60c530969c484a6470d1eae29403e82a84358345aa06a94915401003fe5980f9

Sharing

Copy URL Twitter E-mail

General

Target

60c530969c484a6470d1eae29403e82a84358345aa06a94915401003fe5980f9
Size

15KB
MD5

3a2ffa2db11f768a63a60d129d6d41ec
SHA1

6a244954be8f09cd4731e24f0fae49ad79ccfd98
SHA256

60c530969c484a6470d1eae29403e82a84358345aa06a94915401003fe5980f9
SHA512

b314270f99ffc9226c43fe995d94314ba560aca6bbcc672e9712922cdbef731f878cbd1b9253f406b423be160a1b3beddc958effca2e420be7cd5321a574efda
SSDEEP

192:J8XfHoML2cXIdZ8T6TMkse0kuTgu4XmJPVJikjYMOB6Ajwcn+JoM+eBp2h:aXLpenRbEsmJPrnYMOB6AVn5M+eBp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60c530969c484a6470d1eae29403e82a84358345aa06a94915401003fe5980f9

Files

60c530969c484a6470d1eae29403e82a84358345aa06a94915401003fe5980f9
.dll windows x86

ca6cd3063aea98510830dec81564a91f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
LocalFree
LocalAlloc
CloseHandle
CreateFileW
GetLastError
TerminateProcess
WideCharToMultiByte
QueryPerformanceCounter
UnhandledExceptionFilter

advapi32

CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW

msvcp140

?_Xlength_error@std@@YAXPBD@Z

wintrust

CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrustEx
CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseCatalogContext

crypt32

CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CryptMsgClose
CertGetNameStringW

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memcpy
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove

api-ms-win-crt-runtime-l1-1-0

_cexit
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
_initterm
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Exports

Exports

GetFileCertNameMD5
SignVerify

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca6cd3063aea98510830dec81564a91f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcp140

wintrust

crypt32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 616B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 616B