34582b67485c6b87fdf8b3f590d6443e88b19a01d4916d1aeab66a41416865ae

Sharing

Copy URL Twitter E-mail

General

Target

34582b67485c6b87fdf8b3f590d6443e88b19a01d4916d1aeab66a41416865ae
Size

157KB
MD5

27a0c1cdd24fcd84ea033c4277fb63fe
SHA1

1f70c76221c8cea13aab2502cad36388ab2c1272
SHA256

34582b67485c6b87fdf8b3f590d6443e88b19a01d4916d1aeab66a41416865ae
SHA512

015a5d7561879e888979877e9607020d9e22e9b02786182e351f330832d1a1c92cc6e9c666b7bb71db01385d62c0a634033cec3e5c2734f59e1974bc6b058ea2
SSDEEP

3072:qd0rZEDYOAN99R3DUxPgDMOlxlCVSAgZO0ff2jL9ZVhv6T3Du7V:g0rZED1ATH32PdQxli1XVhyD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34582b67485c6b87fdf8b3f590d6443e88b19a01d4916d1aeab66a41416865ae

Files

34582b67485c6b87fdf8b3f590d6443e88b19a01d4916d1aeab66a41416865ae
.dll windows:4 windows x86 arch:x86

04b9c2e7c9382d2e610aaad198ba3446

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DispatchMessageA
CharPrevA
PeekMessageA
wsprintfA
CharNextA
LoadStringA
MessageBoxA
TranslateMessage

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA

ole32

CoCreateInstance
StringFromGUID2
OleInitialize
OleUninitialize

oleaut32

LoadTypeLi
RegisterTypeLi

kernel32

DeleteFileA
GetVersion
GetStringTypeW
GetStringTypeA
GetLastError
GetLocaleInfoA
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentStrings
GetFileAttributesA
GetCPInfo
FreeEnvironmentStringsA
VirtualAlloc
HeapReAlloc
GetLocaleInfoW
FlushFileBuffers
CompareStringW
GetOEMCP
FreeEnvironmentStringsW
HeapCreate
lstrcatA
lstrcpyA
lstrcmpiA
lstrlenA
OutputDebugStringA
CopyFileA
OpenFile
Sleep
lstrcpynA
WriteFile
CloseHandle
SetFilePointer
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentDirectoryA
SetErrorMode
LocalFree
LocalUnlock
LocalLock
LocalAlloc
SetFileTime
GetFileTime
GetWindowsDirectoryA
MultiByteToWideChar
CompareStringA
WideCharToMultiByte
VirtualFree
GetModuleFileNameA
HeapDestroy
GetCommandLineA
GetACP
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
FindClose
FindFirstFileA
GetFileType
SetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
ReadFile
SetEnvironmentVariableA
SetCurrentDirectoryA
GetStdHandle
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetEndOfFile
SetHandleCount
InitializeCriticalSection
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
GetFullPathNameA
InterlockedDecrement
InterlockedIncrement

Exports

Exports

AbortAction
AddActionNote
ChangeActionKey
CommitAction
DLLSelfRegister
DisableLogging
EnableLogging
ExtractFileFromCab
GetClsidFromActXFile
LogConfig
LogError
LogNote
LogWarning
NewAction
RegisterTLB
SyncShell
_SetTime@8
fCreateShellLink
fRemoveShellLink
fWithinAction

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

04b9c2e7c9382d2e610aaad198ba3446

Headers

File Characteristics

Imports

user32

advapi32

shell32

ole32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 15KB - Virtual size: 32KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 15KB - Virtual size: 32KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.rmnet
Size: 56KB - Virtual size: 60KB