1e2b05838edfb0460fc97e2d7bab2271891c55ca0c895d4db30cf2acfaea51d2

Sharing

Copy URL

Twitter E-mail

General

Target

1e2b05838edfb0460fc97e2d7bab2271891c55ca0c895d4db30cf2acfaea51d2
Size

37KB
MD5

53cfc99ee275af52e9dde06292083879
SHA1

a3ad99efaa4c896976e3861fd5b8ec173bb10228
SHA256

1e2b05838edfb0460fc97e2d7bab2271891c55ca0c895d4db30cf2acfaea51d2
SHA512

f881dd32db969374bf45a6b13b526b5f8bfe7aeb9d395f9e6fcc19076173a578348354814d6688153be24d78eaea8ca2549dd64abf6128f39dc921f36b9899ae
SSDEEP

384:lz698uLGPWE/8azdJkX3aqPBr0frtMFpRrEVhUXMWlPK+1nu6EDHd7E/12C7vyxM:3X8aiKfhe3OhjyimnTEDW7vydv8

Score

1^/10

Malware Config

Signatures

Files

1e2b05838edfb0460fc97e2d7bab2271891c55ca0c895d4db30cf2acfaea51d2
.dll windows x86

eaf37a81b2cc37eb0898e621f39eb0d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
Sleep
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent

Exports

Exports

ICL_Base64_Decode
ICL_Base64_Encode
ICL_COM_ChangeTestMode
ICL_COM_Change_Non_Proven
ICL_COM_Change_Password
ICL_COM_Check_Password
ICL_COM_DER_to_PEM
ICL_COM_GetPrivateKeyType
ICL_COM_Get_Random
ICL_COM_HEX2BIGINT_n_cmp
ICL_COM_PEM_to_DER
ICL_CPV_Cert_Path_Validation
ICL_Free
ICL_GM2LocalTime
ICL_Get_String
ICL_HASH_Data
ICL_HASH_Final
ICL_HASH_Free
ICL_HASH_Init
ICL_HASH_New
ICL_HASH_Update
ICL_IsValidDate
ICL_IsValidDate2
ICL_Load_File
ICL_Local2GMTime
ICL_PK11_Close_Session
ICL_PK11_Delete_RSAKey
ICL_PK11_Finalize
ICL_PK11_Get_Cert
ICL_PK11_Get_HSM_Driver_Count
ICL_PK11_Get_HSM_Driver_Signature_Count
ICL_PK11_Get_HSM_Signer_IssuerDN
ICL_PK11_Get_Slot_Count
ICL_PK11_Get_Token_FreeMemory
ICL_PK11_Get_Token_Serial
ICL_PK11_Get_Vid_Random
ICL_PK11_Hash
ICL_PK11_Initialize
ICL_PK11_Load_Library
ICL_PK11_Open_Session
ICL_PK11_RSA_Decrypt
ICL_PK11_RSA_Encrypt
ICL_PK11_RSA_Key_Generate
ICL_PK11_RSA_Sign
ICL_PK11_RSA_Verify
ICL_PK11_Set_RSAKey
ICL_PK11_Sym_Decrypt
ICL_PK11_Sym_Encrypt
ICL_PK11_Unload_Library
ICL_PK11_Verify_HSM_Driver_Info
ICL_PK11_Verify_HSM_Driver_Signature_Info
ICL_PK12_Make_PFX
ICL_PK12_Verify_PFX
ICL_PK1_Cert_To_Privatekey_Pemfile
ICL_PK1_Cert_To_RSAINFO
ICL_PK1_Free_PKISTRINFO
ICL_PK1_Free_PKISTRINFOS
ICL_PK1_New_PKISTRINFO
ICL_PK1_Private_Decrypt
ICL_PK1_Private_Encrypt
ICL_PK1_Private_Sign
ICL_PK1_Privatekey_To_RSAINFO
ICL_PK1_Public_Decrypt
ICL_PK1_Public_Decrypt_ex
ICL_PK1_Public_Encrypt
ICL_PK1_Public_Encrypt_ex
ICL_PK1_Public_Verify
ICL_PK1_Set_PKISTRINFO
ICL_PK7_Add_Signed_Data
ICL_PK7_Check_Format
ICL_PK7_Get_Signer_Certs
ICL_PK7_Get_Signer_Count
ICL_PK7_Make_Enveloped_Data
ICL_PK7_Make_Signed_Data
ICL_PK7_Make_Signed_Data_Final_HSM
ICL_PK7_Make_Signed_Data_HSM
ICL_PK7_Make_Signed_Data_Init_HSM
ICL_PK7_Make_Signed_Data_Init_HSM_With_Option
ICL_PK7_Make_Signed_Data_WithOut_Plain_With_MD
ICL_PK7_Make_Signed_Data_With_Option
ICL_PK7_Make_Signed_Data_With_OutSign
ICL_PK7_Make_Signed_Data_With_Random
ICL_PK7_Verify_Signed_Data
ICL_PK7_Verify_Signed_Data_WithOut_Plain
ICL_PK7_Verify_Signed_Data_With_Add_Cert_Data
ICL_PK8_Change_Passwd
ICL_PK8_Check_Passwd
ICL_PK8_DER_to_PK1_PEM
ICL_PK8_Get_Random
ICL_PK8_Make_PrivateKey
ICL_PK8_Remove_RData
ICL_PRNG_Get_Random
ICL_Read_File
ICL_SYM_Decrypt
ICL_SYM_Encrypt
ICL_SYM_Get_Block_Length
ICL_Verify_CertTime
ICL_Write_File
ICL_X509_CRL_Verify_Issuer
ICL_X509_CRL_Verify_NextUpdate
ICL_X509_Check_VID
ICL_X509_Conv_Cert2DER
ICL_X509_Conv_Cert2PEM
ICL_X509_Free_X509_Info
ICL_X509_Info_Get_CRLdp
ICL_X509_Info_Get_CRLdp_Count
ICL_X509_Info_Get_CRLdp_Index
ICL_X509_Info_Get_DN_Field
ICL_X509_Init_X509_Info
ICL_X509_Is_Revoked
ICL_X509_SIGN_to_binary
ICL_X509_Verify
ICL_cmp_HEX_STR

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eaf37a81b2cc37eb0898e621f39eb0d6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 1KB