3e5bc05af1b8097e0f503b3b272e8ec7157cfb462f897bbb316c2ee9b9a33ccf

Sharing

Copy URL

Twitter E-mail

General

Target

3e5bc05af1b8097e0f503b3b272e8ec7157cfb462f897bbb316c2ee9b9a33ccf
Size

678KB
MD5

0f1568e31c3d8d399488d8b93daffc33
SHA1

b8bd89b67e87d01c6cc3f973f6f97b1a63f19e91
SHA256

3e5bc05af1b8097e0f503b3b272e8ec7157cfb462f897bbb316c2ee9b9a33ccf
SHA512

5cc009267f298fec67cfd81f3c3738b261ec3a83c7684253481c1638a703dca472fdb5717401a2083b81639e6992617d077791959a3f41a8db73ff3108ce3aa3
SSDEEP

12288:8nUIW4anSDGCH0fu1QJKw1be1gUK7wrnUfpE:kUITnGCH+u1QJKDCwrUfpE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3e5bc05af1b8097e0f503b3b272e8ec7157cfb462f897bbb316c2ee9b9a33ccf

Files

3e5bc05af1b8097e0f503b3b272e8ec7157cfb462f897bbb316c2ee9b9a33ccf
.dll regsvr32 windows:4 windows x64 arch:x64

b7b90674fa6c5f9a16bdab0725f21bbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
HeapReAlloc
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
FlsGetValue
FlsFree
FlsAlloc
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineA
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
FlsSetValue
HeapAlloc
HeapFree
GetVersionExW
WritePrivateProfileStringW
LocalFileTimeToFileTime
FileTimeToLocalFileTime
CreateFileW
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
lstrcmpiW
GetStringTypeExW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
MoveFileW
TlsFree
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
TlsGetValue
LocalAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetModuleFileNameW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetVersion
GetCurrentProcessId
GlobalGetAtomNameW
GetModuleHandleA
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
GlobalAlloc
FormatMessageW
LocalFree
SizeofResource
lstrlenW
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FindResourceW
LoadResource
LockResource
FreeResource
GetLastError
SetLastError
WideCharToMultiByte
VirtualAlloc
LoadLibraryW
ExitProcess
FreeEnvironmentStringsW
MultiByteToWideChar

user32

DrawMenuBar
TranslateMDISysAccel
PostQuitMessage
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageW
GetSysColorBrush
GetMenuItemInfoW
CharUpperW
DestroyIcon
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetCursorPos
ReleaseCapture
SetCursor
LoadCursorW
SetCapture
KillTimer
SetTimer
ClientToScreen
SetWindowRgn
DrawIcon
FindWindowW
SystemParametersInfoW
InvalidateRect
ShowWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
LoadIconW
DefMDIChildProcW
SendDlgItemMessageW
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
GetTopWindow
GetWindowLongPtrW
SetWindowLongPtrW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetMenu
PostMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
SetFocus
DefFrameProcW
DestroyCursor
SetCursorPos
RedrawWindow
InflateRect
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
SendDlgItemMessageA
GetWindowThreadProcessId
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetParent
SendMessageW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
UpdateWindow
GetFocus
FillRect
GetClientRect
EnableWindow
EndDeferWindowPos
UnregisterClassA

gdi32

SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
ScaleViewportExtEx
CreateSolidBrush
CreateCompatibleBitmap
PatBlt
GetTextExtentPoint32W
CreateFontIndirectW
DeleteObject
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
CreateBitmap
SetTextAlign
SetMapMode
SetBkMode
RestoreDC
SaveDC
Ellipse
LPtoDP
CreateEllipticRgn
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
GetFileSecurityW
SetFileSecurityW
RegOpenKeyW
RegSetValueW
RegCloseKey
RegCreateKeyW

shell32

DragQueryFileW
SHGetFileInfoW
ExtractIconW
DragFinish

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Exports

Exports

DllRegisterServer

Sections

.text
Size: 317KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7b90674fa6c5f9a16bdab0725f21bbb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 317KB - Virtual size: 316KB

.rdata Size: 101KB - Virtual size: 100KB

.data Size: 12KB - Virtual size: 35KB

.pdata Size: 23KB - Virtual size: 22KB

.rsrc Size: 211KB - Virtual size: 210KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 317KB - Virtual size: 316KB

.rdata
Size: 101KB - Virtual size: 100KB

.data
Size: 12KB - Virtual size: 35KB

.pdata
Size: 23KB - Virtual size: 22KB

.rsrc
Size: 211KB - Virtual size: 210KB

.reloc
Size: 13KB - Virtual size: 12KB