716fda5a762341fcab9d64bc0cddaad8e7ae70d5ec67145082ec42a9b3724b74

Sharing

Copy URL Twitter E-mail

General

Target

716fda5a762341fcab9d64bc0cddaad8e7ae70d5ec67145082ec42a9b3724b74
Size

2.4MB
MD5

7a5f32cb211df89256419f2b57b1de49
SHA1

1cd904625251c30596b2b0384e89ff673ebd24a2
SHA256

716fda5a762341fcab9d64bc0cddaad8e7ae70d5ec67145082ec42a9b3724b74
SHA512

61e938e5c36a0e5cbfa11e9c44971f289e77aff74bae2cbe21dbcd8dbe64ca3c45569a5375ae4edfeb34b55b3bc65a241c83f80480619f7c0b23cfa3b47c98e0
SSDEEP

24576:frSNbMYkWIY9KzDrmmxKbgdVXQaHGqXShYSyFIAUCNP5l1EgCErtVgNN3CWCRBu0:lK1hYSMnL+blcuXsH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
716fda5a762341fcab9d64bc0cddaad8e7ae70d5ec67145082ec42a9b3724b74

Files

716fda5a762341fcab9d64bc0cddaad8e7ae70d5ec67145082ec42a9b3724b74
.dll windows:6 windows x64 arch:x64

50a5b94962fb8ecfbbd1287796bbf169

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
FatalAppExitA
ExitProcess
RtlLookupFunctionEntry
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
RtlVirtualUnwind

user32

ShowWindow
FindWindowW

vcruntime140

__std_type_info_destroy_list
memcpy
__C_specific_handler
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment

Exports

Exports

MpAddDynamicSignatureFile
MpAllocMemory
MpCleanOpen
MpCleanStart
MpClientUtilExportFunctions
MpConfigClose
MpConfigDelValue
MpConfigGetValue
MpConfigGetValueAlloc
MpConfigInitialize
MpConfigIteratorClose
MpConfigIteratorEnum
MpConfigIteratorOpen
MpConfigOpen
MpConfigSetValue
MpConfigUninitialize
MpConveySampleSubmissionResult
MpDynamicSignatureEnumerate
MpDynamicSignatureOpen
MpFreeMemory
MpGetDeviceControlSecurityPolicies
MpGetSampleChunk
MpGetTDTFeatureStatus
MpGetTDTFeatureStatusEx
MpGetTPStateInfo
MpGetTSModeInfo
MpGetTaskSchedulerStrings
MpHandleClose
MpManagerEnable
MpManagerOpen
MpManagerStatusQuery
MpManagerStatusQueryEx
MpManagerVersionQuery
MpNetworkCapture
MpQuarantineRequest
MpQueryEngineConfigDword
MpRemoveDynamicSignatureFile
MpRollbackPlatform
MpSampleQuery
MpSampleSubmit
MpScanControl
MpScanResult
MpScanStartEx
MpSetTPState
MpThreatEnumerate
MpThreatOpen
MpUnblockEngine
MpUnblockPlatform
MpUnblockSignatures
MpUpdatePlatform
MpUpdateStart
MpUpdateStartEx
MpUtilsExportFunctions
MpWDEnable

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50a5b94962fb8ecfbbd1287796bbf169

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 492B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 44B

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 492B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 44B