3e0036a292ffc2369417940c77d4ffdbcd89b981b7283773cf09eea0def050fb

Sharing

Copy URL

Twitter E-mail

General

Target

3e0036a292ffc2369417940c77d4ffdbcd89b981b7283773cf09eea0def050fb
Size

271KB
MD5

8b0426b49bb77289d1d3b0c0afa10b85
SHA1

94e9bb99d59d337acc8565cb72b9736b852e882b
SHA256

3e0036a292ffc2369417940c77d4ffdbcd89b981b7283773cf09eea0def050fb
SHA512

7b6fb6ece650617ed14e790295cb6f99e236e7b385e710411347210b4328d26cd91932174088a1e19e6eff153c48249b17263ea8a85afc31be5dba876ea61d4f
SSDEEP

6144:z6bi4SA/ZcrYZZr/yT8YrxE+CbVIpQ/s3aUkTD:zJ9A/WsZZr/yT8YrxE+Cb7U3ID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e0036a292ffc2369417940c77d4ffdbcd89b981b7283773cf09eea0def050fb

Files

3e0036a292ffc2369417940c77d4ffdbcd89b981b7283773cf09eea0def050fb
.dll windows x86

7ea706bbd18229ab2f3f7d1f216fe55e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

CloseHandle
CreateFileW
CreateSemaphoreW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FlushFileBuffers
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessId
GetStdHandle
GetTimeFormatA
InitializeCriticalSection
IsDBCSLeadByteEx
K32GetModuleFileNameExA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Module32First
Module32Next
MultiByteToWideChar
OutputDebugStringA
ReleaseSemaphore
SetErrorMode
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

__mb_cur_max
_amsg_exit
_close
_errno
_exit
_initterm
_iob
_lock
_open
_read
_unlock
_vsnprintf
_write
abort
atoi
calloc
fclose
feof
fgetc
fputc
fopen
fputs
free
fwrite
getenv
isprint
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
setlocale
strchr
strcmp
strerror
strlen
strncmp
strncpy
vfprintf
wcslen

shell32

SHGetFolderPathA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

mgwhelp

StackWalk64
SymCleanup
SymFromAddr
SymFunctionTableAccess64
SymGetLineFromAddr64
SymGetModuleBase64
SymGetOptions
SymInitialize
SymSetOptions
UnDecorateSymbolName

Exports

Exports

ExcHndlInit
ExcHndlSetLogFileNameA
ExcHndlSetLogFileNameW

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ea706bbd18229ab2f3f7d1f216fe55e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

version

mgwhelp

Exports

Exports

Sections

.text Size: 173KB - Virtual size: 173KB

.data Size: 512B - Virtual size: 248B

.rdata Size: 15KB - Virtual size: 14KB

/4 Size: 68KB - Virtual size: 67KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 140B

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 808B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 173KB - Virtual size: 173KB

.data
Size: 512B - Virtual size: 248B

.rdata
Size: 15KB - Virtual size: 14KB

/4
Size: 68KB - Virtual size: 67KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 140B

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 808B

.reloc
Size: 7KB - Virtual size: 6KB