b6ab713b17c6de4a9ce4f31b245ba3c231dff01589b32f411e8f1b45d6cf4217

Sharing

Copy URL

Twitter E-mail

General

Target

b6ab713b17c6de4a9ce4f31b245ba3c231dff01589b32f411e8f1b45d6cf4217
Size

696KB
MD5

ac8ad2b50e78b0629a5043a0bce9297d
SHA1

02f16a6267a0ccf8771f0aa262392b99cfe6d708
SHA256

b6ab713b17c6de4a9ce4f31b245ba3c231dff01589b32f411e8f1b45d6cf4217
SHA512

d3a81ed412102262fe405a1e9e1004edb1ddb57029989c5b8b853963f5079118a0e2203353e7ec3f7cdfc6094f862a961d5562f50ad3215280681b87ca4e1ee2
SSDEEP

12288:FqQlvIOH0GCTBHmPt4eBQhXico09cDlB4Vx/ID:0uH0GCNeQ5i7H0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
b6ab713b17c6de4a9ce4f31b245ba3c231dff01589b32f411e8f1b45d6cf4217

Files

b6ab713b17c6de4a9ce4f31b245ba3c231dff01589b32f411e8f1b45d6cf4217
.dll windows:4 windows x86 arch:x86

d8c52655a835ecb2c6fea489c7c7674b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RaiseException
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
Sleep
GetStdHandle
GetACP
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
RtlUnwind
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
GetCurrentDirectoryA
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetProfileIntA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetThreadLocale
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetFileSize
CreateFileA
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleFileNameA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
LocalAlloc
LocalLock
LocalUnlock
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
InterlockedIncrement
GetCurrentProcessId
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
FreeLibrary
InterlockedDecrement
GlobalFree
FreeResource
GlobalLock
GlobalUnlock
GetModuleHandleA
GetProcAddress
SetLastError
GetTickCount
MulDiv
lstrcpynA
LoadLibraryA
ExitProcess
GetVersion
CompareStringA
LockResource
lstrcmpiA
GetLastError
InterlockedExchange
GetStringTypeExA
lstrlenW
MultiByteToWideChar
CompareStringW
SizeofResource
WideCharToMultiByte
LoadResource
lstrlenA
FindResourceA
GlobalMemoryStatus
GetStringTypeA

user32

SetCapture
GetDCEx
FindWindowA
SetWindowRgn
DestroyIcon
LockWindowUpdate
ShowOwnedPopups
PostQuitMessage
LoadCursorA
DestroyCursor
GetTabbedTextExtentA
MessageBeep
IsClipboardFormatAvailable
RedrawWindow
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
SetParent
WindowFromDC
InSendMessage
ClipCursor
GetCursorPos
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetWindowThreadProcessId
SetCursor
ReleaseCapture
InsertMenuItemA
CreatePopupMenu
SetMenu
TranslateAcceleratorA
InvalidateRect
SetRectEmpty
ShowWindow
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
DeleteMenu
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
PostMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
CopyRect
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
IsWindow
GetWindowLongA
EnableWindow
GetSystemMetrics
SetRect
LoadAcceleratorsA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
WindowFromPoint
GetMenuItemInfoA
UnregisterClassA
GetSysColorBrush
RegisterClipboardFormatA
GetMessageA
TranslateMessage
BeginDeferWindowPos
ValidateRect
GetClientRect
DrawIcon
wsprintfA
CharUpperA
LoadIconA
FillRect
MessageBoxA
IsZoomed
SendMessageA
IsWindowVisible
IsRectEmpty
InflateRect
UpdateWindow
SetWindowTextA
SetWindowPos
ReleaseDC
CreateWindowExA
BringWindowToTop
SetWindowLongA
GetDC
GetParent
GetFocus
KillTimer
GetWindowRect
SetTimer
DestroyWindow
IsIconic
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
DeleteDC
CreatePatternBrush
CreatePen
CreateSolidBrush
CopyMetaFileA
CreateDCA
GetCharWidthA
CreateFontA
StretchDIBits
SetBrushOrgEx
CreateMetaFileA
SetWindowOrgEx
DeleteMetaFile
GetTextExtentPoint32A
DPtoLP
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
GetViewportOrgEx
GetBkColor
UnrealizeObject
GetTextAlign
GetWindowOrgEx
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextFaceA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
BitBlt
CloseMetaFile
GetStockObject
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
CreateFontIndirectA
GetObjectA
GetTextMetricsA
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetWindowExtEx

comdlg32

GetFileTitleA

winspool.drv

GetJobA
DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
RegCloseKey
RegCreateKeyA

shell32

DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragAcceptFiles

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRegisterClassObject
CoRevokeClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleLockRunning
CoRegisterMessageFilter
OleSetClipboard
CreateFileMoniker
StgCreateDocfile
CoDisconnectObject
CreateGenericComposite
CreateItemMoniker
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegEnumVerbs
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
StringFromCLSID
OleRegGetUserType
WriteClassStg
CoTaskMemFree
CoLockObjectExternal
OleRun
GetRunningObjectTable
OleIsRunning
StgIsStorageFile
StgOpenStorage

oleaut32

SysStringLen
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString

Exports

Exports

Control_RunDLL

Sections

.text
Size: 348KB - Virtual size: 345KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8c52655a835ecb2c6fea489c7c7674b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 348KB - Virtual size: 345KB

.rdata Size: 100KB - Virtual size: 98KB

.data Size: 156KB - Virtual size: 169KB

.rsrc Size: 40KB - Virtual size: 38KB

.reloc Size: 48KB - Virtual size: 47KB

.text
Size: 348KB - Virtual size: 345KB

.rdata
Size: 100KB - Virtual size: 98KB

.data
Size: 156KB - Virtual size: 169KB

.rsrc
Size: 40KB - Virtual size: 38KB

.reloc
Size: 48KB - Virtual size: 47KB