123ab31307ec106da71a0b9b236a1e9819e42802b767615391b066b43016f419

Sharing

Copy URL Twitter E-mail

General

Target

123ab31307ec106da71a0b9b236a1e9819e42802b767615391b066b43016f419
Size

8.6MB
MD5

9004b82914b9ed287272d353dab19a19
SHA1

25ddbea412d055dd430cf256ad48f6064e30d930
SHA256

123ab31307ec106da71a0b9b236a1e9819e42802b767615391b066b43016f419
SHA512

4d87ae1a15afa8b5d90749f0ae46a5bd018436c35173e0e63ab624bcbc60050f928e58f9c1daf46b544faeda324ff80489bd85dcd9242d5af06577069376f1ab
SSDEEP

196608:omIMGf8PO+OF7VvDE5E5ROCU+KvTI/ueQe41AYMlMud73PJTuR:omILf3+GVLROCbue413MWud73PJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
123ab31307ec106da71a0b9b236a1e9819e42802b767615391b066b43016f419

Files

123ab31307ec106da71a0b9b236a1e9819e42802b767615391b066b43016f419
.dll windows:6 windows x64

7d29e37829c452f55a02c3c8f22f3ff2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

MsgWaitForMultipleObjects
CharUpperBuffW

gdi32

SelectObject

advapi32

OpenServiceA

shell32

SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime

comctl32

ImageList_Destroy

psapi

GetMappedFileNameW

gdiplus

GdipCreateBitmapFromScan0

ws2_32

recv

Exports

Exports

DllMain

Sections

.text
Size: - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.B3e
Size: - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.+4{
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.A(_
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d29e37829c452f55a02c3c8f22f3ff2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

psapi

gdiplus

ws2_32

Exports

Exports

Sections

.text Size: - Virtual size: 884KB

.rdata Size: - Virtual size: 191KB

.data Size: - Virtual size: 55KB

.pdata Size: - Virtual size: 20KB

_RDATA Size: - Virtual size: 252B

.B3e Size: - Virtual size: 6.0MB

.+4{ Size: 3KB - Virtual size: 3KB

.A(_ Size: 8.6MB - Virtual size: 8.6MB

.reloc Size: 512B - Virtual size: 184B

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: - Virtual size: 884KB

.rdata
Size: - Virtual size: 191KB

.data
Size: - Virtual size: 55KB

.pdata
Size: - Virtual size: 20KB

_RDATA
Size: - Virtual size: 252B

.B3e
Size: - Virtual size: 6.0MB

.+4{
Size: 3KB - Virtual size: 3KB

.A(_
Size: 8.6MB - Virtual size: 8.6MB

.reloc
Size: 512B - Virtual size: 184B

.rsrc
Size: 3KB - Virtual size: 2KB