6ef9d9bc67b02329d0eb8fa42e86b92c01e0e8c3747a8257eaa2286f8594e903

Sharing

Copy URL Twitter E-mail

General

Target

6ef9d9bc67b02329d0eb8fa42e86b92c01e0e8c3747a8257eaa2286f8594e903
Size

102KB
MD5

56e48cc95ceb9fb076a52b221655b70e
SHA1

31979490bccbed050a039c3ec20f5fd42e506b45
SHA256

6ef9d9bc67b02329d0eb8fa42e86b92c01e0e8c3747a8257eaa2286f8594e903
SHA512

99f05e9db3faa800f8cbdd3de5ebeff64201fc6f45b29a48ca9336565a4c678fd83f407cb8b56ad51c5e96e679e7eb4c352b0d87b74403a40d85e002457b0c35
SSDEEP

1536:uZcLqQ95S05HSnyookAEpic2eKL2vaINW8tCsOvAktcB4:uZcLqSELyoozEpiiGldvAEL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef9d9bc67b02329d0eb8fa42e86b92c01e0e8c3747a8257eaa2286f8594e903

Files

6ef9d9bc67b02329d0eb8fa42e86b92c01e0e8c3747a8257eaa2286f8594e903
.dll windows x86

3871694801c66453873dd5388121351e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__mb_cur_max
_amsg_exit
_errno
_findclose
_findfirst
_findnext
_fullpath
_initterm
_iob
_lock
_strdup
_stricmp
_strnicmp
_unlock
_write
abort
atoi
bsearch
calloc
fclose
ferror
fopen
fputc
free
fwrite
getc
getenv
isalnum
isalpha
isspace
localeconv
malloc
memcpy
memmove
memset
qsort
realloc
setlocale
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strrchr
strstr
strtok
ungetc
vfprintf
wcslen

Exports

Exports

pkgconf_argv_free
pkgconf_argv_split
pkgconf_audit_log
pkgconf_audit_log_dependency
pkgconf_audit_set_log
pkgconf_builtin_pkg_get
pkgconf_cache_add
pkgconf_cache_free
pkgconf_cache_lookup
pkgconf_cache_remove
pkgconf_client_deinit
pkgconf_client_dir_list_build
pkgconf_client_free
pkgconf_client_get_buildroot_dir
pkgconf_client_get_error_handler
pkgconf_client_get_flags
pkgconf_client_get_prefix_varname
pkgconf_client_get_sysroot_dir
pkgconf_client_get_trace_handler
pkgconf_client_get_warn_handler
pkgconf_client_init
pkgconf_client_new
pkgconf_client_set_buildroot_dir
pkgconf_client_set_error_handler
pkgconf_client_set_flags
pkgconf_client_set_prefix_varname
pkgconf_client_set_sysroot_dir
pkgconf_client_set_trace_handler
pkgconf_client_set_warn_handler
pkgconf_compare_version
pkgconf_cross_personality_default
pkgconf_cross_personality_deinit
pkgconf_cross_personality_find
pkgconf_default_error_handler
pkgconf_dependency_add
pkgconf_dependency_append
pkgconf_dependency_copy
pkgconf_dependency_free
pkgconf_dependency_free_one
pkgconf_dependency_parse
pkgconf_dependency_parse_str
pkgconf_dependency_ref
pkgconf_dependency_unref
pkgconf_error
pkgconf_fgetline
pkgconf_fragment_add
pkgconf_fragment_copy
pkgconf_fragment_copy_list
pkgconf_fragment_delete
pkgconf_fragment_filter
pkgconf_fragment_free
pkgconf_fragment_has_system_dir
pkgconf_fragment_parse
pkgconf_fragment_render
pkgconf_fragment_render_buf
pkgconf_fragment_render_len
pkgconf_parser_parse
pkgconf_path_add
pkgconf_path_build_from_environ
pkgconf_path_copy_list
pkgconf_path_free
pkgconf_path_match_list
pkgconf_path_relocate
pkgconf_path_split
pkgconf_pkg_cflags
pkgconf_pkg_comparator_lookup_by_name
pkgconf_pkg_find
pkgconf_pkg_free
pkgconf_pkg_get_comparator
pkgconf_pkg_libs
pkgconf_pkg_new_from_file
pkgconf_pkg_ref
pkgconf_pkg_traverse
pkgconf_pkg_unref
pkgconf_pkg_verify_dependency
pkgconf_pkg_verify_graph
pkgconf_queue_apply
pkgconf_queue_compile
pkgconf_queue_free
pkgconf_queue_push
pkgconf_queue_solve
pkgconf_queue_validate
pkgconf_reallocarray
pkgconf_scan_all
pkgconf_solution_free
pkgconf_strlcat
pkgconf_strlcpy
pkgconf_strndup
pkgconf_trace
pkgconf_tuple_add
pkgconf_tuple_add_global
pkgconf_tuple_define_global
pkgconf_tuple_find
pkgconf_tuple_find_global
pkgconf_tuple_free
pkgconf_tuple_free_entry
pkgconf_tuple_free_global
pkgconf_tuple_parse
pkgconf_warn

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3871694801c66453873dd5388121351e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 61KB

.data Size: 1024B - Virtual size: 816B

.rdata Size: 12KB - Virtual size: 12KB

/4 Size: 13KB - Virtual size: 13KB

.bss Size: - Virtual size: 2KB

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 61KB - Virtual size: 61KB

.data
Size: 1024B - Virtual size: 816B

.rdata
Size: 12KB - Virtual size: 12KB

/4
Size: 13KB - Virtual size: 13KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 2KB - Virtual size: 2KB