser2@@QAEXJJPAUtagVARIANT@@0@Z
?FindElement@COWBWebBrowser@@IAEPAUIDispatch@@PBD0@Z
?FindElementByClass@COWBWebBrowser@@IAEPAUIDispatch@@PBD00@Z
?FindElementByInnerText@COWBWebBrowser@@IAEPAUIDispatch@@PBD0@Z
?FormNoyuSoyle@COWBWebForm@@MAEHPAH@Z
?FormNoyuSoyle@COWBWebForm_Hal@@MAEHPAH@Z
?FormuGetir@COWBWebForm@@IAEHHH@Z
?GetAddressBar@CWebBrowser2@@QAEHXZ
?GetApplication@CWebBrowser2@@QAEPAUIDispatch@@XZ
?GetBusy@COWBWebBrowser@@QAEHXZ
?GetBusy@CWebBrowser2@@QAEHXZ
?GetClsid@CWebBrowser2@@QAEABU_GUID@@XZ
?GetContainer@CWebBrowser2@@QAEPAUIDispatch@@XZ
?GetDocument@CWebBrowser2@@QAEPAUIDispatch@@XZ
?GetElementAttribute@COWBWebBrowser@@QAEHPAUIDispatch@@PBDPAUtagVARIANT@@@Z
?GetElementOuterHTML@COWBWebBrowser@@QAEHPBD00AAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetElementTextAndAttribute@COWBWebBrowser@@QAEHPBDAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0PAUtagVARIANT@@@Z
?GetElementTextByClass@COWBWebBrowser@@QAEHPBD0AAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetElementTextById@COWBWebBrowser@@QAEHPBD0AAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@1@Z
?GetEventSinkMap@COWBWebBrowser@@MBEPBUAFX_EVENTSINKMAP@@XZ
?GetFullName@CWebBrowser2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetFullScreen@CWebBrowser2@@QAEHXZ
?GetHeight@CWebBrowser2@@QAEJXZ
?GetHiddenText@COWBWebBrowser@@QAEHPBDAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetHtmlDocument@COWBWebBrowser@@QAEPAUIDispatch@@XZ
?GetHwnd@CWebBrowser2@@QAEJXZ
?GetLeft@CWebBrowser2@@QAEJXZ
?GetLocationName@CWebBrowser2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetLocationURL@CWebBrowser2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetMenuBar@CWebBrowser2@@QAEHXZ
?GetMessageMap@COWBWebBrowser@@MBEPBUAFX_MSGMAP@@XZ
?GetName@CWebBrowser2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetOffline@CWebBrowser2@@QAEHXZ
?GetParent@CWebBrowser2@@QAEPAUIDispatch@@XZ
?GetPath@CWebBrowser2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetProperty_@CWebBrowser2@@QAE?AUtagVARIANT@@PBD@Z
?GetReadyState@COWBWebBrowser@@QAEJXZ
?GetReadyState@CWebBrowser2@@QAEJXZ
?GetRegisterAsBrowser@CWebBrowser2@@QAEHXZ
?GetRegisterAsDropTarget@CWebBrowser2@@QAEHXZ
?GetResizable@CWebBrowser2@@QAEHXZ
?GetRuntimeClass@CWebBrowser2@@UBEPAUCRuntimeClass@@XZ
?GetSelectionIndex@COWBWebBrowser@@QAEHPBDPAJ@Z
?GetSelectionIndex@COWBWebBrowser@@QAEXPAUIDispatch@@PAJ@Z
?GetSelectionOptions@COWBWebBrowser@@QAEHPBDAAVCStringArray@@PAPAUIDispatch@@@Z
