37dc796f9cf95d08e23b7985caccf832

General

Target

37dc796f9cf95d08e23b7985caccf832
Size

155KB
MD5

37dc796f9cf95d08e23b7985caccf832
SHA1

1a65f358634dc0d37bb44c9ce5bae29baa844dea
SHA256

5c887f386e09d1fb5792f6a50ffa1fd301df48ad52fe27399b81bc41e7b19324
SHA512

2d9909ab834aa684f6703b66747b069c7add0b38d7e478ac7c88cc9b87165bb39499c0fb11ad306768286a1112c4b64c65b9a430f00eab3109c731e3937c3836
SSDEEP

3072:Wk90Gm8wFkIVcAyZNGFw34cSlYC//rBKaGsDptWjy/Vnw+ZFN1VCumXbp:Lpm8wFkIVcAOD34cSlN3kkDqjy/y+9nc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37dc796f9cf95d08e23b7985caccf832

Files

37dc796f9cf95d08e23b7985caccf832
.dll windows:5 windows x86 arch:x86

2c1a17f4c71bbe702d7fa8ba37faa88b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

vfprintf
ftell
fprintf
fread
fopen
printf
atoi
sprintf
memchr
strchr
__iob_func
malloc
putc
free
memmove
perror
putchar
strtoul
fseek
exit
fclose
fflush
getenv
memset
memcpy

kernel32

UnmapViewOfFile
GetSystemTime
GetPrivateProfileSectionW
CloseHandle
CreatePipe
CreateFileMappingW
GetProcAddress
IsDBCSLeadByteEx
GetLastError
CreateFileW
TerminateThread
LoadLibraryW
EnumTimeFormatsA
GetConsoleAliasesLengthA
InterlockedCompareExchange
SystemTimeToFileTime
MapViewOfFile
PeekNamedPipe
GetFileSize

user32

GetProcessWindowStation
GetUserObjectSecurity
IntersectRect
BringWindowToTop
GetActiveWindow
GetDlgItemTextW
SetProcessWindowStation

Exports

Exports

GetInterface
TbBishopAttacks
TbInitImpl
TbKingAttacks
TbKnightAttacks
TbLsb
TbPawnAttacks
TbPopCount
TbPopLsb
TbProbeRootImpl
TbProbeWdlImpl
TbQueenAttacks
TbRookAttacks

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c1a17f4c71bbe702d7fa8ba37faa88b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

Exports

Exports

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 1024B - Virtual size: 337KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 1024B - Virtual size: 337KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 5KB - Virtual size: 5KB