5455685e0f6ced99122fdb9677f19db216daeb41b2bbd0f025c5d3dfb9a7ca2e

Sharing

Copy URL Twitter E-mail

General

Target

5455685e0f6ced99122fdb9677f19db216daeb41b2bbd0f025c5d3dfb9a7ca2e
Size

271KB
MD5

9e1b8bb19dbc50f6dc8b205cf793db87
SHA1

9be324bcb6c74a6d0b4796b838c98f0fcb198b54
SHA256

5455685e0f6ced99122fdb9677f19db216daeb41b2bbd0f025c5d3dfb9a7ca2e
SHA512

3b9df85333d08334a1a33a14006faf173d3edc6a4b2ab7c0f45dc23fbf829b342fc172e1c85350c36ada8c8d40df7236f807994eba626da45926ac3b1eb81d00
SSDEEP

6144:C2naAfmNNojs/fhJ4G+3ODSdc37NNdy0g:RaASfJJ4Negu7NH/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5455685e0f6ced99122fdb9677f19db216daeb41b2bbd0f025c5d3dfb9a7ca2e

Files

5455685e0f6ced99122fdb9677f19db216daeb41b2bbd0f025c5d3dfb9a7ca2e
.dll windows:6 windows x86 arch:x86

010d59f0bd72d8ceb294734ad9f074a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memcpy
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
exit

api-ms-win-crt-string-l1-1-0

strcat_s

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

010d59f0bd72d8ceb294734ad9f074a3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 259KB - Virtual size: 259KB

.00cfg Size: 512B - Virtual size: 4B

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 408B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 259KB - Virtual size: 259KB

.00cfg
Size: 512B - Virtual size: 4B

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 408B