017cd7cbc5097448eff0159abba17a45a5d27b0a23758dc4870b396b1564c1d8

Sharing

Copy URL

Twitter E-mail

General

Target

017cd7cbc5097448eff0159abba17a45a5d27b0a23758dc4870b396b1564c1d8
Size

285KB
MD5

3543a5be23a16e13d299eb303008d3fe
SHA1

0b05cef47f0e8098e5921f045257d2a1e2432e68
SHA256

017cd7cbc5097448eff0159abba17a45a5d27b0a23758dc4870b396b1564c1d8
SHA512

0ad96526148994d4e719eee6098c2e4db0cde7cbf43e1bf0d3532d99dcbfb622f366bbb5aee50ad287da680e32232e076269a356cf59f714629dffc19bad50ac
SSDEEP

6144:OLJmEHQoaG8sQxMG4fx/jz6NPL7/GkqbscgCG5YqfmN:A5wZQQCHf1z6Nv/GkUGCqmN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/f9aea9c057d8646dbb9ec35724e63dc88ba7863b97249a0289961cfd0f02e374

Files

017cd7cbc5097448eff0159abba17a45a5d27b0a23758dc4870b396b1564c1d8
.zip
f9aea9c057d8646dbb9ec35724e63dc88ba7863b97249a0289961cfd0f02e374
.dll regsvr32 windows:5 windows x86 arch:x86

14e6ae8d1400b6271725b3f01025b85e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
HeapReAlloc
Sleep
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
WritePrivateProfileStringA
GetModuleHandleW
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedDecrement
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GetModuleFileNameA
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
LoadLibraryA
GlobalGetAtomNameA
GlobalAddAtomA
GetLastError
SetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetTickCount
ExitProcess

user32

ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetClassNameA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
GetWindowThreadProcessId
GetActiveWindow
EqualRect
GetKeyState
LoadIconA
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
GetClassInfoA
IntersectRect
SetRectEmpty
GetMenu
GetLastActivePopup
BringWindowToTop
PostMessageA
SetMenu
UpdateWindow
EnableWindow
SendMessageA
GetMessagePos
GetDesktopWindow
TranslateAcceleratorA
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetSysColorBrush
CreateWindowExA
GetMenuItemInfoA
PtInRect
GetWindowRect
LoadImageA
GetSysColor
GetSystemMetrics
CopyRect
InflateRect
DrawEdge
DrawFrameControl
DrawFocusRect
SetRect
GetParent
GetClientRect
OffsetRect
SetTimer
SetCursor
GetCursorPos
GetDC
ReleaseDC
InvalidateRect
IsWindow
SetWindowTextA
GetWindowLongA
GetDlgItem
GetWindow
LoadCursorA
KillTimer
MessageBoxA

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
OffsetViewportOrgEx
GetDeviceCaps
GetTextExtentPoint32A
Escape
SetViewportOrgEx
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
CreateFontA
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleBitmap
SelectObject
RoundRect
GetTextColor
GetBkMode
CreateFontIndirectA
CreateSolidBrush
GetStockObject
StretchBlt
Polygon
CreateCompatibleDC
GetObjectA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

DragFinish
DragQueryFileA

shlwapi

PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

DllRegisterServer

Sections

.text
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14e6ae8d1400b6271725b3f01025b85e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 249KB - Virtual size: 248KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 142KB - Virtual size: 141KB

.reloc Size: 52KB - Virtual size: 51KB

.text
Size: 249KB - Virtual size: 248KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 142KB - Virtual size: 141KB

.reloc
Size: 52KB - Virtual size: 51KB