8cd0051ab0d733e78bc67025dec2764c4b8e5653c0e5847ad284c679a9db30e2

Sharing

Copy URL Twitter E-mail

General

Target

8cd0051ab0d733e78bc67025dec2764c4b8e5653c0e5847ad284c679a9db30e2
Size

25KB
MD5

c938385150548f0cae4d0c21a0719da7
SHA1

27c3a7d64727b0010d971801309eee14955fa5fe
SHA256

8cd0051ab0d733e78bc67025dec2764c4b8e5653c0e5847ad284c679a9db30e2
SHA512

da681b3325633e88f58f98de058f9543bc5662cd0f8fed6fbc23f53cd915253714078aac08a3824ee458a00c0613f64fc2f9d1f971717540bd6634d8cc3d6ac5
SSDEEP

768:zWR7X2iR6Wq5MITpwN/+ypssolYvDkn7:KhnR6bwN/+kssolYvDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cd0051ab0d733e78bc67025dec2764c4b8e5653c0e5847ad284c679a9db30e2

Files

8cd0051ab0d733e78bc67025dec2764c4b8e5653c0e5847ad284c679a9db30e2
.dll windows x86

c76aed2a74d507996c859f58376a0ff0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

api-ms-win-core-heap-l1-2-0

HeapReAlloc
GetProcessHeap
HeapSize
HeapFree
HeapAlloc
HeapDestroy

api-ms-win-core-synch-l1-2-0

CreateEventW
InitializeCriticalSectionEx
EnterCriticalSection
SetEvent
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ResetEvent
WaitForSingleObjectEx

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
RaiseException

api-ms-win-core-util-l1-1-0

DecodePointer

api-ms-win-core-io-l1-1-1

DeviceIoControl

api-ms-win-core-file-l1-2-0

CreateFileW

api-ms-win-core-sysinfo-l1-2-0

GetVersionExW
GetSystemTimeAsFileTime

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-devices-config-l1-1-0

CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW

api-ms-win-core-libraryloader-l1-1-1

GetProcAddress
GetModuleHandleW
FreeLibrary

kernel32

LoadLibraryW

user32

UnregisterClassW
SetDisplayConfig

vcruntime140

memset
__std_exception_copy
__std_terminate
__std_exception_destroy
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
__CxxFrameHandler3
memmove

api-ms-win-crt-heap-l1-1-0

_callnewh
_recalloc
free
malloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo
_initialize_onexit_table
terminate
_initterm_e
_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_errno
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

api-ms-win-core-debug-l1-1-1

IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-processthreads-l1-1-1

GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-2-0

InitializeSListHead

Exports

Exports

DisplayConfigurerDestroy
DisplayConfigurerDetectMonitor
DisplayConfigurerInit
DisplayConfigurerRemoveMonitor
DisplayConfigurerSetDisplayMode

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c76aed2a74d507996c859f58376a0ff0

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-core-heap-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-util-l1-1-0

api-ms-win-core-io-l1-1-1

api-ms-win-core-file-l1-2-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-devices-config-l1-1-0

api-ms-win-core-libraryloader-l1-1-1

kernel32

user32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-core-debug-l1-1-1

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-2-0

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB