6aee463923132d7eb6a9c86d4421104462ae1d395c9cdd09983406a2894860e8

General

Target

6aee463923132d7eb6a9c86d4421104462ae1d395c9cdd09983406a2894860e8
Size

47KB
MD5

c9a578fa46a884c0da8af923ddc92744
SHA1

2ab880dd9182d851400fc713f1a7c3ac29e28081
SHA256

6aee463923132d7eb6a9c86d4421104462ae1d395c9cdd09983406a2894860e8
SHA512

de42f23e5e3e46517591f0f7faae71dba465c073e388030308d2407e7680c11cb75bcb21d9861159057284085fc73cf8899410df1848542c3ccea10cb3addf74
SSDEEP

768:d2mqOPK5kUIMZyaZw+zBnm7kTl4OwB6hyJzBi0RIoSLaXcTB4t:dSzIMZyYBL783BBtIoSLaXcy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6aee463923132d7eb6a9c86d4421104462ae1d395c9cdd09983406a2894860e8

Files

6aee463923132d7eb6a9c86d4421104462ae1d395c9cdd09983406a2894860e8
.dll windows x86

3ed8f8df5b6adbe39bf570ba2955a71e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

calloc
free

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_wassert
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_cexit

Exports

Exports

PyInit__ed448
ed448_add
ed448_clone
ed448_cmp
ed448_copy
ed448_double
ed448_free_context
ed448_free_point
ed448_get_xy
ed448_neg
ed448_new_context
ed448_new_point
ed448_scalar

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ed8f8df5b6adbe39bf570ba2955a71e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1KB - Virtual size: 1KB