c7beed8efbf2fc7f1c53b15808de83c6ab435110934adfd6cbf40081f478f4c7N

Sharing

Copy URL Twitter E-mail

General

Target

c7beed8efbf2fc7f1c53b15808de83c6ab435110934adfd6cbf40081f478f4c7N
Size

136KB
MD5

ff2fe8879b150eaa3a31fbba115acdd0
SHA1

dc59940ac29961c648083995b7874424f4b7a5b8
SHA256

c7beed8efbf2fc7f1c53b15808de83c6ab435110934adfd6cbf40081f478f4c7
SHA512

1feae1301081d590daa0409a3298f5fff4b6fc868b8f54c153807c1202c2524f9affc0306956416d482df71ebb169e41af00ed54a496bd9cebbb58e24818d9e3
SSDEEP

3072:HiW1qc2a/3O/IWmp7Q/Ss+sE/86+VE8C8kKlI6EUDSSj:HiW1nD/34IWm2+s36+VOJKl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7beed8efbf2fc7f1c53b15808de83c6ab435110934adfd6cbf40081f478f4c7N

Files

c7beed8efbf2fc7f1c53b15808de83c6ab435110934adfd6cbf40081f478f4c7N
.dll windows:5 windows x86 arch:x86

50569f189b716a543da0a16f0675fe4a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lclose
GetLastError
DeleteTimerQueueEx
GetStringTypeW
VirtualAlloc
GetProcAddress
HeapAlloc
VirtualProtect
WriteConsoleW
ExitThread
LoadLibraryW
OutputDebugStringA
lstrlenA
GetModuleHandleA
FreeLibrary
GetWindowsDirectoryA
VirtualFree
CopyFileExA
FindFirstFileW
GetCurrentProcess
CopyFileA

msvcrt

malloc
_exit
strncpy
memcpy
_except_handler3
__CxxFrameHandler
swprintf
wcscmp
__p__commode
wcscat
__winitenv
free
iswdigit
_wtol
_iob
_vsnprintf
wcslen
_wcmdln
wcscpy
_controlfp
_snwprintf
_adjust_fdiv
__initenv
_ftol
_purecall
__p__fmode
swscanf
_c_exit
_cexit
wcschr
__dllonexit

user32

UnregisterClassW
ClientToScreen
ScreenToClient
LoadMenuW
GetMenuItemCount
GetParent
LoadCursorA
LoadCursorW
DispatchMessageW
GetCursorPos
SendMessageA
SendMessageW
ReleaseDC
SetCapture
IsWindow
GetProcessWindowStation
DestroyWindow
CopyRect
ReleaseCapture
SetScrollPos
BeginPaint
MapWindowPoints
wsprintfW
CheckDlgButton
LoadImageW
RegisterClassA
DialogBoxParamA

gdi32

CreateFontIndirectW
Rectangle
RestoreDC
PatBlt
CreateBitmap
CreateCompatibleDC
TranslateCharsetInfo
SetBkMode
StretchBlt
SetTextColor

opengl32

glColor3ui
glTexCoord2dv
wglShareLists
glColor4i
glStencilMask
glFogfv
glColor4f
GlmfBeginGlsBlock
glTexCoord2d
glColor4d

Exports

Exports

MbmUbbkdurQicmn
TfbufkePmbyvqk
ZwPszbjiePisetg

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50569f189b716a543da0a16f0675fe4a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.crt Size: 512B - Virtual size: 17B

.edata Size: 512B - Virtual size: 124B

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 64KB - Virtual size: 63KB

.reloc Size: 512B - Virtual size: 102B

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.crt
Size: 512B - Virtual size: 17B

.edata
Size: 512B - Virtual size: 124B

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 64KB - Virtual size: 63KB

.reloc
Size: 512B - Virtual size: 102B