03f11cef4ab3dd12041ceac9277dcf19e0f28dc6b3a6f9cda5b8660f76844c69

Sharing

Copy URL Twitter E-mail

General

Target

03f11cef4ab3dd12041ceac9277dcf19e0f28dc6b3a6f9cda5b8660f76844c69
Size

1.4MB
MD5

91ca45b5447a7dd5ed53e55e3328d1a1
SHA1

d802e1c583b103fc2d9753b9ea49da590db79dd1
SHA256

03f11cef4ab3dd12041ceac9277dcf19e0f28dc6b3a6f9cda5b8660f76844c69
SHA512

e510cbac8d8d258e05bda2ba6e439cf551a65378efcca989fd4a2a121c8abf91f60deeebf92bbce2239f846c3987ef6e4281ff53d50d93b90eb11f8c997ea67d
SSDEEP

24576:WcD//zSjZ4h7POKX1UshOrD5CWQ70BN8uum94+BHL3P0:FzSqh7mdsI3ozug+ZDP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03f11cef4ab3dd12041ceac9277dcf19e0f28dc6b3a6f9cda5b8660f76844c69

Files

03f11cef4ab3dd12041ceac9277dcf19e0f28dc6b3a6f9cda5b8660f76844c69
.dll windows x86

226e561c3dc55b1f269ede641b2f2df1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
OutputDebugStringW
GetCurrentProcess
GetCurrentThread
GetStartupInfoW
FreeLibrary
CreateEventW
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
FindResourceW
SizeofResource
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
FindResourceExW
GetCurrentThreadId
GetCurrentProcessId
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetStdHandle
GetACP
GetModuleFileNameA
ExitProcess
GetConsoleMode
GetConsoleCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
RtlUnwind
InterlockedFlushSList
GetThreadTimes
FlushFileBuffers
WideCharToMultiByte
HeapDestroy
GetLastError
SetUnhandledExceptionFilter
RaiseException
CloseHandle
DecodePointer
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CreateFileW
GetStringTypeW
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
LCMapStringW
GetCPInfo
FindClose
FindNextFileA
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
InitializeSListHead

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

226e561c3dc55b1f269ede641b2f2df1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 7KB - Virtual size: 13KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 7KB - Virtual size: 13KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 7KB - Virtual size: 6KB