5bf51295cdef4adcdb74980aeb9c65f4193b2b339a42dbaa19a1e54bf1d32bf6N

Sharing

Copy URL

Twitter E-mail

General

Target

5bf51295cdef4adcdb74980aeb9c65f4193b2b339a42dbaa19a1e54bf1d32bf6N
Size

210KB
MD5

259ce9c8b4ecf09fd892e4008debe650
SHA1

02b9bf287bf94da3fc7578aee85dcc7dace4c4a7
SHA256

5bf51295cdef4adcdb74980aeb9c65f4193b2b339a42dbaa19a1e54bf1d32bf6
SHA512

14c0273385d591ea56706be4320a2fd7c57ec983494ac3c6a5692dd3e8cd75b3428ac65cee7df973a479d3478cd7c47fa57f3248762ff0c333854efd737f1ed0
SSDEEP

3072:z533IetvN7AFT/b4iQ95T3ZZkLB/IHNnIg72DTcKTaLVQNpdmXOxPgfv:xYez7AFf4d9dspC6THaLISaPg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf51295cdef4adcdb74980aeb9c65f4193b2b339a42dbaa19a1e54bf1d32bf6N

Files

5bf51295cdef4adcdb74980aeb9c65f4193b2b339a42dbaa19a1e54bf1d32bf6N
.dll windows:4 windows x86 arch:x86

5a7413851417f6c30249d3569693df6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
lstrcpynA
WaitForSingleObject
CloseHandle
CreateEventA
SetEvent
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
FreeLibrary
lstrcpyA
MultiByteToWideChar
LoadLibraryA
GlobalLock
SetErrorMode
lstrcmpA
GetModuleFileNameA
lstrlenA
MulDiv
InitializeCriticalSection
GetVersion
DeleteCriticalSection
GlobalHandle
GlobalSize
GlobalFlags
OpenFile
GlobalUnlock
GetLocaleInfoW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFilePointer
SetStdHandle
FlushFileBuffers
LCMapStringW
LCMapStringA
VirtualAlloc
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetStdHandle
GetFileType
SetHandleCount
VirtualFree
HeapCreate
HeapDestroy
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
HeapAlloc
TlsGetValue
SetLastError
TlsFree
TlsAlloc
HeapFree
GetModuleHandleA
GetCommandLineA
GetCurrentThreadId
GetDriveTypeA
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
ExitThread
TlsSetValue
CreateThread
GetLastError
ResumeThread

user32

wsprintfA
SetRect

gdi32

DeleteObject

ltkrn13n

ord108
ord133
ord112
ord148
ord241
ord123
ord128
ord171
ord312
ord193
ord246
ord247
ord287
ord238
ord135
ord165
ord276
ord272
ord271
ord274
ord100
ord183
ord175
ord131
ord265
ord266
ord267
ord279
ord140
ord263
ord232
ord237
ord236
ord141
ord234
ord230
ord134
ord231
ord158
ord173
ord156
ord154
ord221
ord214
ord129
ord101
ord219
ord215
ord308
ord311
ord325
ord160
ord152
ord121
ord310
ord203
ord210
ord243
ord189
ord191
ord190
ord196
ord188
ord284
ord194
ord179
ord174
ord138
ord137
ord116
ord151
ord125
ord285
ord283
ord282
ord273
ord280

Exports

Exports

DllMain
L_2DGetViewMode
L_2DGetViewport
L_2DSetViewMode
L_2DSetViewport
L_CompressBuffer
L_CopyMarkers
L_CreateMarkers
L_CreateThumbnailFromFile
L_DecompressBuffer
L_DeleteMarker
L_DeleteMarkerIndex
L_DeletePage
L_DocFeedLoad
L_DocLoadFile
L_DocLoadMemory
L_DocSaveFile
L_DocSaveMemory
L_DocStartFeedLoad
L_DocStopFeedLoad
L_EndCompressBuffer
L_EnumMarkers
L_FeedLoad
L_FileConvert
L_FileInfo
L_FileInfoMemory
L_FreeExtensions
L_FreeMarkers
L_GetAutoCADFilesColorScheme
L_GetComment
L_GetDefaultJ2KOptions
L_GetDefaultLoadFileOption
L_GetDefaultSaveFileOption
L_GetExtensionAudio
L_GetFileCommentSize
L_GetJ2KOptions
L_GetLoadInfoCallbackData
L_GetLoadResolution
L_GetMarker
L_GetMarkerCount
L_GetMarkers
L_GetOverlayCallback
L_GetPCDResolution
L_GetPDFInitDir
L_GetPDFOptions
L_GetPLTOptions
L_GetPTKOptions
L_GetRTFOptions
L_GetSaveResolution
L_GetTag
L_GetWMFResolution
L_GetWMFResolutionEx
L_IgnoreFilters
L_InsertMarker
L_LoadBitmap
L_LoadBitmapList
L_LoadBitmapMemory
L_LoadBitmapResize
L_LoadCustomFile
L_LoadExtensionStamp
L_LoadFile
L_LoadFileOffset
L_LoadFileTile
L_LoadLayer
L_LoadMarkers
L_LoadMemory
L_LoadMemoryTile
L_MarkerCallbackProxy
L_PreLoadFilters
L_ReadFileComment
L_ReadFileCommentExt
L_ReadFileCommentMemory
L_ReadFileExtensions
L_ReadFileStamp
L_ReadFileTag
L_ReadFileTagMemory
L_ReadFileTransforms
L_ReadLoadResolutions
L_SaveBitmap
L_SaveBitmapBuffer
L_SaveBitmapList
L_SaveBitmapMemory
L_SaveBitmapWithLayers
L_SaveCustomFile
L_SaveData
L_SaveFile
L_SaveFileBuffer
L_SaveFileMemory
L_SaveFileOffset
L_SaveFileTile
L_SetAutoCADFilesColorScheme
L_SetComment
L_SetJ2KOptions
L_SetLoadInfoCallback
L_SetLoadResolution
L_SetMarkers
L_SetOverlayCallback
L_SetPCDResolution
L_SetPDFInitDir
L_SetPDFOptions
L_SetPLTOptions
L_SetPTKOptions
L_SetRTFOptions
L_SetSaveResolution
L_SetTag
L_SetWMFResolution
L_SetWMFResolutionEx
L_StartCompressBuffer
L_StartDecompressBuffer
L_StartFeedLoad
L_StartRedirectMemory
L_StartRedirectOffset
L_StartSaveData
L_StartSaveRedirectMemory
L_StopDecompressBuffer
L_StopFeedLoad
L_StopRedirectMemory
L_StopRedirectOffset
L_StopSaveData
L_TransformFile
L_VecAddFontMapper
L_VecFeedLoad
L_VecGetFontMapperLinkList
L_VecLoadFile
L_VecLoadMemory
L_VecRemoveFontMapper
L_VecSaveFile
L_VecSaveMemory
L_VecStartFeedLoad
L_VecStopFeedLoad
L_WriteFileComment
L_WriteFileCommentExt
L_WriteFileMetaData
L_WriteFileStamp
L_WriteFileTag
L_WriteFileTransforms

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a7413851417f6c30249d3569693df6e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ltkrn13n

Exports

Exports

Sections

.text Size: 114KB - Virtual size: 114KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 13KB - Virtual size: 34KB

.idata Size: 63KB - Virtual size: 62KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 114KB - Virtual size: 114KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 13KB - Virtual size: 34KB

.idata
Size: 63KB - Virtual size: 62KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB