7a354f965fcb9569b2a515ae33c1cf1e46a473ec1d759e1e3e24de0be9edc25f

Sharing

Copy URL

Twitter E-mail

General

Target

7a354f965fcb9569b2a515ae33c1cf1e46a473ec1d759e1e3e24de0be9edc25f
Size

8.6MB
MD5

cf6e8d56dd8a03ea04c3a5410fcbf8fd
SHA1

b129cd3643777ba054a75beaca6cd86d578f59c6
SHA256

7a354f965fcb9569b2a515ae33c1cf1e46a473ec1d759e1e3e24de0be9edc25f
SHA512

521870d102232a0455fa01b34f5cf503a4dbfe87261e17982cc1084da0e07e2a4f5a1c2ae84c1d5d42a2d6b373caa5713f583c48346e36b1aee16e7918c672fc
SSDEEP

196608:rAY3unOzesXjtCdVK0dSOlHCXtG9g80n:rr1zUrL4ln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a354f965fcb9569b2a515ae33c1cf1e46a473ec1d759e1e3e24de0be9edc25f

Files

7a354f965fcb9569b2a515ae33c1cf1e46a473ec1d759e1e3e24de0be9edc25f
.dll windows x64

7d29e37829c452f55a02c3c8f22f3ff2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

MsgWaitForMultipleObjects
CharUpperBuffW

gdi32

SelectObject

advapi32

OpenServiceA

shell32

SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime

comctl32

ImageList_Destroy

psapi

GetMappedFileNameW

gdiplus

GdipCreateBitmapFromScan0

ws2_32

recv

Exports

Exports

DllMain

Sections

.text
Size: - Virtual size: 869KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.5iH
Size: - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dm-
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.({`
Size: 8.5MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d29e37829c452f55a02c3c8f22f3ff2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

psapi

gdiplus

ws2_32

Exports

Exports

Sections

.text Size: - Virtual size: 869KB

.rdata Size: - Virtual size: 189KB

.data Size: - Virtual size: 55KB

.pdata Size: - Virtual size: 20KB

_RDATA Size: - Virtual size: 252B

.5iH Size: - Virtual size: 5.9MB

.dm- Size: 3KB - Virtual size: 3KB

.({` Size: 8.5MB - Virtual size: 8.5MB

.reloc Size: 512B - Virtual size: 220B

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: - Virtual size: 869KB

.rdata
Size: - Virtual size: 189KB

.data
Size: - Virtual size: 55KB

.pdata
Size: - Virtual size: 20KB

_RDATA
Size: - Virtual size: 252B

.5iH
Size: - Virtual size: 5.9MB

.dm-
Size: 3KB - Virtual size: 3KB

.({`
Size: 8.5MB - Virtual size: 8.5MB

.reloc
Size: 512B - Virtual size: 220B

.rsrc
Size: 3KB - Virtual size: 2KB