bc32e86af1867e6b9c785f37893a3d5e49381f8ad1609626a48873b00306b54e

Sharing

Copy URL

Twitter E-mail

General

Target

bc32e86af1867e6b9c785f37893a3d5e49381f8ad1609626a48873b00306b54e
Size

939KB
MD5

255c410d81294114c52c63b22d5e9f5e
SHA1

73afa420d2082bf5c133c4bf52298f47cb32d65b
SHA256

bc32e86af1867e6b9c785f37893a3d5e49381f8ad1609626a48873b00306b54e
SHA512

83d8655e55290d80a0a87fcceaef33274f722d5f83d663d8175556fa5a0fa923fc17094e2bf6a5b6608813f891593e647452ad2cf3d766516a90832975fc2f26
SSDEEP

12288:kvyPTUfrN+lSDLV9dRCYFdVlv6jVBv4w8N6zTlvdEywUshhxm6ssuqvY/J9ujv7X:k6Ufgl15qhxmrqvY2leXA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc32e86af1867e6b9c785f37893a3d5e49381f8ad1609626a48873b00306b54e

Files

bc32e86af1867e6b9c785f37893a3d5e49381f8ad1609626a48873b00306b54e
.dll regsvr32 windows:6 windows x64 arch:x64

07e495cb260032373bf7066ad703f47d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

odbc32

ord150
ord111
ord110
ord107
ord3
ord14
ord15
ord16
ord1
ord2
ord9

kernel32

FlushFileBuffers
SetStdHandle
SetFilePointerEx
EncodePointer
DecodePointer
RaiseException
GetLastError
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
VirtualAlloc
DisableThreadLibraryCalls
WriteFile
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
MultiByteToWideChar
GetFileSizeEx
GetStringTypeW
SetConsoleCtrlHandler
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
CloseHandle
CreateFileW
WriteConsoleW
FreeLibrary
SetUnhandledExceptionFilter
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
IsDebuggerPresent
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetCurrentThread
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW

user32

ShowWindow
CharNextW
UnregisterClassW
MessageBoxA

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW

ole32

CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
StringFromGUID2

oleaut32

LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
SysFreeString
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 553KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07e495cb260032373bf7066ad703f47d

Headers

DLL Characteristics

File Characteristics

Imports

odbc32

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 553KB - Virtual size: 553KB

.rdata Size: 146KB - Virtual size: 146KB

.data Size: 6KB - Virtual size: 14KB

.pdata Size: 22KB - Virtual size: 21KB

.idata Size: 6KB - Virtual size: 6KB

.00cfg Size: 512B - Virtual size: 337B

_RDATA Size: 1024B - Virtual size: 546B

.rsrc Size: 196KB - Virtual size: 195KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 553KB - Virtual size: 553KB

.rdata
Size: 146KB - Virtual size: 146KB

.data
Size: 6KB - Virtual size: 14KB

.pdata
Size: 22KB - Virtual size: 21KB

.idata
Size: 6KB - Virtual size: 6KB

.00cfg
Size: 512B - Virtual size: 337B

_RDATA
Size: 1024B - Virtual size: 546B

.rsrc
Size: 196KB - Virtual size: 195KB

.reloc
Size: 6KB - Virtual size: 6KB