8891f93545d4ec1c40a5b32553000e83e411b252b7cb19747c1b7d601806f23dN

Sharing

Copy URL Twitter E-mail

General

Target

8891f93545d4ec1c40a5b32553000e83e411b252b7cb19747c1b7d601806f23dN
Size

109KB
MD5

996dcf6dd84a66dc835d0bcf4cc0bea0
SHA1

fbeb81aa3b1290d1ec0ff9238dae7bcb1f0aef31
SHA256

8891f93545d4ec1c40a5b32553000e83e411b252b7cb19747c1b7d601806f23d
SHA512

dc0aaffeec432fd2953c974e1125d6aa298c5ae9d48a7be71ce3ead1a962b22e717acd42bda469292066df2e8d1f727747e4499e4e549bee6d8e0faf15600086
SSDEEP

3072:zGaTiUu4iZ10wIFvsluF7QABxbe3ZEwpe1KK:vLiZ109N6QQH36Ue1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/puiobj.dll

Files

8891f93545d4ec1c40a5b32553000e83e411b252b7cb19747c1b7d601806f23dN
.cab
puiobj.dll
.dll regsvr32 windows:5 windows x86 arch:x86

aeb145dfb652978598d73e121ca66c48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

puiobj.pdb

Imports

msvcrt

__dllonexit
_onexit
_adjust_fdiv
wcslen
_initterm
_wtoi
_itow
wcschr
??3@YAXPAX@Z
_wcsicmp
wcscmp
swscanf
_vsnwprintf
??2@YAPAXI@Z
realloc
free
malloc
_except_handler3

kernel32

LeaveCriticalSection
EnterCriticalSection
HeapDestroy
lstrcpynW
GetModuleFileNameW
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcatW
lstrlenA
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
SetLastError
RaiseException
CloseHandle
Sleep
CreateEventW
QueueUserWorkItem
FileTimeToSystemTime
GetTimeZoneInformation
lstrcmpiW
SystemTimeToFileTime
GetTimeFormatW
GetLocalTime
GetDateFormatW
SystemTimeToTzSpecificLocalTime
SetEnvironmentVariableW
GetEnvironmentVariableW
GlobalAlloc
GlobalUnlock
GlobalLock
FreeResource
GlobalFree
GlobalHandle
LockResource
lstrcmpW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
VirtualFree
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrcpyW
lstrlenW
MultiByteToWideChar
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetVersionExW
DisableThreadLibraryCalls
GetLastError
SetEvent
FreeLibraryAndExitThread
WaitForSingleObject
CreateThread
GetUserDefaultUILanguage
GetLocaleInfoW
EnumUILanguagesW
GetWindowsDirectoryW
CompareFileTime
GetModuleHandleW

ole32

GetHGlobalFromStream
ReleaseStgMedium
IIDFromString
StringFromIID
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CLSIDFromString
CLSIDFromProgID
OleLockRunning
StringFromCLSID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateOleAdviseHolder

advapi32

RegNotifyChangeKeyValue
RegCreateKeyW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW

user32

InvalidateRgn
GetDesktopWindow
EndPaint
FillRect
BeginPaint
RedrawWindow
GetClassNameW
CreateAcceleratorTableW
GetFocus
IsChild
SetFocus
ShowWindow
InvalidateRect
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
DestroyAcceleratorTable
GetKeyState
IsWindow
SetCapture
DefWindowProcW
SetWindowLongW
UnionRect
PtInRect
GetDC
ReleaseDC
CharPrevW
LoadMenuW
GetSubMenu
RemoveMenu
RegisterClipboardFormatW
CreateDialogParamW
CreateWindowExW
DestroyWindow
CharNextW
ReleaseCapture
GetSysColor
CreateDialogIndirectParamW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
GetWindow
EnableMenuItem
DeleteMenu
CreatePopupMenu
AppendMenuW
GetCursorPos
TrackPopupMenu
MessageBoxW
DestroyMenu
EndDialog
GetDlgItem
GetSystemMetrics
GetWindowRect
GetClientRect
SendMessageW
CopyRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
PostMessageW
PeekMessageW
RegisterClassW
SetTimer
CallWindowProcW
GetParent
GetWindowLongW

gdi32

CreateSolidBrush
DeleteObject
DeleteDC
SetViewportOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
GetObjectW
GetStockObject
GetTextMetricsW
CreateRectRgnIndirect
CreateDCW
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
RestoreDC

winspool.drv

EnumPortsW
EnumFormsW
XcvDataW
FreePrinterNotifyInfo
EnumPrinterDriversW
EnumJobsW
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
OpenPrinterW
FindClosePrinterChangeNotification
ClosePrinter
EnumPrintersW
SetJobW

oleaut32

SysFreeString
VARIANT_UserUnmarshal
VARIANT_UserMarshal
VARIANT_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysAllocString
UnRegisterTypeLi
LoadTypeLi
RegisterTypeLi
SysStringLen
VarUI4FromStr
VariantClear
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
LoadRegTypeLi
OleCreatePropertyFrame
SysAllocStringLen
VARIANT_UserFree

shlwapi

ord219
ord174
StrFormatByteSizeW

rpcrt4

NdrDllCanUnloadNow
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
CStdStubBuffer_CountRefs
NdrDllGetClassObject
CStdStubBuffer_IsIIDSupported
NdrStubCall2
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
NdrStubForwardingFunction

uxtheme

EnableThemeDialogTexture

puiapi

XMLAPI_SetAttributeULongLong
PINFOSETIDLIST_Close
STRAPI_String2GUID
XMLAPI_SetAttributeString
XMLAPI_SetAttributeDouble
XMLAPI_GetAttributeULongLong
XMLAPI_GetAttributeDouble
XMLAPI_SetAttributeLong
XMLAPI_GetAttributeLong
HPROPERTY_Close
STRBUF_Create
PUIAPI_GetErrorString
STRBUF_AppendString
STRBUF_CreateBSTR
PUIAPI_ShowDetailsMessageBox
STRAPI_FormatMsgV
STRAPI_FormatMsg
STRAPI_GetJobStatusString
STRAPI_LoadString
STRBUF_Destroy
PUIAPI_GetPrinter
PUIAPI_IWaitNotify_RegisterWaitObject
PUIAPI_CreateInstance
STRAPI_CrackPrintUNCName
PINFOSETIDLIST_Copy
PUIAPI_IWaitNotify_RegisterTimer
PUIAPI_IWaitNotify_UnregisterCookie
XMLAPI_GetAttributeString
STRAPI_Format
STRAPI_GUID2String

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aeb145dfb652978598d73e121ca66c48

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

ole32

advapi32

user32

gdi32

winspool.drv

oleaut32

shlwapi

rpcrt4

uxtheme

puiapi

Exports

Exports

Sections

.text Size: 187KB - Virtual size: 187KB

.orpc Size: 1024B - Virtual size: 806B

.data Size: 6KB - Virtual size: 8KB

.rsrc Size: 95KB - Virtual size: 95KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 187KB - Virtual size: 187KB

.orpc
Size: 1024B - Virtual size: 806B

.data
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 95KB - Virtual size: 95KB

.reloc
Size: 13KB - Virtual size: 13KB