68e52d1b88f8208e950084f602bceae56c0eaf1ffccda4357747ad03a908449c

General

Target

68e52d1b88f8208e950084f602bceae56c0eaf1ffccda4357747ad03a908449c
Size

1.3MB
MD5

2bd9d5e6cbb133043d469c6a75887bbf
SHA1

5575c83a1cbe3e6fb9fb78293e69e2706fb5ff2b
SHA256

68e52d1b88f8208e950084f602bceae56c0eaf1ffccda4357747ad03a908449c
SHA512

7135d2b1dda1500a8c3d501d7d8557f5b83811362d140dfc2c392b757d253048836dc4ac8d3244f94af8f02be145cecc81291e98c2f95de0cb32abb81fb7a034
SSDEEP

24576:wAoSjZ4h7POKX1UshOrD5CWQ70BN8uum94+BHL3PGVP:wAoSqh7mdsI3ozug+ZDPGVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68e52d1b88f8208e950084f602bceae56c0eaf1ffccda4357747ad03a908449c

Files

68e52d1b88f8208e950084f602bceae56c0eaf1ffccda4357747ad03a908449c
.dll windows x86

b7d2f7e27a486c37c661f6b370326671

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DecodePointer
RaiseException
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
CloseHandle
CreateFileW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7d2f7e27a486c37c661f6b370326671

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 3KB - Virtual size: 3KB