c652d09af3d1cb0c4591d67ac278281b2ec0e5bf27b8c198e1387923aff94d8c

Sharing

Copy URL Twitter E-mail

General

Target

c652d09af3d1cb0c4591d67ac278281b2ec0e5bf27b8c198e1387923aff94d8c
Size

414KB
MD5

71291d955543ec750bc32240a96fe963
SHA1

3a98a93ba050e1700a41a07304dd9283cba736be
SHA256

c652d09af3d1cb0c4591d67ac278281b2ec0e5bf27b8c198e1387923aff94d8c
SHA512

1c9a0a519cfef8826e261464f95d4730275708dbe80ebba0e4160c8f4d5f402a61b360a4aa8be82ede2a0f1e4997645e2d27fe3648e13fe1526e180d3ae19c78
SSDEEP

6144:XgAKKmvoEYgsWDq8tBkZuwzICKQC9csjix3hdNTBcQAOGAOveXJXW:XgAKKg05fIfQCusjSrNTKQwl8G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c652d09af3d1cb0c4591d67ac278281b2ec0e5bf27b8c198e1387923aff94d8c

Files

c652d09af3d1cb0c4591d67ac278281b2ec0e5bf27b8c198e1387923aff94d8c
.dll windows x86

1f250c34248ee968e776801f9ae64dc2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
GetLastError
MultiByteToWideChar
ExitProcess
lstrlenA
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RtlUnwind
RaiseException
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
CloseHandle
ReadFile
GetConsoleMode
ReadConsoleW
GetProcessHeap
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
SetLastError
GetCurrentThread
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
GetConsoleCP
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetFilePointerEx
CreateFileW
FreeLibrary
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
GetStringTypeW
WriteConsoleW
SetEndOfFile

Exports

Exports

SCreateInstance

Sections

.text
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f250c34248ee968e776801f9ae64dc2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 299KB - Virtual size: 299KB

.rdata Size: 94KB - Virtual size: 93KB

.data Size: 6KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 299KB - Virtual size: 299KB

.rdata
Size: 94KB - Virtual size: 93KB

.data
Size: 6KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB