87b73f6f2b826f55bb4024e85e097733e25e4a613d0bee54ed07b163f6868c64

Sharing

Copy URL Twitter E-mail

General

Target

87b73f6f2b826f55bb4024e85e097733e25e4a613d0bee54ed07b163f6868c64
Size

15KB
MD5

c65dce3faa594cce4c526c63da835000
SHA1

e31be6e421f387fe9749f850212be565182ae4cb
SHA256

87b73f6f2b826f55bb4024e85e097733e25e4a613d0bee54ed07b163f6868c64
SHA512

ea206969d9f685ba8af40e6f408227a4011198b8ce9dae96f0e5c3ab33c9891fdfc062e2045062775c751efa896f5ceb54788ff2faa6acb1059996a96c68629a
SSDEEP

384:dFTs3d6t4yFn/WK6xYZ+unj72n48HriR7e/i5V:GBfYZ+G24uk775V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87b73f6f2b826f55bb4024e85e097733e25e4a613d0bee54ed07b163f6868c64

Files

87b73f6f2b826f55bb4024e85e097733e25e4a613d0bee54ed07b163f6868c64
.dll windows x86

45741d4155518c33c747f1f01e02af50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
SizeofResource
VirtualProtect
GetCurrentProcess
VirtualAlloc
GetModuleHandleA
GetLastError
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
LockResource
LoadResource
FindResourceW
GetSystemWow64DirectoryA
GetProcAddress
ReadProcessMemory
EnterCriticalSection
InitializeSListHead
GetSystemTimeAsFileTime
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
CloseHandle

user32

MessageBoxA

msvcp140

?_Xlength_error@std@@YAXPBD@Z

shlwapi

PathFindFileNameA

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list
memmove
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
__std_terminate
__current_exception
__current_exception_context
_CxxThrowException
memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm
_execute_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 439KB - Virtual size: 438KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45741d4155518c33c747f1f01e02af50

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

shlwapi

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 439KB - Virtual size: 438KB

.reloc Size: 1024B - Virtual size: 808B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 439KB - Virtual size: 438KB

.reloc
Size: 1024B - Virtual size: 808B