f1a2ba0a94f0bf46f4a9fe94587a8603416e53ae76a25124582e430eb0c9ef2c

Sharing

Copy URL Twitter E-mail

General

Target

f1a2ba0a94f0bf46f4a9fe94587a8603416e53ae76a25124582e430eb0c9ef2c
Size

11.7MB
MD5

eec80a087888b297e9aee53644644833
SHA1

72ac86d512f624d062bfa4928a9332dc1d3dee9e
SHA256

f1a2ba0a94f0bf46f4a9fe94587a8603416e53ae76a25124582e430eb0c9ef2c
SHA512

a63dcb26787caafff5ae6b7a378a7bbad84ba8446d9e514314bb36482d730430fef0e6e1bab0cffcc2d859d53253a5bf54a322f737c71f25051930c6c1d2c8d0
SSDEEP

196608:sF5R1hnKoge1SSL4SVEyOPYGagz4fColMxGE:ahnKL1vj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1a2ba0a94f0bf46f4a9fe94587a8603416e53ae76a25124582e430eb0c9ef2c

Files

f1a2ba0a94f0bf46f4a9fe94587a8603416e53ae76a25124582e430eb0c9ef2c
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

AddCertPoolPath
AddCertPoolText
AddClientAuth
AddHttpCertificate
BrCompress
BrUnCompress
BrotliCompress
BytesToInt
CompileProxyRegexp
CreateCA
CreateCertificate
CreateHTTPClient
CreateKeys
CreateQueue
CreateRedis
CreateSocketClient
CreateSunnyNet
CreateWebsocket
DeflateCompress
DeflateUnCompress
DelHttpCertificate
DelRequestHeader
DelResponseHeader
ExportCA
ExportCert
ExportKEY
ExportP12
ExportPub
GetCommonName
GetRequestALLCookie
GetRequestAllHeader
GetRequestBody
GetRequestBodyLen
GetRequestClientIp
GetRequestCookie
GetRequestHeader
GetResponseAllHeader
GetResponseBody
GetResponseBodyLen
GetResponseHeader
GetResponseStatus
GetResponseStatusCode
GetServerName
GetWebsocketBody
GetWebsocketBodyLen
GoCall
GzipCompress
GzipUnCompress
HTTPClientGetErr
HTTPGetBody
HTTPGetBodyLen
HTTPGetCode
HTTPGetHeads
HTTPOpen
HTTPSendBin
HTTPSetHeader
HTTPSetProxyIP
HTTPSetRedirect
HTTPSetTimeouts
HexDump
JsonToPB
KeysDelete
KeysEmpty
KeysGetCount
KeysGetJson
KeysRead
KeysReadFloat
KeysReadInt
KeysReadLong
KeysWrite
KeysWriteFloat
KeysWriteInt
KeysWriteLong
KeysWriteStr
LoadP12Certificate
LoadX509Certificate
LoadX509KeyPair
MakeChan
PbToJson
ProcessALLName
ProcessAddName
ProcessAddPid
ProcessCancelAll
ProcessDelName
ProcessDelPid
QueueIsEmpty
QueueLength
QueuePull
QueuePush
QueueRelease
RedisClose
RedisDelete
RedisDial
RedisDo
RedisExists
RedisFlushAll
RedisFlushDB
RedisGetBytes
RedisGetInt
RedisGetKeys
RedisGetStr
RedisSet
RedisSetBytes
RedisSetNx
RedisSubscribe
ReleaseSunnyNet
RemoveCertificate
RemoveHTTPClient
RemoveKeys
RemoveRedis
RemoveSocketClient
RemoveWebsocket
ScriptCall
SendWebsocketBody
SetGlobalProxy
SetIeProxy
SetInsecureSkipVerify
SetRequestAllCookie
SetRequestCookie
SetRequestData
SetRequestHeader
SetRequestProxy
SetRequestUrl
SetResponseAllHeader
SetResponseData
SetResponseHeader
SetResponseStatus
SetScript
SetScriptLogCallAddress
SetServerName
SetTcpAgent
SetTcpBody
SetTcpConnectionIP
SetWebsocketBody
SocketClientClose
SocketClientDial
SocketClientGetErr
SocketClientReceive
SocketClientSetBufferSize
SocketClientWrite
StartProcess
SunnyNetClose
SunnyNetError
SunnyNetInstallCert
SunnyNetMustTcp
SunnyNetSetCallback
SunnyNetSetCert
SunnyNetSetPort
SunnyNetSocket5AddUser
SunnyNetSocket5DelUser
SunnyNetStart
SunnyNetVerifyUser
TcpCloseClient
TcpSendMsg
TcpSendMsgClient
WebpToJpeg
WebpToJpegBytes
WebpToPng
WebpToPngBytes
WebsocketClientReceive
WebsocketClose
WebsocketDial
WebsocketGetErr
WebsocketReadWrite
ZlibCompress
ZlibUnCompress
_cgo_dummy_export
go_tcpCanReceive
go_tcpCanSend
go_tcpClosed
go_tcpConnectRequest
go_tcpConnected
go_tcpReceive
go_tcpSend
go_threadEnd
go_threadStart
go_udpCanReceive
go_udpCanSend
go_udpClosed
go_udpConnectRequest
go_udpCreated
go_udpReceive
go_udpSend

Sections

.text
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 233KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 5.3MB - Virtual size: 5.3MB

.data Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 4.8MB - Virtual size: 4.8MB

.bss Size: - Virtual size: 233KB

.edata Size: 4KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 48B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 229KB - Virtual size: 229KB

.text
Size: 5.3MB - Virtual size: 5.3MB

.data
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 4.8MB - Virtual size: 4.8MB

.bss
Size: - Virtual size: 233KB

.edata
Size: 4KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 229KB - Virtual size: 229KB