679bdd1b6a21aff2a7f82755cdeae880b4fb717d4f3f7cc8cc6fec532bae0ada

General

Target

679bdd1b6a21aff2a7f82755cdeae880b4fb717d4f3f7cc8cc6fec532bae0ada
Size

132KB
MD5

af09ae931c0fb2a33267305de814fdc3
SHA1

9a8f738582bdfd86e43e42ad55b0d8d0f8f957b9
SHA256

679bdd1b6a21aff2a7f82755cdeae880b4fb717d4f3f7cc8cc6fec532bae0ada
SHA512

328900a2a74327622d61814b23c74ae9565592ff7e910a51f29821e68e54d1bd1ca833cb583671d88fcbee10c4d6a56b183f051531b92ff5805dce62159967aa
SSDEEP

1536:3S7FIDBiA5mm/gjEUkUiSQOCGmobeeAMPEhat+z3YwrC2P7aqc6IDQgnX7Fk1Mdv:3SmDBSCroeJhatwYPsm/DQo7Fjp4DJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679bdd1b6a21aff2a7f82755cdeae880b4fb717d4f3f7cc8cc6fec532bae0ada

Files

679bdd1b6a21aff2a7f82755cdeae880b4fb717d4f3f7cc8cc6fec532bae0ada
.dll windows:4 windows x86 arch:x86

929b72966c8a360f01980ea339caac55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rpcrt4

UuidCreate

kernel32

UnhandledExceptionFilter
HeapFree
HeapAlloc
RtlUnwind
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetLastError
CloseHandle
WriteFile
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
ReadFile
SetUnhandledExceptionFilter
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
InterlockedExchange
VirtualQuery
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileW
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
CreateFileA
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEndOfFile
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
VirtualProtect
GetSystemInfo
GetLocaleInfoW
InterlockedIncrement
InterlockedDecrement

Exports

Exports

productUUIDGenerator

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

929b72966c8a360f01980ea339caac55

Headers

File Characteristics

Imports

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 11KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 11KB

.reloc
Size: 8KB - Virtual size: 6KB