e424a3c6971d9fac09357dc30d5c6b3d2661f208e1291bd68c9d83165f18d784

Sharing

Copy URL

Twitter E-mail

General

Target

e424a3c6971d9fac09357dc30d5c6b3d2661f208e1291bd68c9d83165f18d784
Size

36KB
MD5

0c85ba7f64fe4b9594a950a983438567
SHA1

e6d28ced8406d09a01e8e6cf84a86ff54d4803ea
SHA256

e424a3c6971d9fac09357dc30d5c6b3d2661f208e1291bd68c9d83165f18d784
SHA512

095443c22c4385f2f73f79b4964fb0c891b4a1c2c04efa88b0a98e27a7ba248d576d42e5c3e5b5c7924813b9bdc5e981b06a570a9f104cca3fea8d0067444c45
SSDEEP

768:gFIRn/FweO7glOm4UL8g2kRVKSfycTZSvsPGVpHAOG8dzZf:gMtyrm4U4gdhycTZSvsPGV2OG0zp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e424a3c6971d9fac09357dc30d5c6b3d2661f208e1291bd68c9d83165f18d784

Files

e424a3c6971d9fac09357dc30d5c6b3d2661f208e1291bd68c9d83165f18d784
.dll windows x86

5119b4a3d52568a77777f37cd532b60b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
GetFileSize
CloseHandle
ReadFile
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
EnterCriticalSection
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess

msvcp140

?_Xlength_error@std@@YAXPBD@Z

xavefi

FI

xavevt

SignVerify

xavestk

ScanSTK

xaveheur

ScanHeur

vcruntime140

__std_exception_copy
_except_handler4_common
__CxxFrameHandler3
memcpy
__std_exception_destroy
memset
memmove
__std_type_info_destroy_list
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm_e
_cexit
_initterm
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_invalid_parameter_noinfo
_errno
_execute_onexit_table

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Exports

Exports

ScanFile
ScanFileDotNetWrapper

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5119b4a3d52568a77777f37cd532b60b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

xavefi

xavevt

xavestk

xaveheur

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 6KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB