1544e78432b6e5150b124e95fbaed4d77e3518b388bff81c03f182ab9dc082ae

Sharing

Copy URL Twitter E-mail

General

Target

1544e78432b6e5150b124e95fbaed4d77e3518b388bff81c03f182ab9dc082ae
Size

25KB
MD5

266c803308cb0401921c8ee5d7e9df27
SHA1

aa2b82e4fa4607686c89abc40c5460832a1caf11
SHA256

1544e78432b6e5150b124e95fbaed4d77e3518b388bff81c03f182ab9dc082ae
SHA512

d1a9fb57c2cb167c0794afc9215dd9fe675b9030884f6cc237db6d32ba16870eefbb8235289fa8f8b7db041b52694e5ff3e6f340b5095a9a6a11b40789de375c
SSDEEP

384:xT+rlZteCId3C9OJtBLRkDPfcMVEWRRuw16Hpueep/+wDiWW:xTaeQ9OlLmDPfc5WjuwsRep/RWWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1544e78432b6e5150b124e95fbaed4d77e3518b388bff81c03f182ab9dc082ae

Files

1544e78432b6e5150b124e95fbaed4d77e3518b388bff81c03f182ab9dc082ae
.dll windows x86

d1bdab5db5059a540f74c15bfed70c73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libbabl-0.1-0

babl_component
babl_component_new
babl_conversion_get_source_space
babl_conversion_new
babl_format_new
babl_model
babl_model_new
babl_space_get_rgb_luminance
babl_type

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_lock
_unlock
_write
abort
calloc
free
fwrite
realloc
strlen
strncmp
vfprintf

Exports

Exports

init

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 152B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 63B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1bdab5db5059a540f74c15bfed70c73

Headers

DLL Characteristics

File Characteristics

Imports

libbabl-0.1-0

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 44B

.rdata Size: 2KB - Virtual size: 2KB

/4 Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 152B

.edata Size: 512B - Virtual size: 63B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 1024B - Virtual size: 808B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 44B

.rdata
Size: 2KB - Virtual size: 2KB

/4
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 152B

.edata
Size: 512B - Virtual size: 63B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1024B - Virtual size: 808B