a2a51a26ad6f94030050b75214bac4e93ed2e8198872ee38b5dd731df99673eb

Sharing

Copy URL

Twitter E-mail

General

Target

a2a51a26ad6f94030050b75214bac4e93ed2e8198872ee38b5dd731df99673eb
Size

285KB
MD5

3734b99554e438d8f4c90f75c3798d6a
SHA1

b3f64f618d68285b36c1b100931259ea7433a230
SHA256

a2a51a26ad6f94030050b75214bac4e93ed2e8198872ee38b5dd731df99673eb
SHA512

f9fadc1d14bbf3c55a37d60119efc22c090a59a010dbd08c19fcc738a19636f50129bc7276cfaf4e3c1d4daf1f20cf330b8597829a755330b3f6fe21e704f32d
SSDEEP

6144:7LJmEHQoaG8sQxMG4fxTbv07Zv24jz6NPL7/GkqbscgCG5YqfmP:Z5wZQQCHfNv4v2az6Nv/GkUGCqmP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/9961f75bcd13750055827870d7f71cd723c4e80d2c31b9b753594ccbdb9368f1

Files

a2a51a26ad6f94030050b75214bac4e93ed2e8198872ee38b5dd731df99673eb
.zip
9961f75bcd13750055827870d7f71cd723c4e80d2c31b9b753594ccbdb9368f1
.dll regsvr32 windows:5 windows x86 arch:x86

14e6ae8d1400b6271725b3f01025b85e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
HeapReAlloc
Sleep
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
WritePrivateProfileStringA
GetModuleHandleW
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedDecrement
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GetModuleFileNameA
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
LoadLibraryA
GlobalGetAtomNameA
GlobalAddAtomA
GetLastError
SetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetTickCount
ExitProcess

user32

ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetClassNameA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
GetWindowThreadProcessId
GetActiveWindow
EqualRect
GetKeyState
LoadIconA
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
GetClassInfoA
IntersectRect
SetRectEmpty
GetMenu
GetLastActivePopup
BringWindowToTop
PostMessageA
SetMenu
UpdateWindow
EnableWindow
SendMessageA
GetMessagePos
GetDesktopWindow
TranslateAcceleratorA
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetSysColorBrush
CreateWindowExA
GetMenuItemInfoA
PtInRect
GetWindowRect
LoadImageA
GetSysColor
GetSystemMetrics
CopyRect
InflateRect
DrawEdge
DrawFrameControl
DrawFocusRect
SetRect
GetParent
GetClientRect
OffsetRect
SetTimer
SetCursor
GetCursorPos
GetDC
ReleaseDC
InvalidateRect
IsWindow
SetWindowTextA
GetWindowLongA
GetDlgItem
GetWindow
LoadCursorA
KillTimer
MessageBoxA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
OffsetViewportOrgEx
GetDeviceCaps
GetTextExtentPoint32A
Escape
SetViewportOrgEx
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
CreateFontA
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleBitmap
SelectObject
RoundRect
GetTextColor
GetBkMode
CreateFontIndirectA
CreateSolidBrush
GetStockObject
StretchBlt
Polygon
CreateCompatibleDC
GetObjectA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

DragFinish
DragQueryFileA

shlwapi

PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

DllRegisterServer

Sections

.text
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14e6ae8d1400b6271725b3f01025b85e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 249KB - Virtual size: 248KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 142KB - Virtual size: 141KB

.reloc Size: 52KB - Virtual size: 51KB

.text
Size: 249KB - Virtual size: 248KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 142KB - Virtual size: 141KB

.reloc
Size: 52KB - Virtual size: 51KB