?GetSelectionValue@COWBWebBrowser@@QAEHPBDAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetSelectionValue@COWBWebBrowser@@QAEXPAUIDispatch@@AAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetSilent@CWebBrowser2@@QAEHXZ
?GetStatusBar@CWebBrowser2@@QAEHXZ
?GetStatusText@CWebBrowser2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetTableRowCount@COWBWebBrowser@@QAEHPBDPAJ@Z
?GetTableText@COWBWebBrowser@@QAEHPBDJHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetText@COWBWebBrowser@@QAEHPBDAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?GetTheaterMode@CWebBrowser2@@QAEHXZ
?GetThisClass@CWebBrowser2@@SGPAUCRuntimeClass@@XZ
?GetThisEventSinkMap@COWBWebBrowser@@KGPBUAFX_EVENTSINKMAP@@XZ
?GetThisMessageMap@COWBWebBrowser@@KGPBUAFX_MSGMAP@@XZ
?GetToolBar@CWebBrowser2@@QAEJXZ
?GetTop@CWebBrowser2@@QAEJXZ
?GetTopLevelContainer@CWebBrowser2@@QAEHXZ
?GetType@CWebBrowser2@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetVisible@CWebBrowser2@@QAEHXZ
?GetWidth@CWebBrowser2@@QAEJXZ
?GoBack@COWBWebBrowser@@QAEHXZ
?GoBack@CWebBrowser2@@QAEXXZ
?GoForward@COWBWebBrowser@@QAEHXZ
?GoForward@CWebBrowser2@@QAEXXZ
?GoHome@CWebBrowser2@@QAEXXZ
?GoSearch@CWebBrowser2@@QAEXXZ
?Goster@COWBWebForm@@UAEHH@Z
?HatayiSoyle@COWBWebForm@@UAEHPAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?IgnoreError@COWBWebBrowser@@QAEXXZ
?IlkSayfayiBul@COWBWebForm@@MAEHXZ
?IlkSayfayiBul@COWBWebForm_Hal@@UAEHXZ
?Kaydet@COWBWebForm@@UAEHXZ
?MesajYaz@COWBWebForm@@QAEXPBD@Z
?MesajlariSifirla@COWBWebForm@@QAEXXZ
?Navigate2@CWebBrowser2@@QAEXPAUtagVARIANT@@0000@Z
?Navigate@COWBWebBrowser@@QAEHPBDK@Z
?Navigate@CWebBrowser2@@QAEXPBDPAUtagVARIANT@@111@Z
?OnCancel@COWBWebBrowser@@MAEXXZ
?OnClose@COWBWebBrowser@@IAEXXZ
?OnCommandStateChangeWebBrowser@COWBWebBrowser@@IAEXJH@Z
?OnDocumentCompleteWebBrowser@COWBWebBrowser@@IAEXPAUIDispatch@@PAUtagVARIANT@@@Z
?OnDownloadBeginWebBrowser@COWBWebBrowser@@IAEXXZ
?OnDownloadCompleteWebBrowser@COWBWebBrowser@@IAEXXZ
?OnInitDialog@COWBWebBrowser@@MAEHXZ
?OnInitDialog@COWBWebForm@@MAEHXZ
?OnNavigateComplete2WebBrowser@COWBWebBrowser@@IAEXPAUIDispatch@@PAUtagVARIANT@@@Z
?OnNavigateErrorWebBrowser@COWBWebBrowser@@IAEXPAUIDispatch@@PAUtagVARIANT@@11PAH@Z
?OnProgressChangeWebBrowser@COWBWebBrowser@@IAEXJJ@Z
?OnSize@COWBWebBrowser@@IAEXIHH@Z
?PreTranslateMessage@COWBWebBrowser@@UAEHPAUtagMSG@@@Z
?ProcessMessages@COWBWebBrowser@@IAEXXZ
?PutMessageText@COWBWebBrowser@@QAEXPBD@Z
?PutProperty@CWebBrowser2@@QAEXPBDABUtagVARIANT@@@Z
?PutSelectionIndex@COWBWebBrowser@@QAEHPBDJ@Z
?PutSelectionIndex@COWBWebBrowser@@QAEXPAUIDispatch@@J@Z
