6068bf7bc30cfdbc08fee6a3ea53257e38c4d29e55264b4bd752bbbe98071803

Sharing

Copy URL Twitter E-mail

General

Target

6068bf7bc30cfdbc08fee6a3ea53257e38c4d29e55264b4bd752bbbe98071803
Size

19KB
MD5

d8c9ebaff72528b9357441a79fc81c9e
SHA1

823dfd25f0d5ea0db7a182149f0370fdf2f6cc59
SHA256

6068bf7bc30cfdbc08fee6a3ea53257e38c4d29e55264b4bd752bbbe98071803
SHA512

3f9423712018411ab62adfa09cf587d5002a4c62b156aa5774034b9b3771febefdfe248b44bf55dad0a6c9266a9b796c9aecbc75982bc79e26fe4dd455666fcf
SSDEEP

384:XlsPsXPo0rp5qVTAjMsQ7ARsnkgAG6FMg4kfubg:19dz+WEARGkgAnFMgTag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6068bf7bc30cfdbc08fee6a3ea53257e38c4d29e55264b4bd752bbbe98071803

Files

6068bf7bc30cfdbc08fee6a3ea53257e38c4d29e55264b4bd752bbbe98071803
.dll windows x86

9588e8f24b1da110a9656b89bc96100d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php8ts

add_assoc_string_ex
php_info_print_table_start
_emalloc@@4
zend_object_std_init@@8
zend_throw_error
std_object_handlers
zend_register_internal_class_ex
zend_objects_not_comparable
zend_wrong_parameters_none_error@@0
object_properties_init
zend_register_string_constant
zend_value_error
php_check_open_basedir
zend_hash_next_index_insert@@8
zend_argument_value_error
_zend_new_array@@4
zend_parse_parameters
zend_register_long_constant
zend_string_init_interned
zend_try_assign_typed_ref_arr
zval_ptr_dtor
php_info_print_table_end
php_info_print_table_row
zend_object_std_dtor
add_next_index_string
object_init_ex

libenchant2

enchant_dict_is_added
enchant_broker_init
enchant_dict_get_error
enchant_dict_suggest
enchant_dict_add
enchant_broker_set_ordering
enchant_broker_list_dicts
enchant_dict_free_string_list
enchant_broker_free_dict
enchant_broker_dict_exists
enchant_dict_add_to_session
enchant_get_version
enchant_dict_store_replacement
enchant_broker_get_error
enchant_broker_request_pwl_dict
enchant_dict_check
enchant_dict_describe
enchant_broker_free
enchant_broker_request_dict
enchant_broker_describe

vcruntime140

memcpy
__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_execute_onexit_table
_cexit
_initterm_e

kernel32

GetCurrentThreadId
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess

Exports

Exports

get_module

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9588e8f24b1da110a9656b89bc96100d

Headers

DLL Characteristics

File Characteristics

Imports

php8ts

libenchant2

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB