b4bf4548d5b770d66288bf60b45e66a6a787a3b71bd9198a1afd614a77710e30

Sharing

Copy URL Twitter E-mail

General

Target

b4bf4548d5b770d66288bf60b45e66a6a787a3b71bd9198a1afd614a77710e30
Size

111KB
MD5

ae519e115fc5e64b81a1b9a9fa186282
SHA1

b5de3a4465d28f4a0397f408fb6dbcb36fcc8c37
SHA256

b4bf4548d5b770d66288bf60b45e66a6a787a3b71bd9198a1afd614a77710e30
SHA512

17097140358b851f09fe648b69788469f82f3c54e0b233b5bb6a6772aa05221f836743ea9af848c13fe1f5ec0afafada4e99dd4936261398f00aceee39cd0b7f
SSDEEP

1536:t8HCOZGhJK+2dOhYbaRACRI1ZpX2Yy0x7qjNOUJSWB3LLK0AlemVe4x02z85s1B1:t8HVy4aaUyFVmgUJ1AdN02MYBM35k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4bf4548d5b770d66288bf60b45e66a6a787a3b71bd9198a1afd614a77710e30

Files

b4bf4548d5b770d66288bf60b45e66a6a787a3b71bd9198a1afd614a77710e30
.dll windows x86

81e99b7496111be5b2bf967a4e4265a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp140

??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
_Wcscoll
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xlength_error@std@@YAXPBD@Z
?id@?$collate@_W@std@@2V0locale@2@A
_Wcsxfrm
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1facet@locale@std@@MAE@XZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??0facet@locale@std@@IAE@I@Z

kernel32

IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
CloseHandle
GetProcessHeap
DeleteCriticalSection
HeapDestroy
HeapAlloc
FindResourceW
LoadResource
SizeofResource
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
LockResource
HeapReAlloc
FindResourceExW

shlwapi

StrCmpIW
StrStrIW
StrStrW

vcruntime140

memmove
strchr
__std_terminate
memset
wcschr
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__current_exception
__current_exception_context
_CxxThrowException
__std_type_info_destroy_list
wcsstr
_except_handler4_common
wcsrchr
memcpy

api-ms-win-crt-string-l1-1-0

iswspace
iswcntrl
_wcsicmp
iswpunct
iswxdigit
wmemcpy_s
iswdigit

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
realloc

api-ms-win-crt-convert-l1-1-0

_wtof

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initterm_e
_initterm
_initialize_narrow_environment
terminate
_cexit
_crt_atexit
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_execute_onexit_table
_errno
_register_onexit_function
_invalid_parameter_noinfo
_seh_filter_dll

Exports

Exports

DLPCheckHelloTag
DLPCheckInfoTag
DLPCheckMessageSpam
DLPCheckModstring_Hard
DLPCheckModstring_Soft
DLPCheckNameAndHashAndMod
DLPCheckUserhash
DLPCheckUsername_Hard
DLPCheckUsername_Soft
GetDLPVersion

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81e99b7496111be5b2bf967a4e4265a2

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

kernel32

shlwapi

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB