05dceccd7b5598b9ef844d3e0bd7297e6f1a0f6ed70cd920f2194cfa27b69e59N

Sharing

Copy URL Twitter E-mail

General

Target

05dceccd7b5598b9ef844d3e0bd7297e6f1a0f6ed70cd920f2194cfa27b69e59N
Size

273KB
MD5

18ae30f666162575aaae957ad2815ec0
SHA1

281884a5a10eef38b315a292290a55d656db3c4e
SHA256

05dceccd7b5598b9ef844d3e0bd7297e6f1a0f6ed70cd920f2194cfa27b69e59
SHA512

a61726cf24d4f8285038fe7a19a9b96a751f9b79318727cdbd535c17475984b806891d1efadd26ca95d7c9d301418f9594b5829383ccf9344a77ec4d42eb2129
SSDEEP

6144:SCowzrHYIban+18SOKp4uyD09BIY1Xga:r9La+xpHygg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05dceccd7b5598b9ef844d3e0bd7297e6f1a0f6ed70cd920f2194cfa27b69e59N

Files

05dceccd7b5598b9ef844d3e0bd7297e6f1a0f6ed70cd920f2194cfa27b69e59N
.dll windows:4 windows x86 arch:x86

ead1ab787166cad791bcd26c3b3a61f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetWindowLongA
CharNextA
CreateWindowExA
DrawIcon
EndPaint
GetClassInfoExA
GetClientRect
GetFocus
GetKeyState
GetParent
GetWindowLongA
InvalidateRect
IsChild
IsGUIThread
UnionRect
SwitchToThisWindow
ShowWindow
SetWindowRgn
SetWindowPos
BeginPaint
SetFocus
ReleaseDC
RegisterClassExA
PtInRect
OffsetRect
IsWindow

advapi32

LsaEnumeratePrivilegesOfAccount
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

ole32

CoCreateInstance
CoCreateInstanceEx
CoImpersonateClient
CoTaskMemAlloc
CreateDataAdviseHolder
CreateOleAdviseHolder
OleLoadFromStream
OleNoteObjectVisible
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleSaveToStream
WriteClassStm

kernel32

IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetHandleCount
SetLastError
SizeofResource
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
HeapCreate
lstrlenW
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindResourceA
FlushInstructionCache
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
IsProcessorFeaturePresent
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByte
IsDebuggerPresent
WriteFile

gdi32

Rectangle
SaveDC
GetDeviceCaps
GdiPlayPageEMF
DeleteMetaFile
CreateRectRgnIndirect
CreateMetaFileA
CreateCompatibleDC
RestoreDC
TextOutA
SetTextAlign
SetWindowExtEx
SetWindowOrgEx
CloseMetaFile
StretchBlt

oleaut32

LoadRegTypeLi
LoadTypeLi
OleCreatePropertyFrame
RegisterTypeLi
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayUnaccessData
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
UnRegisterTypeLi
VarUI4FromStr
VariantChangeType
VariantClear
VariantInit

Exports

Exports

FileEx
Occurred
Property_Type
ReadObjectFromFile
StringAFormat
filter_heuristics
free_default
set_tRNS_to_alpha

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ead1ab787166cad791bcd26c3b3a61f7

Headers

File Characteristics

Imports

user32

advapi32

ole32

kernel32

gdi32

oleaut32

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 50KB - Virtual size: 50KB

.rsrc Size: 56KB - Virtual size: 56KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 50KB - Virtual size: 50KB

.rsrc
Size: 56KB - Virtual size: 56KB

.reloc
Size: 10KB - Virtual size: 9KB