9c32b7ce807e17608d9bb56a360e37593beaafb9d5b01110c7ffafc5ad66485f

Sharing

Copy URL Twitter E-mail

General

Target

9c32b7ce807e17608d9bb56a360e37593beaafb9d5b01110c7ffafc5ad66485f
Size

108KB
MD5

2aefe024ebc18be11e5e3c46bc62b500
SHA1

483acb791532c3fdbaf028b69ca54ad08cbbb8de
SHA256

9c32b7ce807e17608d9bb56a360e37593beaafb9d5b01110c7ffafc5ad66485f
SHA512

536da7f3da76e5e07bc951e058735e124450ffa8a308145882fdb0912a6ea33946ea7d7e26f1880e0b97cc68ba10c43e678a9faaec7e19cf338a46340e588de8
SSDEEP

3072:b35ka+zDnQt8laF7WOxbKsls1N6c8K+X3G/GbaGWWFr:lT+zVQ9b3lsP/kPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c32b7ce807e17608d9bb56a360e37593beaafb9d5b01110c7ffafc5ad66485f

Files

9c32b7ce807e17608d9bb56a360e37593beaafb9d5b01110c7ffafc5ad66485f
.dll windows x86

84cc2144c6654943f61d4dd69c33e845

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

RtlComputeCrc32
VerSetConditionMask
RtlUnwind

kernel32

HeapAlloc
VirtualQuery
VirtualProtect
WaitForSingleObject
ProcessIdToSessionId
Sleep
GetCurrentThread
GetCurrentProcessId
VerifyVersionInfoW
GetSystemInfo
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
CloseHandle
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTempPathW
ExitProcess
GetModuleFileNameW
LoadLibraryExA
HeapFree
LCMapStringW
GetStdHandle
GetFileType
GetFileAttributesExW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetFilePointerEx
GetStringTypeW
SetStdHandle
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
FlushFileBuffers
DecodePointer

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84cc2144c6654943f61d4dd69c33e845

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 4KB - Virtual size: 4KB