d44448f8a9ec3dcff453b2de513cf1d6

Sharing

Copy URL Twitter E-mail

General

Target

d44448f8a9ec3dcff453b2de513cf1d6
Size

697KB
MD5

d44448f8a9ec3dcff453b2de513cf1d6
SHA1

0c3c13720185f65416fb75f72f8c15f4ce431fb6
SHA256

f3b7794b89646bd3b77ff9d72b70646f65aa39ddb731cd8ccee5694b9e03ef59
SHA512

8988ef4d1f1ac3b1cce871ad69b6e48acbed3a2a0fef22316b35ee48360f9c71f79c28234aa1433d7d80047e3b7c60dcb7987510f30da1082794610a54a9f6d4
SSDEEP

12288:dUDyqBiSiqzUWkYN5LgHIRxrymTefUuAMrrJbY:afBhHwWkYN5UHIRxrymqfUvMrrJbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d44448f8a9ec3dcff453b2de513cf1d6

Files

d44448f8a9ec3dcff453b2de513cf1d6
.dll windows:6 windows x64 arch:x64

e0a6611f58989901aa6876159e7b8e4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetLogicalDrives
GetOEMCP
GetCurrentProcess
GetThreadErrorMode
GetSystemDefaultUILanguage
GetUserDefaultLangID
GetThreadLocale
GetUserDefaultUILanguage
FlushProcessWriteBuffers
GetLargePageMinimum
GetCurrentThreadId
UnregisterApplicationRecoveryCallback
IsSystemResumeAutomatic
GetSystemDefaultLangID
GetACP
GetCommandLineA
GetTickCount64
GetLastError
GetThreadUILanguage
GetCurrentThread
TlsAlloc
SwitchToThread
GetCurrentProcessorNumber
GetErrorMode
UnregisterApplicationRestart
SetFileApisToOEM
GetTickCount
GetEnvironmentStringsW
AreFileApisANSI
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
IsDebuggerPresent
GetCommandLineW
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
IsValidCodePage
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
TerminateProcess
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW

user32

GetMenuCheckMarkDimensions
GetForegroundWindow
GetCapture
GetMessageExtraInfo
GetFocus
GetClipboardViewer
GetOpenClipboardWindow
GetCursor
GetShellWindow
GetActiveWindow
AnyPopup
InSendMessage
CloseClipboard
EmptyClipboard
CountClipboardFormats
GetKBCodePage
IsProcessDPIAware
GetDialogBaseUnits
GetMessageTime
IsWow64Message
DestroyCaret
GetClipboardSequenceNumber
GetDesktopWindow
SetProcessDPIAware
CreateMenu
GetProcessWindowStation

gdi32

GdiFlush

shell32

InitNetworkAddressControl

ole32

CoUninitialize
CoFreeUnusedLibraries
OleUninitialize

Exports

Exports

CMKoVQzhacLmdI
CnBvAuoyEiTG
Entrypoint
HYoqTXydgCGToRcYfB
QKLoIYlcKZInAWSNMqmsSkLdmrpDV
RCEJSCwPfmxiQqsuyCtA
YFyucgMYVIq
ZsVXJrHXBFPnrrsKl
aAiZdtWANCKg
bvelyuRRcQCxSRXLrcoIZgyUPYiWnU
cymkwGYxvLKbgBiDuFnncFwkgMy
jTzPiEVxfwFshoHNSKFmx
mvEspfshqiehzkISJ
qFZoyrBELMRTzSPr
sejrdSkqHLAdUwzENNaurcYosQ

Sections

.text
Size: 574KB - Virtual size: 574KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0a6611f58989901aa6876159e7b8e4d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 574KB - Virtual size: 574KB

.rdata Size: 110KB - Virtual size: 109KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 6KB - Virtual size: 6KB

_RDATA Size: 512B - Virtual size: 252B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 574KB - Virtual size: 574KB

.rdata
Size: 110KB - Virtual size: 109KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 6KB - Virtual size: 6KB

_RDATA
Size: 512B - Virtual size: 252B

.reloc
Size: 2KB - Virtual size: 1KB