6bd73e7bbe5fe4b924bcb8b330e896d3c5188c255f2e3a0f261e030f769e617d

Sharing

Copy URL

Twitter E-mail

General

Target

6bd73e7bbe5fe4b924bcb8b330e896d3c5188c255f2e3a0f261e030f769e617d
Size

126KB
MD5

4a990c2e22a9c6a8b5ddf0a784e55161
SHA1

add7fc818d61ab762e89061331cacfa23f671605
SHA256

6bd73e7bbe5fe4b924bcb8b330e896d3c5188c255f2e3a0f261e030f769e617d
SHA512

11259909901f1fa643e0c8eba9d40a0d0f8d4a2e5418ca965ece38a623bf9b8ef9797d343fe9ed1a53a67fbfddd8bff2bbffd9859afedbbb74bcda16f37dafce
SSDEEP

3072:P/oPhFJ3pefq0MDvakRiTbTUeBsZs00JFDx:Ho5FpyNMDa5DUOJ5x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6bd73e7bbe5fe4b924bcb8b330e896d3c5188c255f2e3a0f261e030f769e617d

Files

6bd73e7bbe5fe4b924bcb8b330e896d3c5188c255f2e3a0f261e030f769e617d
.dll windows:6 windows x86

c3380adcfaa711af83e746951200c159

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetThreadContext
GetThreadContext
VirtualFree
GetLastError
SuspendThread
VirtualAlloc
GetCurrentProcess
FreeLibrary
LoadLibraryExW
LoadLibraryExA
SetLastError
FlushInstructionCache
DecodePointer
ResumeThread
GetCurrentThreadId
InterlockedCompareExchange
VirtualQuery
WideCharToMultiByte
GetModuleHandleW
GetCurrentDirectoryW
GetCurrentThread
DisableThreadLibraryCalls
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleFileNameW
InterlockedFlushSList
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapFree
HeapAlloc
GetStringTypeW
GetACP
CloseHandle
GetStdHandle
GetFileType
ReadFile
GetConsoleMode
ReadConsoleW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetCommandLineA
GetCommandLineW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
CreateFileW
SetFilePointerEx
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
VirtualProtect

user32

wsprintfW

gdi32

SelectObject
CreateFontIndirectA
SaveDC
GetGlyphOutlineW
DeleteObject
GetObjectA
RestoreDC

advapi32

SystemFunction036

Exports

Exports

CreateObject

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3380adcfaa711af83e746951200c159

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 6KB - Virtual size: 5KB