3b45d988eea7cc6493fb8ec199a742bee96c049fa1c93b809b0289c2d6058826

Sharing

Copy URL Twitter E-mail

General

Target

3b45d988eea7cc6493fb8ec199a742bee96c049fa1c93b809b0289c2d6058826
Size

144KB
MD5

fa0f12955f75645368852ec3e19589b9
SHA1

df1979cec03926fb9d306c08a0ffce65d4b7eb78
SHA256

3b45d988eea7cc6493fb8ec199a742bee96c049fa1c93b809b0289c2d6058826
SHA512

ae5b3dad0b324588bb0e61ce743f6fb285977689a7bea46d45e1817bf3266defee9eff5a88aeccb9dc09cc06e121181bdd34b51c976e6ff06e5c0d249f333634
SSDEEP

3072:jL1baeCdWiHOEMPkQMkza5Ag0FuLWQiOlfRZ:jL1eVoCOPOAOzlfRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b45d988eea7cc6493fb8ec199a742bee96c049fa1c93b809b0289c2d6058826

Files

3b45d988eea7cc6493fb8ec199a742bee96c049fa1c93b809b0289c2d6058826
.dll windows:6 windows x86

b33f85b21f30bda78eb19bc75a1a092c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateEventW
FindClose
LoadLibraryExW
GetCurrentThreadId
CreateFileW
FlushFileBuffers
WriteFile
InterlockedFlushSList
RtlUnwind
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
FreeLibrary
FindResourceExW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
OutputDebugStringW
InitializeSListHead
QueryPerformanceCounter
TerminateProcess
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
FindNextFileA
InitializeCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
IsDebuggerPresent
SetStdHandle
GetStdHandle
GetACP
GetModuleFileNameA
ExitProcess
GetConsoleMode
GetConsoleCP
SetFilePointerEx
EnterCriticalSection
GetFileType
GetModuleHandleExW
GetStringTypeW
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetCPInfo

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b33f85b21f30bda78eb19bc75a1a092c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 67KB - Virtual size: 66KB

.rdata Size: 61KB - Virtual size: 61KB

.data Size: 7KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 848B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 67KB - Virtual size: 66KB

.rdata
Size: 61KB - Virtual size: 61KB

.data
Size: 7KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 7KB - Virtual size: 6KB