7efc9a997fb33600707512e4cc9ec5dd6ae308580fcd6042bf4142eed32b7a59

Sharing

Copy URL Twitter E-mail

General

Target

7efc9a997fb33600707512e4cc9ec5dd6ae308580fcd6042bf4142eed32b7a59
Size

271KB
MD5

06884357bac601ade6be3b63477fc3e5
SHA1

2c18924c34d248a93d58acf398172e7677911610
SHA256

7efc9a997fb33600707512e4cc9ec5dd6ae308580fcd6042bf4142eed32b7a59
SHA512

dcbcc288806343dbe5cba0082a8810c88760f7e8952d1ee98de1cbe42c83cdb3e6cd08637b6e126c3c1200b6db39509fc00882909cc48fb9eee13019656774f4
SSDEEP

6144:kjbi4SA/ZcrYZZr/yT8YrxE+Cb2UpKgHaUk63:ky9A/WsZZr/yT8YrxE+CbsUh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7efc9a997fb33600707512e4cc9ec5dd6ae308580fcd6042bf4142eed32b7a59

Files

7efc9a997fb33600707512e4cc9ec5dd6ae308580fcd6042bf4142eed32b7a59
.dll windows x86

7ea706bbd18229ab2f3f7d1f216fe55e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

kernel32

CloseHandle
CreateFileW
CreateSemaphoreW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FlushFileBuffers
FreeLibrary
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessId
GetStdHandle
GetTimeFormatA
InitializeCriticalSection
IsDBCSLeadByteEx
K32GetModuleFileNameExA
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Module32First
Module32Next
MultiByteToWideChar
OutputDebugStringA
ReleaseSemaphore
SetErrorMode
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

msvcrt

__mb_cur_max
_amsg_exit
_close
_errno
_exit
_initterm
_iob
_lock
_open
_read
_unlock
_vsnprintf
_write
abort
atoi
calloc
fclose
feof
fgetc
fputc
fopen
fputs
free
fwrite
getenv
isprint
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
setlocale
strchr
strcmp
strerror
strlen
strncmp
strncpy
vfprintf
wcslen

shell32

SHGetFolderPathA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

mgwhelp

StackWalk64
SymCleanup
SymFromAddr
SymFunctionTableAccess64
SymGetLineFromAddr64
SymGetModuleBase64
SymGetOptions
SymInitialize
SymSetOptions
UnDecorateSymbolName

Exports

Exports

ExcHndlInit
ExcHndlSetLogFileNameA
ExcHndlSetLogFileNameW

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ea706bbd18229ab2f3f7d1f216fe55e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

version

mgwhelp

Exports

Exports

Sections

.text Size: 173KB - Virtual size: 173KB

.data Size: 512B - Virtual size: 248B

.rdata Size: 15KB - Virtual size: 14KB

/4 Size: 68KB - Virtual size: 67KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 140B

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 173KB - Virtual size: 173KB

.data
Size: 512B - Virtual size: 248B

.rdata
Size: 15KB - Virtual size: 14KB

/4
Size: 68KB - Virtual size: 67KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 140B

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 7KB - Virtual size: 6KB