505c232cf3dce4ed5d20ccfcd56d834956e1261b5c535b552140a122598847d9

Sharing

Copy URL Twitter E-mail

General

Target

505c232cf3dce4ed5d20ccfcd56d834956e1261b5c535b552140a122598847d9
Size

172KB
MD5

7ae16b4234b1ef1aea9ff5ddd46dca13
SHA1

2752ec23ef82129ee5121ebe5d12ff726afcc855
SHA256

505c232cf3dce4ed5d20ccfcd56d834956e1261b5c535b552140a122598847d9
SHA512

b207cf51985c39f5b7c0f1e495b509f5f8ff122d6483757c60d81beee39f4ad092dc1f85a925ef219f55e58c9dcc108657d1f30dc9ecffb4611a819d5be37a79
SSDEEP

3072:wIHmmaaCZ0r8sV2xj+ZZfA1clYkhfvgJFhhQ3an44o7MGmPfu9Gg4YJtobR7s:wlmn1rixGlNIJdUK4+fu9GgTEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
505c232cf3dce4ed5d20ccfcd56d834956e1261b5c535b552140a122598847d9

Files

505c232cf3dce4ed5d20ccfcd56d834956e1261b5c535b552140a122598847d9
.dll windows x86

48b48928909590128b4b2afcf2a3d44b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
LocalFree
LocalUnlock
LocalLock
LocalAlloc
_lread
GlobalAlloc
_lclose
_lopen
_hread
_lwrite
_hwrite
_lcreat
GlobalLock
GlobalFree
_llseek
GlobalUnlock
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
ReadFile
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
RaiseException
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
RtlUnwind

user32

MessageBoxA

gdi32

StretchDIBits
SetDIBitsToDevice
SetStretchBltMode

Exports

Exports

AlphaBetaGammaFilter
AutoCorrErp
AutoCorrSegment
AutoCorrx
AutoCorrxFast
AutocorrPsd
AvePsdCalc
BTpsde
BandFilter5_25
BandFilterVsFFT
BisDirectCalc
CalcCumulants
ChannelRelated
CharactersCalc
CohereAdding
CohereCurve
CohereCurves
ComboFilter50Hz
ComputeCorX
ComputeCum3
ComputeCum3x
ConnectStrength
ConnectXY
CorAmogLeads
Cum3Diagonal
CumAbsCalc
CumAbsCalc1
Cumulant3rd
CutSmoothFilter
CutSmoothN
DeleteEOGx1
DiffSmooth
DiscardBaseline
DistanceCurve
Double2Integer
Doubles2Shorts
DrawFullPicture
DrawPicture
EliminateTrend
EntropyCompute
ErpAddition
FFT
FFT2DCalc
FFTdouble
Filter6to15Hz
FirFilterByFFT
FirFilterX
Float2Integer
HilbertFir
InterpABCx
InterpVector
InterpXYZe
InterpXYZs
KurtosisCalc
LmsAdaptiveFilter
LowFilter0_50_1000Hz
LowFilter0_50_500Hz
MatInterpolate
MedianFilter
MemDotLine
MemDrawBox
MemDrawHideLine
MemDrawLine
MemDrawLine2
MemDrawLine3
MemDrawMesh
MemDrawPoint
MemDrawPoint2
MemDrawPoint3
MemWaterfall
MeshFxy
MeshGradientColor
MeshInterpFxy1
MeshMakeContour
ParabolaFitting
PeriodicSignal
PsdAddition
PsdNormalize
QuickSortFloats
ReadBMPFile24
ReadBMPInfo24
RepresentEntropy
ResamplingSignal
SampleEntropy
SinDelay
SmoothDoubles
SmoothFloats
SplineInterp1
SplineInterp2
SplineInterp3
StrengthCurve
SynPhaseIndex
TimeDomainPCA
ToneByCohere
VarianceCompute
WindowData
Windowing2D
Windowing2Df
WriteBMPFile24
atanxy
bpeegReadChannel
coheresignal
diffax
eProbCalc
eSegParams
eegFirFilter12to45
eegFirFilter240
eegFirFilter240i
eegSmoothmf
eegSmoothmi
erpFeatures
fdFeatures
fdParamsCalc
fftBatchFilter
fftBatchFilter1
fftPsdCalc
hpsDiscardBaseI
hpsFilterI
hpsWave
kNearest
memDrawEllipse
mvPdfCompute
mvRegress
nnProbability
shortCorrXY
sigFloat2Short
tdFeatures
xCorCalc
xCorrCompute
xCorrCompute1
xCorrCompute2
xCorrD
xCovCompute

Sections

.text
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48b48928909590128b4b2afcf2a3d44b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 132KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 136KB - Virtual size: 132KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB