f6ca9533892805218b08c71e8cf7a361b347dcfac010ae7619a05968d04330cf

Sharing

Copy URL Twitter E-mail

General

Target

f6ca9533892805218b08c71e8cf7a361b347dcfac010ae7619a05968d04330cf
Size

179KB
MD5

62c192ee02e1352abb241a116e8358e4
SHA1

e5dbe6e3f7d53894d8a5fee742270fface9f458a
SHA256

f6ca9533892805218b08c71e8cf7a361b347dcfac010ae7619a05968d04330cf
SHA512

2b4f26224ba17fa3cb24dd74ebf28c00fc517c3728383044f71f43dd8f8c4afde4941f428a7d9d7f313b9a048969e05835b0e94ac77c4cc576d64b0dfd7364a6
SSDEEP

3072:ZpukdFkNDvfRsJzejYieX6CjwP9zLVLMS6mDXZjZcPKRH6u9eIVBb+2KHw83rXtQ:ZvWDvfRsJz0YXEzLGjmDXZjFb9eIVY2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6ca9533892805218b08c71e8cf7a361b347dcfac010ae7619a05968d04330cf

Files

f6ca9533892805218b08c71e8cf7a361b347dcfac010ae7619a05968d04330cf
.dll windows:6 windows x86

bf7be88cf65cbde68e9b13116fcc82ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vcruntime140

__std_type_info_destroy_list
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
memcpy
_except_handler4_common
memset

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
ftell
fseek
fread
fopen
fclose

api-ms-win-crt-math-l1-1-0

_CIatan2
_libm_sse2_cos_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_libm_sse2_atan_precise
_libm_sse2_acos_precise

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
free
malloc
_aligned_free

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm_e
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm
_crt_atexit

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
UnhandledExceptionFilter

Exports

Exports

HIKSLF_Process
HIKSLF_WebProcess
SLF_Get_Cur_Version

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bf7be88cf65cbde68e9b13116fcc82ae

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 89KB - Virtual size: 89KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 89KB - Virtual size: 89KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB