e4c92d3b44d7a74d3b4af43dd3a3aec751c3c67771fc52e4f91e1a0b6f235a71

Sharing

Copy URL

Twitter E-mail

General

Target

e4c92d3b44d7a74d3b4af43dd3a3aec751c3c67771fc52e4f91e1a0b6f235a71
Size

108KB
MD5

796c349ac225f003c8e0d25c33f3449b
SHA1

6026db5563fb643c7b8e09fcf4a4ce11e13f24b5
SHA256

e4c92d3b44d7a74d3b4af43dd3a3aec751c3c67771fc52e4f91e1a0b6f235a71
SHA512

2a82260ed410b92c2eb8c427110dd1e73fe8054531a2e40a9228acd9f9195e0afc06e0cc4d16c9968b356e731ce62bfe19fc0e079188034ee51cbd8057435b1a
SSDEEP

3072:b35ka+zDnQt8laF7WOxbKsls1N6c8K+X3GsGbaGWWFr:lT+zVQ9b3lsP/tPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4c92d3b44d7a74d3b4af43dd3a3aec751c3c67771fc52e4f91e1a0b6f235a71

Files

e4c92d3b44d7a74d3b4af43dd3a3aec751c3c67771fc52e4f91e1a0b6f235a71
.dll windows x86

84cc2144c6654943f61d4dd69c33e845

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlComputeCrc32
VerSetConditionMask
RtlUnwind

kernel32

HeapAlloc
VirtualQuery
VirtualProtect
WaitForSingleObject
ProcessIdToSessionId
Sleep
GetCurrentThread
GetCurrentProcessId
VerifyVersionInfoW
GetSystemInfo
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
CloseHandle
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTempPathW
ExitProcess
GetModuleFileNameW
LoadLibraryExA
HeapFree
LCMapStringW
GetStdHandle
GetFileType
GetFileAttributesExW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
FlushFileBuffers
DecodePointer

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84cc2144c6654943f61d4dd69c33e845

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 4KB - Virtual size: 4KB