d9b1a27f7cbd19f0314bcf8c68ed1bf3e8256d2aaa946d337ad7cdd30178acb0

Sharing

Copy URL Twitter E-mail

General

Target

d9b1a27f7cbd19f0314bcf8c68ed1bf3e8256d2aaa946d337ad7cdd30178acb0
Size

32KB
MD5

d71f8c0725527623dd9f24168939963d
SHA1

f199947bab511463a44e9960440a8419904a4aa7
SHA256

d9b1a27f7cbd19f0314bcf8c68ed1bf3e8256d2aaa946d337ad7cdd30178acb0
SHA512

dd8626639f8d0296285e0b5db92d6b6386d00e16f560548542f395f0a7eedf616c93e5fc7a1d7f2fd73caefffd06aa6dd69e69a260217cd0a2f0b84dcd42a180
SSDEEP

384:9INRbrPtq9LL+UxD9aoXSkqXEyZRLMK1vuFAf1gSDUw/Mi6X9kswTKm7/SuCHEPa:+NxM9zS2URN9DB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9b1a27f7cbd19f0314bcf8c68ed1bf3e8256d2aaa946d337ad7cdd30178acb0

Files

d9b1a27f7cbd19f0314bcf8c68ed1bf3e8256d2aaa946d337ad7cdd30178acb0
.dll windows:6 windows x64

e1617a5bb2e70886479f86360946ed43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mfc140u

ord1491

kernel32

InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
QueryPerformanceCounter

vcruntime140

__std_type_info_destroy_list
memset
__C_specific_handler

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_initterm
_initterm_e
_cexit

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1617a5bb2e70886479f86360946ed43

Headers

DLL Characteristics

File Characteristics

Imports

mfc140u

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 540B

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 512B - Virtual size: 52B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 540B

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 512B - Virtual size: 52B