0b2801fe28a98f60f5de8a42c44ee76a1fd95a5863ba9a6f9717d28ab3a25b78

Sharing

Copy URL Twitter E-mail

General

Target

0b2801fe28a98f60f5de8a42c44ee76a1fd95a5863ba9a6f9717d28ab3a25b78
Size

14KB
MD5

18a9ad3faa1044cabc545c0ce4725a8d
SHA1

1111e677d32b3cc94095c3c17a5179bbed25d2a9
SHA256

0b2801fe28a98f60f5de8a42c44ee76a1fd95a5863ba9a6f9717d28ab3a25b78
SHA512

a8c445d5e703e14ec9fa2eefa2d57fb489535e1dedfcc42da91ae068698ee0b04eb308b8f25352f9e76f9c56633956006da4dc153cff9439d5a1c0ca2fd546c0
SSDEEP

384:E861GYRa2LTlgrXXXP2VKG/kQoR0pp3OtlaoNne:Sj+rXXf2n/kj0TOthle

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b2801fe28a98f60f5de8a42c44ee76a1fd95a5863ba9a6f9717d28ab3a25b78

Files

0b2801fe28a98f60f5de8a42c44ee76a1fd95a5863ba9a6f9717d28ab3a25b78
.dll windows x86

bdd6fa2b9110dc484d2f9517c0a57e67

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetVersionExW
GetSystemTimeAsFileTime

api-ms-win-core-file-l1-2-1

CreateFileW

api-ms-win-devices-config-l1-1-1

CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

api-ms-win-core-io-l1-1-1

DeviceIoControl

api-ms-win-core-handle-l1-1-0

CloseHandle

kernel32

LoadLibraryW

user32

SetDisplayConfig

msvcr90

_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
memset
_amsg_exit
_initterm_e
?terminate@@YAXXZ
_adjust_fdiv
_initterm
_decode_pointer
??3@YAXPAX@Z
free
malloc
printf
??2@YAPAXI@Z
_encode_pointer
_malloc_crt
_encoded_null

api-ms-win-core-interlocked-l1-2-0

InterlockedCompareExchange
InterlockedExchange

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processthreads-l1-1-2

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-debug-l1-1-1

IsDebuggerPresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

Exports

Exports

DisplayConfigurerDestroy
DisplayConfigurerDetectMonitor
DisplayConfigurerInit
DisplayConfigurerRemoveMonitor
DisplayConfigurerSetDisplayMode

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdd6fa2b9110dc484d2f9517c0a57e67

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-file-l1-2-1

api-ms-win-devices-config-l1-1-1

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-io-l1-1-1

api-ms-win-core-handle-l1-1-0

kernel32

user32

msvcr90

api-ms-win-core-interlocked-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-debug-l1-1-1

api-ms-win-core-profile-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1016B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 634B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1016B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 634B