e99dcddfe2eef41f6d3a34d6b87b1fe54c051d1dfd6e157d423bc6f1c9e8264b

Sharing

Copy URL Twitter E-mail

General

Target

e99dcddfe2eef41f6d3a34d6b87b1fe54c051d1dfd6e157d423bc6f1c9e8264b
Size

13.3MB
MD5

2fb5f61eecf6a7c9574188f752d4202a
SHA1

ea5a43898ae6aa48e50df092ebc84594c47ff752
SHA256

e99dcddfe2eef41f6d3a34d6b87b1fe54c051d1dfd6e157d423bc6f1c9e8264b
SHA512

fbd144a6e8293defa766fee444e7a078911e6721ec376014939dca78818cc5dec867646e50739df24f649fe9afad60eaf73b5dc1e5a6c7396ed8ea2d120f58c6
SSDEEP

393216:71x0jJK+AFspRPmRvS+UQafsNEwiU6GI4902qsr:ZC4+AFsP6m6iU6GI41r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e99dcddfe2eef41f6d3a34d6b87b1fe54c051d1dfd6e157d423bc6f1c9e8264b

Files

e99dcddfe2eef41f6d3a34d6b87b1fe54c051d1dfd6e157d423bc6f1c9e8264b
.dll windows:6 windows x86 arch:x86

30cdaf093a8e11d20aa2174c6440a19a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree

user32

IsWindow

shlwapi

PathFileExistsW

version

GetFileVersionInfoW

ws2_32

gethostbyname

advapi32

RegisterEventSourceA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Z:x
Size: - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.5Fx
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.PNp
Size: 13.3MB - Virtual size: 13.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30cdaf093a8e11d20aa2174c6440a19a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

version

ws2_32

advapi32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 278KB

.data Size: - Virtual size: 25KB

.tls Size: - Virtual size: 9B

.gfids Size: - Virtual size: 512B

.Z:x Size: - Virtual size: 8.0MB

.5Fx Size: 512B - Virtual size: 80B

.PNp Size: 13.3MB - Virtual size: 13.3MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 278KB

.data
Size: - Virtual size: 25KB

.tls
Size: - Virtual size: 9B

.gfids
Size: - Virtual size: 512B

.Z:x
Size: - Virtual size: 8.0MB

.5Fx
Size: 512B - Virtual size: 80B

.PNp
Size: 13.3MB - Virtual size: 13.3MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 469B