172b367e5c87822b79ffcb79da725591c495c39fbf8ec70227af44e944b301f8

Sharing

Copy URL Twitter E-mail

General

Target

172b367e5c87822b79ffcb79da725591c495c39fbf8ec70227af44e944b301f8
Size

16KB
MD5

ac76e48758d089ef648ca7050e477478
SHA1

c55a5553537213749f6e57afcbf6b30bf749b135
SHA256

172b367e5c87822b79ffcb79da725591c495c39fbf8ec70227af44e944b301f8
SHA512

1d3198296538e09dbc95e99808fd3b873977e2db639ecba3491ef5c3a0f81cbbb3f648c51a7a36d61dea1af609bd3cc4d82999a3b4d234a4d203c75c77811ea0
SSDEEP

192:qtqQnTvG9UoneulL48qn52cldDKbOO9s0HxBs/lCBUsJrWJP1cYHqidjOjeBmSAa:qFk2Doi/lCTSJPuMjzBmsCA2Bnhy7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
172b367e5c87822b79ffcb79da725591c495c39fbf8ec70227af44e944b301f8

Files

172b367e5c87822b79ffcb79da725591c495c39fbf8ec70227af44e944b301f8
.dll windows x86

8a56bf64f06ac4f7b25ba2aca61e12a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetDlgItemTextW
EndDialog
GetDlgItemTextW
SetWindowTextW
DialogBoxParamW

ydbase

?w2u@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string_view@_WU?$char_traits@_W@std@@@3@Vconv_method@1@@Z
?u2w@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string_view@DU?$char_traits@D@std@@@3@Vconv_method@1@@Z
??1windows_exception@base@@UAE@XZ
??0windows_exception@base@@QAE@PBDH@Z
?what@exception@base@@UBEPBDXZ

luacore

luaL_error
luaL_checkinteger
luaL_checklstring
luaL_checkversion_
lua_setglobal
lua_createtable
lua_pushboolean
lua_pushlstring
luaL_setfuncs

msvcp140

?_Xlength_error@std@@YAXPBD@Z

kernel32

GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
InitializeSListHead
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent

vcruntime140

__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
_except_handler4_common
memset
__std_type_info_destroy_list
memcpy

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

Exports

Exports

luaopen_gui

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a56bf64f06ac4f7b25ba2aca61e12a1

Headers

DLL Characteristics

File Characteristics

Imports

user32

ydbase

luacore

msvcp140

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 612B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 612B