61a25e0fb872d372c5ae8756b1ec6f715c13fdd7b589e5b3a594122a4b799f81

Sharing

Copy URL

Twitter E-mail

General

Target

61a25e0fb872d372c5ae8756b1ec6f715c13fdd7b589e5b3a594122a4b799f81
Size

122KB
MD5

e3aa443e3fc0c61b5b9faa74d24cb1c0
SHA1

0a88cc6aaa57a01943df8cec2fe68a21dbc8e773
SHA256

61a25e0fb872d372c5ae8756b1ec6f715c13fdd7b589e5b3a594122a4b799f81
SHA512

29eeaf0ef5be2d5508eda15e2983404bf3d5f4cad73ac96569f8e4f23f61fc31c980c384c41b573b3f3db5c2227dd6d39b93cd0a61cb74b040cabe4ee89331b2
SSDEEP

1536:khG2LqIjpkW73+sMHVIQceD+NXJ8hHBUkwBs1yHf/gfKYhyICS4AowIO6nToIfQB:YGCkK3peE8FB4mWgfKeTWTBfQrBbK2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61a25e0fb872d372c5ae8756b1ec6f715c13fdd7b589e5b3a594122a4b799f81

Files

61a25e0fb872d372c5ae8756b1ec6f715c13fdd7b589e5b3a594122a4b799f81
.dll windows x86

1f5e61961e6a4327c2f16e6a67bc6889

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z

vcruntime140

__std_type_info_destroy_list
longjmp
__telemetry_main_invoke_trigger
__std_exception_destroy
__std_exception_copy
_except_handler4_common
__telemetry_main_return_trigger
memcpy
_setjmp3
__CxxFrameHandler3
memmove
memset
__std_terminate
memchr
_CxxThrowException

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh
calloc

api-ms-win-crt-stdio-l1-1-0

fflush
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf
fwrite
fopen
fclose

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initterm_e
_cexit
_initterm
_invalid_parameter_noinfo_noreturn
_crt_atexit

api-ms-win-crt-filesystem-l1-1-0

_access

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

buffWritePng
dgdWatermarkGenerateApi
getImgVideoBitsEncodeApi
getUuid2Bitstream
videoDgdWatermarkGenerateApi

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f5e61961e6a4327c2f16e6a67bc6889

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 78KB - Virtual size: 77KB

.rdata Size: 38KB - Virtual size: 38KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 78KB - Virtual size: 77KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB