0ad418e951404b474ceb7f7e58c370f8b7627f3f92fcdc4047d0470ae85c2da9

Sharing

Copy URL

Twitter E-mail

General

Target

0ad418e951404b474ceb7f7e58c370f8b7627f3f92fcdc4047d0470ae85c2da9
Size

518KB
MD5

edbe31a0d5827b92fd36af846d09234a
SHA1

888486a8c9da19ebdf1494502b8ad2ce7c1586f9
SHA256

0ad418e951404b474ceb7f7e58c370f8b7627f3f92fcdc4047d0470ae85c2da9
SHA512

bdd8f8386245aa55e95f85222f60a0632903dad15e65d1f615bbf215ca23e1dde8b7cae6b9b42f2109bd457664d89dff199a24501f09ac70249ebe76da9fa4fa
SSDEEP

6144:o+t65Xz8xpPomvMIg52cQZdbYP7Ig5qG6vEsHPJ1xBFa3D2Au7qbUxkU8d5SfuXf:o46+5vMIglQMIgASsh/azNQO15sH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ad418e951404b474ceb7f7e58c370f8b7627f3f92fcdc4047d0470ae85c2da9

Files

0ad418e951404b474ceb7f7e58c370f8b7627f3f92fcdc4047d0470ae85c2da9
.dll windows x64

23c8051400c274303769e27eec7bf589

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_vsnprintf
??_V@YAXPEAX@Z
??_U@YAPEAX_K@Z
_unlock
_aligned_malloc
memmove
_isnan
_controlfp
sqrt
sin
powf
pow
memset
memcpy
memcmp
free
malloc
_XcptFilter
_amsg_exit
_initterm
__C_specific_handler
sqrtf
_lock
__dllonexit
_onexit
_aligned_free
_vsnwprintf
__CxxFrameHandler3
atan2
atan2f
ceil
cos
cosf
floor
floorf
log
log10
logf
tan

kernel32

GetSystemInfo
TerminateProcess
SetUnhandledExceptionFilter
GetFullPathNameW
GetFileSize
SetFilePointer
GetModuleHandleW
ReadFile
GetModuleFileNameW
CreateFileW
lstrcmpiW
CloseHandle
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetCurrentProcess
DuplicateHandle
lstrlenA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GetLastError
GetProcAddress
LoadLibraryA
lstrcmpW
CreateMutexW
ReleaseMutex
LoadLibraryW
DisableThreadLibraryCalls
QueryPerformanceFrequency
GetCurrentProcessId
GetCurrentThreadId
GetSystemPowerStatus
LocalFree
InitializeCriticalSection
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
CreateThread
SetThreadPriority
GetCurrentThread
OpenProcess
WaitForMultipleObjects
GetExitCodeThread
ResetEvent
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
Sleep
MulDiv
SwitchToThread
GetProcessHeap
GetTickCount
ReleaseSemaphore
HeapSize
UnhandledExceptionFilter
WaitForSingleObject
QueryPerformanceCounter
GetThreadTimes
GetProcessTimes
OutputDebugStringA
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

user32

IsWindow
GetWindowPlacement
GetForegroundWindow
GetParent
GetWindowThreadProcessId
LoadStringW
CharUpperW

advapi32

RegSetValueExW
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegCreateKeyW
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExW
RegQueryValueExA
RegSetValueExA

ole32

CoTaskMemAlloc
CoUninitialize
CoInitializeEx
PropVariantClear
CLSIDFromString
CoCreateInstance
CoTaskMemFree

winmm

timeBeginPeriod
timeGetTime
waveOutGetDevCapsW
waveInGetDevCapsW
waveInGetNumDevs
waveOutGetNumDevs
timeEndPeriod

powrprof

PowerReadDCValue
PowerReadACValue
PowerGetActiveScheme
CallNtPowerInformation

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 107B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 18KB

Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 16B

Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23c8051400c274303769e27eec7bf589

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

ole32

winmm

powrprof

Exports

Exports

Sections

Size: 478KB - Virtual size: 478KB

Size: 512B - Virtual size: 107B

Size: 8KB - Virtual size: 8KB

Size: - Virtual size: 18KB

Size: 5KB - Virtual size: 5KB

Size: - Virtual size: 16B

Size: 4KB - Virtual size: 4KB