d23e07ef2442a79063086bafd1abafbac47377fed54b4cb6f28457f2edd0a940

Sharing

Copy URL Twitter E-mail

General

Target

d23e07ef2442a79063086bafd1abafbac47377fed54b4cb6f28457f2edd0a940
Size

328KB
MD5

5f97ae1dbf0d05ab999c8d1fa931045e
SHA1

552d9646281e9b9f14d6b5cffc6ab0e02788c8e5
SHA256

d23e07ef2442a79063086bafd1abafbac47377fed54b4cb6f28457f2edd0a940
SHA512

d7a4d3ca9ca7259c252b5c55aa22ea690643acaecb63117dcedfe5f5a1b0a31561abcf45af024d9372b7f35a63bb8c8f81e1dc41d770e53db1b240422128cd41
SSDEEP

6144:ItJZnzl8md09sC4w+1b2ayDp0NjitPAOq7Cbkzw:YJZaqAR4w+1bUNPo2bkzw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d23e07ef2442a79063086bafd1abafbac47377fed54b4cb6f28457f2edd0a940

Files

d23e07ef2442a79063086bafd1abafbac47377fed54b4cb6f28457f2edd0a940
.dll windows x86

0f6e82938df8bd0b794f12e48a5bf65a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
MapViewOfFile
CreateFileMappingA
FindNextFileA
FindClose
SetEndOfFile
CloseHandle
CreateFileA
FindFirstFileA
UnmapViewOfFile
WriteConsoleW
CreateFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
HeapReAlloc
SetStdHandle
HeapSize

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetFolderPathA

Exports

Exports

voikkoAnalyzeWordCstr
voikkoAnalyzeWordUcs4
voikkoFreeCstr
voikkoFreeCstrArray
voikkoFreeErrorMessageCstr
voikkoFreeGrammarError
voikkoGetGrammarErrorCode
voikkoGetGrammarErrorLength
voikkoGetGrammarErrorShortDescription
voikkoGetGrammarErrorStartPos
voikkoGetGrammarErrorSuggestions
voikkoGetVersion
voikkoHyphenateCstr
voikkoHyphenateUcs4
voikkoInit
voikkoInsertHyphensCstr
voikkoListSupportedGrammarCheckingLanguages
voikkoListSupportedHyphenationLanguages
voikkoListSupportedSpellingLanguages
voikkoNextGrammarErrorCstr
voikkoNextGrammarErrorUcs4
voikkoNextSentenceStartCstr
voikkoNextSentenceStartUcs4
voikkoNextTokenCstr
voikkoNextTokenUcs4
voikkoSetBooleanOption
voikkoSetIntegerOption
voikkoSpellCstr
voikkoSpellUcs4
voikkoSuggestCstr
voikkoSuggestUcs4
voikkoTerminate
voikko_analyze_word_cstr
voikko_analyze_word_ucs4
voikko_dict_description
voikko_dict_language
voikko_dict_script
voikko_dict_variant
voikko_error_message_cstr
voikko_free_dicts
voikko_free_hyphenate
voikko_free_mor_analysis
voikko_free_mor_analysis_value_cstr
voikko_free_suggest_cstr
voikko_free_suggest_ucs4
voikko_hyphenate_cstr
voikko_hyphenate_ucs4
voikko_init
voikko_init_with_path
voikko_list_dicts
voikko_mor_analysis_keys
voikko_mor_analysis_value_cstr
voikko_mor_analysis_value_ucs4
voikko_next_grammar_error_cstr
voikko_next_grammar_error_ucs4
voikko_next_sentence_start_cstr
voikko_next_sentence_start_ucs4
voikko_next_token_cstr
voikko_next_token_ucs4
voikko_set_bool_option
voikko_set_int_option
voikko_set_string_option
voikko_spell_cstr
voikko_spell_ucs4
voikko_suggest_cstr
voikko_suggest_ucs4
voikko_terminate

Sections

.text
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f6e82938df8bd0b794f12e48a5bf65a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 232KB

.rdata Size: 73KB - Virtual size: 73KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 232KB - Virtual size: 232KB

.rdata
Size: 73KB - Virtual size: 73KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB