b6733eb8a023c2cf130c0119222af616be40759e5f0e6ed73601375b621237ae

Sharing

Copy URL

Twitter E-mail

General

Target

b6733eb8a023c2cf130c0119222af616be40759e5f0e6ed73601375b621237ae
Size

1.2MB
MD5

7595b2121d825e8f6facb5081860e1df
SHA1

d8c63f7abcb089405b492ac287d8f7a4892a40e9
SHA256

b6733eb8a023c2cf130c0119222af616be40759e5f0e6ed73601375b621237ae
SHA512

90cb7b6f40f3e0cf965abf5c423bb67045ccf2d666f392752a6f3f033e4d9b1bace2d15c8875bf065659e1f6c067d25b40b192fb2835ce50d17adddf31abe4d2
SSDEEP

24576:+giKxzuDLx/hiB2BDtKxdReICeYFzZ40ba3eN7ZhI9tQr7PRPPAE0sB5yDI3Jp5+:+gPxsoTxsjC8Hl+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6733eb8a023c2cf130c0119222af616be40759e5f0e6ed73601375b621237ae

Files

b6733eb8a023c2cf130c0119222af616be40759e5f0e6ed73601375b621237ae
.dll windows x86

20058db0d81b02a8ab988fa74e470a55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgcc_s_dw2-1

__emutls_get_address
__udivdi3

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__mb_cur_max
_amsg_exit
_errno
_initterm
_iob
_lock
_putenv_s
_setjmp3
_stricmp
_strtoi64
_strtoui64
_unlock
_write
abort
atoi
calloc
exit
fclose
feof
ferror
fflush
fopen
fputc
fread
free
fwrite
getc
getenv
isspace
isxdigit
localeconv
longjmp
malloc
memcpy
memset
putc
realloc
setlocale
strchr
strcmp
strerror
strlen
strncmp
strncpy
strrchr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen

Exports

Exports

TJBUFSIZE
TJBUFSIZEYUV
tj3Alloc
tj3Compress12
tj3Compress16
tj3Compress8
tj3CompressFromYUV8
tj3CompressFromYUVPlanes8
tj3DecodeYUV8
tj3DecodeYUVPlanes8
tj3Decompress12
tj3Decompress16
tj3Decompress8
tj3DecompressHeader
tj3DecompressToYUV8
tj3DecompressToYUVPlanes8
tj3Destroy
tj3EncodeYUV8
tj3EncodeYUVPlanes8
tj3Free
tj3Get
tj3GetErrorCode
tj3GetErrorStr
tj3GetScalingFactors
tj3Init
tj3JPEGBufSize
tj3LoadImage12
tj3LoadImage16
tj3LoadImage8
tj3SaveImage12
tj3SaveImage16
tj3SaveImage8
tj3Set
tj3SetCroppingRegion
tj3SetScalingFactor
tj3Transform
tj3YUVBufSize
tj3YUVPlaneHeight
tj3YUVPlaneSize
tj3YUVPlaneWidth
tjAlloc
tjBufSize
tjBufSizeYUV
tjBufSizeYUV2
tjCompress
tjCompress2
tjCompressFromYUV
tjCompressFromYUVPlanes
tjDecodeYUV
tjDecodeYUVPlanes
tjDecompress
tjDecompress2
tjDecompressHeader
tjDecompressHeader2
tjDecompressHeader3
tjDecompressToYUV
tjDecompressToYUV2
tjDecompressToYUVPlanes
tjDestroy
tjEncodeYUV
tjEncodeYUV2
tjEncodeYUV3
tjEncodeYUVPlanes
tjFree
tjGetErrorCode
tjGetErrorStr
tjGetErrorStr2
tjGetScalingFactors
tjInitCompress
tjInitDecompress
tjInitTransform
tjLoadImage
tjPlaneHeight
tjPlaneSizeYUV
tjPlaneWidth
tjSaveImage
tjTransform

Sections

.text
Size: 913KB - Virtual size: 913KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20058db0d81b02a8ab988fa74e470a55

Headers

DLL Characteristics

File Characteristics

Imports

libgcc_s_dw2-1

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 913KB - Virtual size: 913KB

.data Size: 1024B - Virtual size: 708B

.rdata Size: 234KB - Virtual size: 234KB

/4 Size: 63KB - Virtual size: 62KB

.bss Size: - Virtual size: 2KB

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 913KB - Virtual size: 913KB

.data
Size: 1024B - Virtual size: 708B

.rdata
Size: 234KB - Virtual size: 234KB

/4
Size: 63KB - Virtual size: 62KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 16KB - Virtual size: 16KB