877f0c088442140f6a1f394b6ec96da5c14a82fdf30afbe0b0857373dabb16ab

General

Target

877f0c088442140f6a1f394b6ec96da5c14a82fdf30afbe0b0857373dabb16ab
Size

9KB
MD5

3b705e4e09064afa21d69ae38938037b
SHA1

1a1c3a805e5596716ce50a61edc7c1e5e147c5e0
SHA256

877f0c088442140f6a1f394b6ec96da5c14a82fdf30afbe0b0857373dabb16ab
SHA512

28fd10ec71d3f18fa4bbd5e267d1dd5d634715382dc412cb8eba61898f361200494c421a97fcd2023bac4378f4e1c518ac9c33e5e229a167506c321153a72e35
SSDEEP

96:FUpvEQevLV1Cw5GwMlT2nQEbJNgXgWuSRYfQmVSC76KF/:FUpvEQenCW5Mlin9JYgWjaf/VSC7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
877f0c088442140f6a1f394b6ec96da5c14a82fdf30afbe0b0857373dabb16ab

Files

877f0c088442140f6a1f394b6ec96da5c14a82fdf30afbe0b0857373dabb16ab
.dll windows x86

e211397d1e83a36c944887bb43d5c6ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sdtapi

_Routon_RepeatRead@4
_ReadBaseMsg@8
_Authenticate@0
_HIDSelect@4
_GetHIDCount@0
_CloseComm@0
_InitComm@4
_Routon_GetMainVersion@4

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_narrow_environment
_execute_onexit_table

kernel32

InitializeSListHead
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime

Exports

Exports

JL_Authenticate
JL_CloseComm
JL_GetHIDCount
JL_HIDSelect
JL_InitComm
JL_ReadBaseMsg
JL_Routon_GetMainVersion
JL_Routon_RepeatRead

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e211397d1e83a36c944887bb43d5c6ee

Headers

DLL Characteristics

File Characteristics

Imports

sdtapi

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 308B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 308B