6674b3e67e290341bd81193732a336a42776f507c3925e8d3bd2b0877265d261

Sharing

Copy URL Twitter E-mail

General

Target

6674b3e67e290341bd81193732a336a42776f507c3925e8d3bd2b0877265d261
Size

191KB
MD5

1ffdf7764494885550c920f1611522af
SHA1

6c415e166bdf2f7b5a0d884c6c40d7373d5e57a9
SHA256

6674b3e67e290341bd81193732a336a42776f507c3925e8d3bd2b0877265d261
SHA512

0b3b21acc6f4cf9706b26493132d8f3a08d0218ac444e31309951680acf98a13fe11e281c9cd586002f1a484a520b861faafc85166de921c396c4079f8c6a0a6
SSDEEP

3072:njFP1ie7GESjb4VinP950FrrVQ7U8OAg0Fu2WZW3U:njHZ7JSjbVP95kNAOWU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6674b3e67e290341bd81193732a336a42776f507c3925e8d3bd2b0877265d261

Files

6674b3e67e290341bd81193732a336a42776f507c3925e8d3bd2b0877265d261
.dll windows:6 windows x86

452bc8858c556aa410328a388ddb5545

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
FlushFileBuffers
WriteFile
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
FreeLibrary
FindResourceExW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
CreateEventW
GetStringTypeW
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
FindClose
FindNextFileA
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
LoadLibraryExW
RtlUnwind
InterlockedFlushSList
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetFileType
SetFilePointerEx
GetConsoleCP
GetConsoleMode
GetACP
GetStdHandle

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

452bc8858c556aa410328a388ddb5545

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 99KB - Virtual size: 99KB

.data Size: 7KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 848B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 99KB - Virtual size: 99KB

.data
Size: 7KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 7KB - Virtual size: 6KB