c64945fad310b952ce6bf28c56cc278397fbf0aa2cfebe181586d4967d7b8d95

Sharing

Copy URL Twitter E-mail

General

Target

c64945fad310b952ce6bf28c56cc278397fbf0aa2cfebe181586d4967d7b8d95
Size

384KB
MD5

48ca3da2eaf98dd15e288070bdf484e6
SHA1

1afb7b871e197a54aeeea0c7a79f60650a6e0ffa
SHA256

c64945fad310b952ce6bf28c56cc278397fbf0aa2cfebe181586d4967d7b8d95
SHA512

8c437a6d7cbc8b9a5826c2349c0474e72ca2fa41587a7ff2e5d32f22b979bb963c67b9e5fe31dfd41db34ad8f8ba12fda01e935e6913f61fbd069eb7666db630
SSDEEP

6144:dICu5IkA9wl6v2iYsxLeu8Q56R7lql6b2lEgopkJjolVhJ2:dkSwQcaeu37REg31oTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c64945fad310b952ce6bf28c56cc278397fbf0aa2cfebe181586d4967d7b8d95

Files

c64945fad310b952ce6bf28c56cc278397fbf0aa2cfebe181586d4967d7b8d95
.dll windows x86

416396063d615a437525c14e4df3a3c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

iphlpapi

GetAdaptersInfo

libeay32

ord67
ord1882
ord490
ord400
ord497
ord2081
ord493
ord484
ord2206

zlib1

deflate
deflateInit2_
deflateEnd
crc32

kernel32

IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryA
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
MapViewOfFile
UnmapViewOfFile
FreeLibrary
LoadLibraryW
GetVersionExW
CreateFileW
GetLastError
SetLastError
GetProcAddress
CreateFileMappingA
LocalAlloc
CloseHandle
OpenFileMappingA
LocalFree
GetFullPathNameW
CreateMutexW
FindFirstFileW
SetFilePointer
SetEndOfFile
CreateProcessW
CreateDirectoryW
WaitForSingleObject
GetModuleHandleW
WriteFile
WideCharToMultiByte
GetStringTypeA
TerminateProcess
ReadFile
GetModuleFileNameW
MultiByteToWideChar
GetStartupInfoW
GetTempPathW
FindClose
RemoveDirectoryW
FindNextFileW
GetFileAttributesExW
ReleaseMutex
DeleteFileW
ResumeThread
GetSystemWindowsDirectoryW
DeviceIoControl
SetErrorMode
SetUnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
SystemTimeToFileTime
GetLogicalDriveStringsW
GlobalMemoryStatusEx
GetSystemInfo
GetDiskFreeSpaceExW
GetSystemTime
FileTimeToDosDateTime
CreateFileA
GetFileAttributesA
GetFileSizeEx
FindFirstFileA
FindNextFileA
GetFileTime
FileTimeToLocalFileTime
GetConsoleCP
GetStartupInfoA
GetStringTypeW
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
GetFileType
SetHandleCount
HeapSize
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetCurrentDirectoryA
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
VirtualFree
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitThread
CreateThread
FileTimeToSystemTime
GetDriveTypeW
GetTimeZoneInformation
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
RaiseException
DeleteCriticalSection

user32

wsprintfW

advapi32

SetSecurityDescriptorDacl
RegSetValueExW
RegFlushKey
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
FreeSid
AllocateAndInitializeSid
InitializeSecurityDescriptor

shell32

ShellExecuteW

ole32

CoCreateGuid
CoInitialize

vmprotectsdk32

VMProtectEnd
VMProtectBeginUltra

dbghelp

MiniDumpWriteDump

ws2_32

WSACleanup
WSAStartup
inet_ntoa
gethostname
gethostbyname

Exports

Exports

jnzBindDistinctID
jnzBuildHttpData
jnzBuildHttpData2
jnzCLTCommit
jnzCLTCreate
jnzCLTCreate2
jnzCLTFree
jnzCLTSensorWriteBoolProperties
jnzCLTSensorWriteEvent
jnzCLTSensorWriteFloatProperties
jnzCLTSensorWriteIntProperties
jnzCLTSensorWriteListProperties
jnzCLTSensorWriteStringProperties
jnzCLTWriteData
jnzCLTWriteInt
jnzCreate
jnzCreate2
jnzDataFree
jnzDecryptData
jnzEnableCrashReport
jnzEnableSandbox
jnzEncryptData
jnzFree
jnzInitSSLRand
jnzMid
jnzMidEx
jnzMidInfo
jnzMidValid
jnzOpenUrl
jnzSetAppInfo
jnzSetApplyKey
jnzSetDumpTimeStmp
jnzSetHostInfo
jnzSetMidVersion
jnzSetNetProtocol
jnzSetPriCcertificate
jnzSetPubCertificate
jnzSetSensorDistinctID
jnzSetSensorHostInfo
jnzSetSensorProperty
jnzSetSensorUrl
jnzSetURLVersion

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

416396063d615a437525c14e4df3a3c1

Headers

File Characteristics

Imports

version

setupapi

iphlpapi

libeay32

zlib1

kernel32

user32

advapi32

shell32

ole32

vmprotectsdk32

dbghelp

ws2_32

Exports

Exports

Sections

.text Size: 292KB - Virtual size: 289KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 8KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 20KB - Virtual size: 18KB

.text
Size: 292KB - Virtual size: 289KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 8KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 20KB - Virtual size: 18KB