93226bbd2e6d84bd958f279801713676dce8205a8384a0732d5c9ec171fd33b0

Sharing

Copy URL

Twitter E-mail

General

Target

93226bbd2e6d84bd958f279801713676dce8205a8384a0732d5c9ec171fd33b0
Size

1.7MB
MD5

4a0252b165a89f7614d92790d76fac05
SHA1

7ee004a949c22c2404e2c65d534509471f2d8d46
SHA256

93226bbd2e6d84bd958f279801713676dce8205a8384a0732d5c9ec171fd33b0
SHA512

0ebd61a6c9a805ab75cd8a07477fae705f02ba2e5b7f387913d784d16814202a775c065697d96b01721067269d49bb99644fcc315e8442a574b9c48c4242516b
SSDEEP

6144:/vx12Tbgdm+6mJNLT5TUmC8+5a5BMzSFo8txk0oz6h0QA0KjnXc31yGDKcYkHjFT:XECm+TTSXMxk0oz6h0Q2W4T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93226bbd2e6d84bd958f279801713676dce8205a8384a0732d5c9ec171fd33b0

Files

93226bbd2e6d84bd958f279801713676dce8205a8384a0732d5c9ec171fd33b0
.dll windows x86

b7df2a4e1372ed1d5fbe6223a0d156ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

DbgPrint
RtlRaiseException
vDbgPrintExWithPrefix

kernel32

DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
_vsnprintf
abort
bsearch
calloc
free
fwrite
malloc
memcmp
memmove
sprintf
strchr
strcmp
strcpy
strcspn
strncmp
vfprintf

Exports

Exports

DwTerminalDlg
GetRasDialOutProtocols
RasAutodialDisableDlgA
RasAutodialDisableDlgW
RasAutodialQueryDlgA
RasAutodialQueryDlgW
RasDialDlgA
RasDialDlgW
RasEntryDlgA
RasEntryDlgW
RasMonitorDlgA
RasMonitorDlgW
RasPhonebookDlgA
RasPhonebookDlgW
RasSrvAddPropPages
RasSrvAddWizPages
RasSrvAllowConnectionsConfig
RasSrvCleanupService
RasSrvEnumConnections
RasSrvHangupConnection
RasSrvInitializeService
RasSrvIsConnectionConnected
RasSrvIsServiceRunning
RasSrvQueryShowIcon
RasUserEnableManualDial
RasUserGetManualDial
RasUserPrefsDlg
RasWizCreateNewEntry
RasWizGetNCCFlags
RasWizGetSuggestedEntryName
RasWizGetUserInputConnectionName
RasWizIsEntryRenamable
RasWizQueryMaxPageCount
RasWizSetEntryName
RouterEntryDlgA
RouterEntryDlgW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rossym
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7df2a4e1372ed1d5fbe6223a0d156ac

Headers

File Characteristics

Imports

ntdll

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 104B

.rdata Size: 3KB - Virtual size: 2KB

/4 Size: 512B - Virtual size: 20B

.bss Size: - Virtual size: 5KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.reloc Size: 1024B - Virtual size: 1016B

.rossym Size: 23KB - Virtual size: 23KB

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 104B

.rdata
Size: 3KB - Virtual size: 2KB

/4
Size: 512B - Virtual size: 20B

.bss
Size: - Virtual size: 5KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.reloc
Size: 1024B - Virtual size: 1016B

.rossym
Size: 23KB - Virtual size: 23KB