1de7ef8a857e0f816a8fa3a4b3138a27aa46c1a518584e97fdca30e62cff82a7

Sharing

Copy URL

Twitter E-mail

General

Target

1de7ef8a857e0f816a8fa3a4b3138a27aa46c1a518584e97fdca30e62cff82a7
Size

91KB
MD5

30a178c287e47535f1d1bd00c6efcb0a
SHA1

f066e74c791736611610733e6b72107706b96ad0
SHA256

1de7ef8a857e0f816a8fa3a4b3138a27aa46c1a518584e97fdca30e62cff82a7
SHA512

2d16aecbf9b21530b2398637e23276a60106a8bb3cd4be33f5b6f4c48d5f52d292364358ff380c10a4869b1747e7197293870337e24f40403dadab18ef099125
SSDEEP

768:IQtp14HzytPWRYYF9uuIJL9XqAHpXfZBAkTIDX0:Z/SsPWRYK9KJL9Xq6pR50DX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1de7ef8a857e0f816a8fa3a4b3138a27aa46c1a518584e97fdca30e62cff82a7

Files

1de7ef8a857e0f816a8fa3a4b3138a27aa46c1a518584e97fdca30e62cff82a7
.dll windows x64

865a493bdc1db9e98b6a4449ce609be6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
_wcsdup
free
fwrite
getenv
memcmp
memmove
realloc
strchr
strcmp
strcpy
strcspn
strlen

user32

DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetWindowLongPtrW
IsWindow
PeekMessageW
PostMessageW
RegisterWindowMessageA
SendMessageA
SendMessageW
SetWindowLongPtrW

Exports

Exports

DSM_Entry

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

865a493bdc1db9e98b6a4449ce609be6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

ucrtbase

user32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 752B

.rodata Size: 4KB - Virtual size: 12B

.rdata Size: 4KB - Virtual size: 1KB

.pdata Size: 4KB - Virtual size: 420B

.xdata Size: 4KB - Virtual size: 584B

.edata Size: 4KB - Virtual size: 874B

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 32B

.text
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 752B

.rodata
Size: 4KB - Virtual size: 12B

.rdata
Size: 4KB - Virtual size: 1KB

.pdata
Size: 4KB - Virtual size: 420B

.xdata
Size: 4KB - Virtual size: 584B

.edata
Size: 4KB - Virtual size: 874B

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 32B