b6c857052e1ba323be54f02b979e53576ea911dd0de0d266feb76d693e479bb6

Sharing

Copy URL Twitter E-mail

General

Target

b6c857052e1ba323be54f02b979e53576ea911dd0de0d266feb76d693e479bb6
Size

479KB
MD5

cf2b4ab3faf5115595e460573297f908
SHA1

b75a602974dc2e77e595cfd5ebed22844e7216a4
SHA256

b6c857052e1ba323be54f02b979e53576ea911dd0de0d266feb76d693e479bb6
SHA512

d0d30123c7e312b75dba443e9a47e7b711f6a13a1aaed5c208a9379d298c1f413fefc935d173edc5d5fb5bc026284e346289698abb85ff1d3f4d970afa1219d8
SSDEEP

6144:yLqE1ayVU05ER4CQ0ykeyVDwoUOT1CS6E0FQSgdUs+pEshAYem7P/nEQ:yLRBx3C/yQVkJORuNFFbpEsWwLsQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6c857052e1ba323be54f02b979e53576ea911dd0de0d266feb76d693e479bb6

Files

b6c857052e1ba323be54f02b979e53576ea911dd0de0d266feb76d693e479bb6
.dll windows:6 windows x64

2d434c1a0c1845a8d333063313c9c134

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateMutexW
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexA
WriteConsoleW
SetEndOfFile
HeapSize
CreateFileW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetTimeZoneInformation
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetStdHandle
GetFileType
HeapReAlloc
SetFilePointerEx
GetConsoleMode
ReadConsoleW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
CloseHandle
GetFileSizeEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP

iphlpapi

GetAdaptersInfo

ws2_32

__WSAFDIsSet
closesocket
gethostbyname
select
shutdown
WSAStartup
WSACleanup
send
socket
connect
recv
htons
ioctlsocket
WSAGetLastError
inet_addr

Exports

Exports

DSPTR011000
DSPTR011001
DSPTR011002
DSPTR011003
DSPTR011004
DSPTR011005
DSPTR011006
DSPTR011007
DSPTR011008
DSPTR011009
DSPTR011010
DSPTR011011
DSPTR011012
DSPTR011013
DSPTR011014
DSPTR011015
DSPTR011016
DSPTR011017
DSPTR011018
DSPTR011019
DSPTR011020
DSPTR011021
DSPTR011022
DSPTR011023
DSPTR011024
DSPTR011025
DSPTR011026
DSPTR011027
DSPTR011028
DSPTR011029
DSPTR011030
DSPTR011031
DSPTR011032
DSPTR011033
DSPTR011034
DSPTR011035
DSPTR011036
DSPTR011037
DSPTR011038
DSPTR011039
DSPTR011040
DSPTR011041
DSPTR011042
DSPTR011043
DSPTR011044
DSPTR011045
DSPTR011046
DSPTR011047
DSPTR011048
DSPTR011049
DSPTR011050
DSPTR011051
DSPTR011052
DSPTR011053
DSPTR011054
DSPTR011055
DSPTR011056
DSPTR011057
DSPTR011058
DSPTR011059
DSPTR011060
DSPTR011061
DSPTR011063
DSPTR011064
DSPTR011065
DSPTR011066
DSPTR011067
DSPTR011068
DSPTR011069
DSPTR011070
DSPTR011071
DSPTR011072
DSPTR011073
DSPTR011075
DSpotterAGCDisable
DSpotterAGCEnable
DSpotterAGCSetCallback
DSpotterAGCSetIncGainThrd
DSpotterAGCSetMaxGain
DSpotterAddPdfScores
DSpotterAddSample
DSpotterAddSampleAndGetPdfScore
DSpotterCombineMapIDPackBin
DSpotterCombinePackBin
DSpotterContinue
DSpotterGenerateLicenseEx
DSpotterGetCmdConfiReward
DSpotterGetCmdEndSil
DSpotterGetCmdEnergy
DSpotterGetCmdResponseTime
DSpotterGetCmdReward
DSpotterGetCmdSGDiffReward
DSpotterGetCmdWordDuration
DSpotterGetCommandNumber
DSpotterGetConfiReward
DSpotterGetEnergyTH
DSpotterGetFilLevel
DSpotterGetLicenseTimeStampEx
DSpotterGetMainLangID
DSpotterGetModelConfiReward
DSpotterGetModelFilLevel
DSpotterGetModelRejectionLevel
DSpotterGetModelSGDiffReward
DSpotterGetModelSgLevel
DSpotterGetNBestUTF16ResultScore
DSpotterGetNBestUTF8ResultScore
DSpotterGetNumGroup
DSpotterGetNumWordWithPackBin
DSpotterGetOneNBestUTF8ResultScore
DSpotterGetRejectionLevel
DSpotterGetResultCmdModel
DSpotterGetResultIDMapping
DSpotterGetSGDiffReward
DSpotterGetSampleRate
DSpotterGetSgLevel
DSpotterGetUTF16Command
DSpotterGetUTF16Result
DSpotterGetUTF16ResultNoWait
DSpotterGetUTF8Command
DSpotterGetUTF8Result
DSpotterGetUTF8ResultNoWait
DSpotterInitMultiWithMod
DSpotterInitMultiWithPackBin
DSpotterInitMultiWithPackBinEx
DSpotterIsKeywordAlive
DSpotterRelease
DSpotterReset
DSpotterSetCmdConfiReward
DSpotterSetCmdEndSil
DSpotterSetCmdResponseTime
DSpotterSetCmdReward
DSpotterSetCmdSGDiffReward
DSpotterSetConfiReward
DSpotterSetEnableNBest
DSpotterSetEndSil
DSpotterSetEnergyTH
DSpotterSetFilLevel
DSpotterSetIgnoredCommand
DSpotterSetOptionBeginStateTime
DSpotterSetRejectionLevel
DSpotterSetResponseTime
DSpotterSetResultIDMapping
DSpotterSetSGDiffReward
DSpotterSetSgLevel
DSpotterSetWordOptionBeginState
DSpotterVerInfo

Sections

.text
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d434c1a0c1845a8d333063313c9c134

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

iphlpapi

ws2_32

Exports

Exports

Sections

.text Size: 297KB - Virtual size: 297KB

.rdata Size: 159KB - Virtual size: 158KB

.data Size: 3KB - Virtual size: 9KB

.pdata Size: 14KB - Virtual size: 13KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 297KB - Virtual size: 297KB

.rdata
Size: 159KB - Virtual size: 158KB

.data
Size: 3KB - Virtual size: 9KB

.pdata
Size: 14KB - Virtual size: 13KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB