2acc5d4e7c0d5a0d8600ace4d972c56f89c88d4abebae7fe7a3e2551e5831376

Sharing

Copy URL Twitter E-mail

General

Target

2acc5d4e7c0d5a0d8600ace4d972c56f89c88d4abebae7fe7a3e2551e5831376
Size

175KB
MD5

62a9427644847293c4fc33259adcaee6
SHA1

8a46044174eb0075ad658d7e695d9c95db3cb55f
SHA256

2acc5d4e7c0d5a0d8600ace4d972c56f89c88d4abebae7fe7a3e2551e5831376
SHA512

2cf624abdfe28f1f56ac993ba69d549798b75b819cfc0a75cdfca89fd3fe98d76a82a76c1589d7a126d01810266146a8219f3058fed2aceeba097fdbc5d6a2a6
SSDEEP

3072:DxdHo6zkkk8vlz0Y6/7K571gl3qwMLBqeSCicScv2/EBteQIE:HHhxNwYEO57pwM9zShXcW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2acc5d4e7c0d5a0d8600ace4d972c56f89c88d4abebae7fe7a3e2551e5831376

Files

2acc5d4e7c0d5a0d8600ace4d972c56f89c88d4abebae7fe7a3e2551e5831376
.dll windows x64

24edf9eaab5644d0ac75225a7e0602e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileW
CreateMailslotW
CreateSemaphoreA
CreateWaitableTimerA
DecodePointer
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FindResourceW
FlushFileBuffers
FlushViewOfFile
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleAliasW
GetConsoleAliasesA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileAttributesA
GetFileTime
GetFileType
GetLastError
GetLongPathNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetUserGeoID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsBadReadPtr
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LockResource
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SuspendThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualFreeEx
VirtualLock
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

EnableWindow
GetSysColor
LoadIconW
LoadImageW
LoadStringW

advapi32

SetServiceStatus

Exports

Exports

GetHashFromFileW

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

24edf9eaab5644d0ac75225a7e0602e7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 127KB - Virtual size: 127KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 3KB - Virtual size: 3KB

.00cfg Size: 512B - Virtual size: 40B

.gehcont Size: 512B - Virtual size: 28B

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 512B - Virtual size: 424B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 127KB - Virtual size: 127KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 3KB - Virtual size: 3KB

.00cfg
Size: 512B - Virtual size: 40B

.gehcont
Size: 512B - Virtual size: 28B

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 512B - Virtual size: 424B

.reloc
Size: 2KB - Virtual size: 1KB