6ee72bbb2d2412785bbd310270fb0bfeb083c23b9fb3ad3c4b089c05c54c7abc

Sharing

Copy URL

Twitter E-mail

General

Target

6ee72bbb2d2412785bbd310270fb0bfeb083c23b9fb3ad3c4b089c05c54c7abc
Size

122KB
MD5

5585a3b34e5e4d8105c7a1758814f096
SHA1

9edba207a60aa3aff602cea4d1e7739b7bd0d788
SHA256

6ee72bbb2d2412785bbd310270fb0bfeb083c23b9fb3ad3c4b089c05c54c7abc
SHA512

32777c2fbfb4fb903f532ff3914c0f9f54d33060944ca391e067bf4077802c53bc4a18b1dfcdbb289af3fad33d24e8250c5caabf925a64556ceb9b3bd84f0f7a
SSDEEP

3072:Nh8bW7poP9Doj4z1b29NCgaC8wsHFUz8:Nh89Ku1S9NCNCuUz8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ee72bbb2d2412785bbd310270fb0bfeb083c23b9fb3ad3c4b089c05c54c7abc

Files

6ee72bbb2d2412785bbd310270fb0bfeb083c23b9fb3ad3c4b089c05c54c7abc
.dll windows:6 windows x86 arch:x86

903ea71f2fe7ab207541df93783b4fc7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExA
FindNextFileA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetThreadLocale
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
RtlUnwind
SetEnvironmentVariableA
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WideCharToMultiByte
WriteConsoleW
WriteFile

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

903ea71f2fe7ab207541df93783b4fc7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 37KB - Virtual size: 37KB

.data Size: 4KB - Virtual size: 7KB

.00cfg Size: 512B - Virtual size: 4B

.data1 Size: 512B - Virtual size: 8B

.trace Size: 3KB - Virtual size: 3KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 37KB - Virtual size: 37KB

.data
Size: 4KB - Virtual size: 7KB

.00cfg
Size: 512B - Virtual size: 4B

.data1
Size: 512B - Virtual size: 8B

.trace
Size: 3KB - Virtual size: 3KB

.reloc
Size: 5KB - Virtual size: 5KB