b64ee0763b60a5bd43d620bef2f94cd012c4fb84fdc3e7c72505a59f260dc5ea

Sharing

Copy URL Twitter E-mail

General

Target

b64ee0763b60a5bd43d620bef2f94cd012c4fb84fdc3e7c72505a59f260dc5ea
Size

1.5MB
MD5

e4934e5d00ec911c87866d334ed580b7
SHA1

e372347bf9d4126325774374b50bd5a48f3b10b9
SHA256

b64ee0763b60a5bd43d620bef2f94cd012c4fb84fdc3e7c72505a59f260dc5ea
SHA512

77193912ab88f184ed6ea18558621f99aae0276f175d78ead193e2fa6d34b43a94a0a3a9586437d633155df968684e3c28ecedb8d3b7cf97cebf5aaa42e53652
SSDEEP

24576:uS5xBFT/i28EUIKEHGtkSUouEJrFnyrhhyf2fchBHY+L7pLv/exepeve:ueBFT/i28SHGOSzJrNmKf6SHYat

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b64ee0763b60a5bd43d620bef2f94cd012c4fb84fdc3e7c72505a59f260dc5ea

Files

b64ee0763b60a5bd43d620bef2f94cd012c4fb84fdc3e7c72505a59f260dc5ea
.dll windows x64

749c155c65b5b3b33dedc4d7f7f7d5f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_exception_destroy
__std_exception_copy
__C_specific_handler
_CxxThrowException
__std_type_info_destroy_list
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_wassert
_execute_onexit_table
abort
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

puts

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

kernel32

QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

Exports

Exports

CompressBlocksASTC
CompressBlocksBC1
CompressBlocksBC3
CompressBlocksBC4
CompressBlocksBC5
CompressBlocksBC6H
CompressBlocksBC7
CompressBlocksETC1
GetProfile_alpha_basic
GetProfile_alpha_fast
GetProfile_alpha_slow
GetProfile_alpha_ultrafast
GetProfile_alpha_veryfast
GetProfile_astc_alpha_fast
GetProfile_astc_alpha_slow
GetProfile_astc_fast
GetProfile_basic
GetProfile_bc6h_basic
GetProfile_bc6h_fast
GetProfile_bc6h_slow
GetProfile_bc6h_veryfast
GetProfile_bc6h_veryslow
GetProfile_etc_slow
GetProfile_fast
GetProfile_slow
GetProfile_ultrafast
GetProfile_veryfast
ReplicateBorders

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

749c155c65b5b3b33dedc4d7f7f7d5f5

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 102KB - Virtual size: 102KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 864B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 136B

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 102KB - Virtual size: 102KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 864B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 136B