f298c3786a3385e6b1be3727861e81b3b2fc05a18802ba055287a7dfd9f089fc

Sharing

Copy URL Twitter E-mail

General

Target

f298c3786a3385e6b1be3727861e81b3b2fc05a18802ba055287a7dfd9f089fc
Size

732KB
MD5

e0756e3a33254c111b274c9d71c04d5f
SHA1

16d19f64e7c0e699d93864ed0637662cbb10ed75
SHA256

f298c3786a3385e6b1be3727861e81b3b2fc05a18802ba055287a7dfd9f089fc
SHA512

3178112d360a72dffb78d8c87ec246001be83050f4005166ddae035539018ac3a29acaba037d83cdbc3682ebe2469d6b1635b9ca0730f45e74b7c5beb8b05c96
SSDEEP

12288:73fPO+u+0kE84dweIx6PSZTwYogDixkeVs0ewTJRgVDTdLBkM+CUaEI/WYgeWYgM:jPX0TNsdQaEIOhCJK5Tn8ITPbxcgQaup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f298c3786a3385e6b1be3727861e81b3b2fc05a18802ba055287a7dfd9f089fc

Files

f298c3786a3385e6b1be3727861e81b3b2fc05a18802ba055287a7dfd9f089fc
.dll windows:6 windows x64

66d146ffa0a960dc693612b96e3f5775

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetLocaleInfoEx
GetStringTypeW
GetLastError
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
HeapReAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetTimeZoneInformation
HeapSize
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
WriteConsoleW
OutputDebugStringA
RtlUnwindEx
DebugBreak
RtlUnwind

winhttp

WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryHeaders
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpReadData

Exports

Exports

RegisterModule

Sections

.text
Size: 543KB - Virtual size: 543KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66d146ffa0a960dc693612b96e3f5775

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winhttp

Exports

Exports

Sections

.text Size: 543KB - Virtual size: 543KB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 15KB - Virtual size: 26KB

.pdata Size: 22KB - Virtual size: 22KB

_RDATA Size: 512B - Virtual size: 244B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 543KB - Virtual size: 543KB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 15KB - Virtual size: 26KB

.pdata
Size: 22KB - Virtual size: 22KB

_RDATA
Size: 512B - Virtual size: 244B

.reloc
Size: 5KB - Virtual size: 5KB