?PutSelectionValue@COWBWebBrowser@@QAEHPBDAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?PutSelectionValue@COWBWebBrowser@@QAEXPAUIDispatch@@AAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?PutStatusText@COWBWebBrowser@@QAEXPBD@Z
?PutText@COWBWebBrowser@@QAEHPBDAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PAPAUIDispatch@@@Z
?QueryStatusWB@CWebBrowser2@@QAEJJ@Z
?Quit@CWebBrowser2@@QAEXXZ
?Refresh2@CWebBrowser2@@QAEXPAUtagVARIANT@@@Z
?Refresh@COWBWebBrowser@@QAEHXZ
?Refresh@CWebBrowser2@@QAEXXZ
?ScrollIntoView@COWBWebBrowser@@QAEHPBD0@Z
?Sec@COWBWebForm@@UAEHHHH@Z
?SecenekleriOku@COWBWebForm@@UAEHHAAVCStringArray@@@Z
?SectiktenSonra@COWBWebForm@@MAEXH@Z
?SectiktenSonra@COWBWebForm_Hal@@MAEXH@Z
?SetAddressBar@CWebBrowser2@@QAEXH@Z
?SetElementAttribute@COWBWebBrowser@@QAEHPAUIDispatch@@PBDPAUtagVARIANT@@@Z
?SetFullScreen@CWebBrowser2@@QAEXH@Z
?SetHeight@CWebBrowser2@@QAEXJ@Z
?SetLeft@CWebBrowser2@@QAEXJ@Z
?SetMenuBar@CWebBrowser2@@QAEXH@Z
?SetOffline@CWebBrowser2@@QAEXH@Z
?SetRegisterAsBrowser@CWebBrowser2@@QAEXH@Z
?SetRegisterAsDropTarget@CWebBrowser2@@QAEXH@Z
?SetResizable@CWebBrowser2@@QAEXH@Z
?SetSilent@CWebBrowser2@@QAEXH@Z
?SetStatusBar@CWebBrowser2@@QAEXH@Z
?SetStatusText@CWebBrowser2@@QAEXPBD@Z
?SetTheaterMode@CWebBrowser2@@QAEXH@Z
?SetToolBar@CWebBrowser2@@QAEXJ@Z
?SetTop@CWebBrowser2@@QAEXJ@Z
?SetVisible@CWebBrowser2@@QAEXH@Z
?SetWidth@CWebBrowser2@@QAEXJ@Z
?ShowBrowserBar@CWebBrowser2@@QAEXPAUtagVARIANT@@00@Z
?Stop@COWBWebBrowser@@QAEXXZ
?Stop@CWebBrowser2@@QAEXXZ
?TabloSatirSayisi@COWBWebForm@@UAEHHPAJ@Z
?TipeGoreAlaniBul@COWBWebForm@@IAEPAVCOWBWebFormAlani@@W4enumKontrolTipi@1@@Z
?WaitForElement@COWBWebBrowser@@IAEPAUIDispatch@@PBD0@Z
?WaitForElementChange@COWBWebBrowser@@QAEHPBDAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0AAVCOleVariant@@@Z
?WaitTillDownloadStarted@COWBWebBrowser@@QAEHK@Z
?WaitTillReady@COWBWebBrowser@@QAEHKH@Z
?YardimMesajiYaz@COWBWebForm@@QAEXPBD@Z
?YazdiktanSonra@COWBWebForm@@MAEXHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?YazdiktanSonra@COWBWebForm_Hal@@MAEXHAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?_GetBaseClass@CWebBrowser2@@KGPAUCRuntimeClass@@XZ
?_eventsinkEntries@COWBWebBrowser@@0QBUAFX_EVENTSINKMAP_ENTRY@@B
?_eventsinkEntryCount@COWBWebBrowser@@0IA
?classCWebBrowser2@CWebBrowser2@@2UCRuntimeClass@@B
?clsid@?1??GetClsid@CWebBrowser2@@QAEABU_GUID@@XZ@4U3@B
?eventsinkMap@COWBWebBrowser@@1UAFX_EVENTSINKMAP@@B

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c766cf08702489601bc4cf8a57f352f

Headers

DLL Characteristics

File Characteristics

Imports

mfc100

msvcr100

kernel32

user32

oleaut32

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB