c8141029ee7ae599d7d37711fd34e5e88f0da5da5a4ff76630fa90eb2d3e171e

Sharing

Copy URL

Twitter E-mail

General

Target

c8141029ee7ae599d7d37711fd34e5e88f0da5da5a4ff76630fa90eb2d3e171e
Size

16KB
MD5

ef7420afc644cb2f1d6f2d7867ed627e
SHA1

1b66df414095241253c13fe0b805bd7ab23d4ca4
SHA256

c8141029ee7ae599d7d37711fd34e5e88f0da5da5a4ff76630fa90eb2d3e171e
SHA512

e2aeb2ed0a50bde366af99c150f158d11d29ca1a063a2826f9f9ec0963cb480f50f6aad5cadc7f24c05970d9c5fd5a111aae08eab63befdeb28cefd53b8f69dc
SSDEEP

384:9HNEFAi+IPUNmqkwqYQMjE96ryfm15kN4s:9llqP9TOsNj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8141029ee7ae599d7d37711fd34e5e88f0da5da5a4ff76630fa90eb2d3e171e

Files

c8141029ee7ae599d7d37711fd34e5e88f0da5da5a4ff76630fa90eb2d3e171e
.dll windows x86

e1efef5f490c9afa264f6b917056e738

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memset
__std_type_info_destroy_list
_except_handler4_common
_purecall
__std_exception_destroy
__std_exception_copy
__CxxFrameHandler3
_CxxThrowException
memcpy
memmove

api-ms-win-crt-stdio-l1-1-0

fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

strncpy_s

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

Exports

Exports

CreateAuthenticationObject

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1efef5f490c9afa264f6b917056e738

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 704B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 704B