0dda123753b08d3db713f06f15f54d61e8bcc7ff5f54d114f499433e8544b103

Sharing

Copy URL

Twitter E-mail

General

Target

0dda123753b08d3db713f06f15f54d61e8bcc7ff5f54d114f499433e8544b103
Size

110KB
MD5

93e63db1800a00c98550354e2cd4a85f
SHA1

4351954929a33d7961df973b10c2ac15c88a8b3f
SHA256

0dda123753b08d3db713f06f15f54d61e8bcc7ff5f54d114f499433e8544b103
SHA512

8ad017b75192667420e090474e0b1a152b8e7f03e8cdf251e271bf3b14eb37ebcd8c31b8043eb9aeb09160445123a548520d6a032f74022c3432448ce9b53b58
SSDEEP

1536:tBUTCBPxJKAbvASZ2UYjk4mmYDaLnnuhyQxAtuOyTS2hde+KULlHmVe4x02p831I:tBUPGAa1YQ/yn0KdyThLUN02iFBM3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dda123753b08d3db713f06f15f54d61e8bcc7ff5f54d114f499433e8544b103

Files

0dda123753b08d3db713f06f15f54d61e8bcc7ff5f54d114f499433e8544b103
.dll windows x86

81e99b7496111be5b2bf967a4e4265a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp140

??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
_Wcscoll
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xlength_error@std@@YAXPBD@Z
?id@?$collate@_W@std@@2V0locale@2@A
_Wcsxfrm
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??0facet@locale@std@@IAE@I@Z

kernel32

IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
CloseHandle
GetProcessHeap
DeleteCriticalSection
HeapDestroy
HeapAlloc
FindResourceW
LoadResource
SizeofResource
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
LockResource
HeapReAlloc
FindResourceExW

shlwapi

StrCmpIW
StrStrIW
StrStrW

vcruntime140

memmove
strchr
__std_terminate
memset
wcschr
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__current_exception
__current_exception_context
_CxxThrowException
__std_type_info_destroy_list
wcsstr
_except_handler4_common
wcsrchr
memcpy

api-ms-win-crt-string-l1-1-0

iswspace
iswcntrl
_wcsicmp
iswpunct
iswxdigit
wmemcpy_s
iswdigit

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
realloc

api-ms-win-crt-convert-l1-1-0

_wtof

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initterm_e
_initterm
_initialize_narrow_environment
terminate
_cexit
_crt_atexit
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_execute_onexit_table
_errno
_register_onexit_function
_invalid_parameter_noinfo
_seh_filter_dll

Exports

Exports

DLPCheckHelloTag
DLPCheckInfoTag
DLPCheckMessageSpam
DLPCheckModstring_Hard
DLPCheckModstring_Soft
DLPCheckNameAndHashAndMod
DLPCheckUserhash
DLPCheckUsername_Hard
DLPCheckUsername_Soft
GetDLPVersion

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81e99b7496111be5b2bf967a4e4265a2

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

kernel32

shlwapi

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB