LatiteGetServerName
LatiteSetIsAppx
Static task
static1
1 signatures
General
-
Target
Latite.1.20.10.dll
-
Size
917KB
-
MD5
013ebcf64b8f189897e953198b621689
-
SHA1
b6a5b8ae45745f7d8858e321bd154199532555cb
-
SHA256
6a132eadaece8bbc217deea543ec1e53860d8b99447c9d7c926471e8b7d6c3a6
-
SHA512
8492fff7781bf2a00084c64dc3ede19ae86b18fc4d4e7b631d19c4ddc8af280323d3bd949ff3ba7bdda66bf41cc58cc8086b2db2f5c3ab81dafcb70e21a890c0
-
SSDEEP
24576:LRvTQ/jRIGpGldxYVINZdWeUPXCVt4WS96USykH4rmMw:LS/jaGpGla+ZdWeU6rlO6Unc4rXw
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Latite.1.20.10.dll
Files
-
Latite.1.20.10.dll.dll windows x64
36bf4ec12eeac59f9ce04934e6ab6917
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
WSACleanup
WSAStartup
kernel32
RtlUnwind
ExitProcess
GetModuleHandleExW
VirtualProtect
GetModuleHandleA
GetProcAddress
SizeofResource
FreeLibraryAndExitThread
MultiByteToWideChar
Sleep
LockResource
CreateThread
LoadResource
FindResourceW
GetModuleHandleW
GetCurrentProcess
K32GetModuleInformation
OutputDebugStringA
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
FlushInstructionCache
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentProcessId
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
SuspendThread
ResumeThread
CloseHandle
CreateToolhelp32Snapshot
InitializeCriticalSectionAndSpinCount
Thread32Next
VirtualAlloc
VirtualFree
VirtualQuery
GetSystemInfo
SetEvent
ResetEvent
CreateEventW
IsDebuggerPresent
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
GetProcessHeap
FreeLibrary
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
FlushFileBuffers
LoadLibraryW
WaitForSingleObject
FormatMessageW
Thread32First
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetTimeZoneInformation
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetFileType
GetStdHandle
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
TlsFree
user32
MapVirtualKeyW
GetKeyNameTextA
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetKeyState
MessageBoxW
FindWindowW
MessageBoxA
SetForegroundWindow
ToAscii
GetClientRect
FindWindowA
SetCursorPos
GetWindowRect
GetDesktopWindow
ole32
CoUninitialize
CoCreateFreeThreadedMarshaler
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-localization-l1-2-0
GetLocaleInfoEx
GetCPInfo
LCMapStringEx
FormatMessageA
api-ms-win-core-file-l1-1-0
CreateFileW
SetFileInformationByHandle
FindFirstFileW
FindFirstFileExW
FindNextFileW
CreateDirectoryW
GetFileAttributesExW
FindClose
api-ms-win-core-file-l1-2-2
AreFileApisANSI
api-ms-win-core-errorhandling-l1-1-0
GetLastError
api-ms-win-core-file-l2-1-0
GetFileInformationByHandleEx
api-ms-win-core-string-l1-1-0
GetStringTypeW
api-ms-win-core-synch-l1-1-0
EnterCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
WaitForSingleObjectEx
LeaveCriticalSection
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
QueryPerformanceFrequency
api-ms-win-core-util-l1-1-0
EncodePointer
DecodePointer
api-ms-win-core-fibers-l1-1-0
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
oleaut32
SysStringLen
SysAllocString
SysFreeString
GetErrorInfo
SetErrorInfo
Exports
Exports
Sections
.text Size: 626KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