ca486cc2d8ce6a3ac89a88bf4978bbcb929f18c4496d2f1290c7b17187112f3e

Sharing

Copy URL Twitter E-mail

General

Target

ca486cc2d8ce6a3ac89a88bf4978bbcb929f18c4496d2f1290c7b17187112f3e
Size

1.4MB
MD5

87ea3c57ebde119c51f1469697eef865
SHA1

7dba56eee4b2df6289bbee9908ef5e1ca9c60ae0
SHA256

ca486cc2d8ce6a3ac89a88bf4978bbcb929f18c4496d2f1290c7b17187112f3e
SHA512

74cf1ad7bdf70f2539f38c06fe797ebb68ea93a666391d988243fc97d530a7d053bb015f6592464e450ab9e1e590fb62d83596ef644db23954d038248acfaf62
SSDEEP

24576:KpEd7SjZ4h7POKX1UshOrD5CWQ70BN8uum94+BHL3PS1:Ke7Sqh7mdsI3ozug+ZDPS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca486cc2d8ce6a3ac89a88bf4978bbcb929f18c4496d2f1290c7b17187112f3e

Files

ca486cc2d8ce6a3ac89a88bf4978bbcb929f18c4496d2f1290c7b17187112f3e
.dll windows x86

f9e1710fded7b4419bbd63e05f604af7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
OutputDebugStringW
GetCurrentProcess
GetCurrentThread
GetStartupInfoW
CreateThread
FreeLibrary
CreateEventW
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
WideCharToMultiByte
SetStdHandle
LoadResource
FindResourceExW
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
CloseHandle
GetProcAddress
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
GetStdHandle
GetACP
GetModuleFileNameA
ExitProcess
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
RtlUnwind
InterlockedFlushSList
GetThreadTimes
FlushFileBuffers
FindFirstFileExA
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
InitializeSListHead
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CreateFileW
GetStringTypeW
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
LCMapStringW
GetCPInfo
FindClose
FindNextFileA
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9e1710fded7b4419bbd63e05f604af7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 80KB - Virtual size: 80KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 7KB - Virtual size: 13KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 80KB - Virtual size: 80KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 7KB - Virtual size: 13KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 7KB - Virtual size: 7KB