48df3db023d28a49df1833c08af6de4a34afab00ef5a2fd7a79822c814a4a4a2

Sharing

Copy URL Twitter E-mail

General

Target

48df3db023d28a49df1833c08af6de4a34afab00ef5a2fd7a79822c814a4a4a2
Size

155KB
MD5

3800f8fa0c8618dd1395377e57517a49
SHA1

0058a061a8ffe6fb3bb021b1e062268c7763ad83
SHA256

48df3db023d28a49df1833c08af6de4a34afab00ef5a2fd7a79822c814a4a4a2
SHA512

2bd32eaed1689e5dc12fb0d50f90010e48b736dc3c4ba976dba4f222b83a6f5a40f346a898e69a64df30a964725adaa322eab4186134933bd7e3dd53da60c6f4
SSDEEP

3072:U9MtOeNqCgAIDWWqoDO0ptJmLHEpIV8JDX2DXNYc0Vv33jAtw:U9M5HgAIDW8zIz0V/3jAt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48df3db023d28a49df1833c08af6de4a34afab00ef5a2fd7a79822c814a4a4a2

Files

48df3db023d28a49df1833c08af6de4a34afab00ef5a2fd7a79822c814a4a4a2
.dll windows:6 windows x64

68c5c6107d75d44d81bb03d305d7da9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObjectEx
SetThreadPriority
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

vcruntime140

memset
memmove
__C_specific_handler
__std_type_info_destroy_list
memcpy

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initterm_e
_beginthreadex
_cexit
_execute_onexit_table
_initialize_onexit_table
_initterm
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

calloc
free
malloc

Exports

Exports

VP8CheckSignature
VP8GetCPUInfo
VP8GetInfo
VP8LCheckSignature
VP8LGetInfo
WebPCopyPixels
WebPCopyPlane
WebPDecode
WebPDecodeARGB
WebPDecodeARGBInto
WebPDecodeBGR
WebPDecodeBGRA
WebPDecodeBGRAInto
WebPDecodeBGRInto
WebPDecodeRGB
WebPDecodeRGBA
WebPDecodeRGBAInto
WebPDecodeRGBInto
WebPDecodeYUV
WebPDecodeYUVInto
WebPFree
WebPFreeDecBuffer
WebPGetColorPalette
WebPGetDecoderVersion
WebPGetFeaturesInternal
WebPGetInfo
WebPGetWorkerInterface
WebPIAppend
WebPIDecGetRGB
WebPIDecGetYUVA
WebPIDecode
WebPIDecodedArea
WebPIDelete
WebPINewDecoder
WebPINewRGB
WebPINewYUV
WebPINewYUVA
WebPIUpdate
WebPInitDecBufferInternal
WebPInitDecoderConfigInternal
WebPMalloc
WebPSafeCalloc
WebPSafeFree
WebPSafeMalloc
WebPSetWorkerInterface

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68c5c6107d75d44d81bb03d305d7da9a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 21KB - Virtual size: 21KB

.data Size: 512B - Virtual size: 3KB

.pdata Size: 7KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 116B

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 21KB - Virtual size: 21KB

.data
Size: 512B - Virtual size: 3KB

.pdata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 116B