3b672ba8b1f1f40aba465f2257fca8d1de0a142b0deee54d902ca12820b57eb1

Sharing

Copy URL

Twitter E-mail

General

Target

3b672ba8b1f1f40aba465f2257fca8d1de0a142b0deee54d902ca12820b57eb1
Size

5.9MB
MD5

b2b8bace0ed03613643fb193d68c7ea1
SHA1

1df84af598c5cf9ebf42bdfe6f7ede7749c63caa
SHA256

3b672ba8b1f1f40aba465f2257fca8d1de0a142b0deee54d902ca12820b57eb1
SHA512

eeada2e2a7785008a4ce8ff8e4b64288bcf85429f9ca37ba7f2a806a8a3dc3ed1be6eed5e638c2be0b286c533e54f3f22cbd83a0da935fa5e42888e9768c5def
SSDEEP

98304:IUyoC6e0J4LlKKq/cyViJyZz26IBmFtQYGY/ZsYvRSazgfgEbDZst:le0Jipk9ViJoyBgtQYG8vHgf3ts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b672ba8b1f1f40aba465f2257fca8d1de0a142b0deee54d902ca12820b57eb1

Files

3b672ba8b1f1f40aba465f2257fca8d1de0a142b0deee54d902ca12820b57eb1
.dll windows x64

31e1b7d0dc53a01c1721de3bdeee5db1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SetConsoleTextAttribute
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

FindWindowA
CharUpperBuffW

msvcp140

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove

api-ms-win-crt-stdio-l1-1-0

fclose

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-time-l1-1-0

_localtime64

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll

Exports

Exports

?lessgo@@YAXPEAUHINSTANCE__@@@Z

Sections

.text
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.et0
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.et1
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.et2
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 233B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31e1b7d0dc53a01c1721de3bdeee5db1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 19KB

.rdata Size: - Virtual size: 10KB

.data Size: - Virtual size: 3KB

.pdata Size: - Virtual size: 1KB

.et0 Size: - Virtual size: 3.5MB

.et1 Size: 3KB - Virtual size: 2KB

.et2 Size: 5.9MB - Virtual size: 5.9MB

.reloc Size: 512B - Virtual size: 216B

.rsrc Size: 512B - Virtual size: 233B

.text
Size: - Virtual size: 19KB

.rdata
Size: - Virtual size: 10KB

.data
Size: - Virtual size: 3KB

.pdata
Size: - Virtual size: 1KB

.et0
Size: - Virtual size: 3.5MB

.et1
Size: 3KB - Virtual size: 2KB

.et2
Size: 5.9MB - Virtual size: 5.9MB

.reloc
Size: 512B - Virtual size: 216B

.rsrc
Size: 512B - Virtual size: 233B