02511799ea88e09676da2f0a6625dcfa

Sharing

Copy URL

Twitter E-mail

General

Target

02511799ea88e09676da2f0a6625dcfa
Size

320KB
MD5

02511799ea88e09676da2f0a6625dcfa
SHA1

f3dc16949706c1e91778e2a4a130011433ca992e
SHA256

7de9dc7689649a53b7dadcf0f6f46f5ce11e4183e3ddc34ad4e9edbb7a33e433
SHA512

674bd480ea9b1148c505abc214b2a82457ca8f470ffd809cfc45c3f35c4a907f67720872296ebc27aa43455c971cb590e2fcd833a11376dc9772ee02b32714fa
SSDEEP

6144:SyMWrs0O3ZIVa3PR4zuO6M/xt7DLA/Gz99wvd0qB:CWrPlVs5fO6Mpt74/G9Rq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02511799ea88e09676da2f0a6625dcfa

Files

02511799ea88e09676da2f0a6625dcfa
.dll windows:4 windows x86 arch:x86

91d9482e2d8143ffe2c24d3141960d95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_Draw
ImageList_Read

gdi32

SetPixel
SaveDC
CreatePalette
CopyEnhMetaFileA
GetBitmapBits
CreateCompatibleBitmap
CreateBitmap
SelectPalette

version

GetFileVersionInfoSizeA

kernel32

LocalAlloc
GetProcAddress
GetModuleHandleW
GetCommandLineA
lstrlenA
GetModuleHandleA
GlobalAlloc
ExitThread
IsBadReadPtr
ExitProcess
VirtualAllocEx
GetVersionExA
LoadLibraryA

Sections

CODE
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES3
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES9
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES5
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES2
Size: 512B - Virtual size: 481B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES7
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES4
Size: 1024B - Virtual size: 517B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91d9482e2d8143ffe2c24d3141960d95

Headers

File Characteristics

Imports

comctl32

gdi32

version

kernel32

Sections

CODE Size: 109KB - Virtual size: 108KB

.data Size: 191KB - Virtual size: 190KB

RES1 Size: 1KB - Virtual size: 1KB

RES3 Size: 512B - Virtual size: 508B

RES9 Size: 2KB - Virtual size: 2KB

RES5 Size: 2KB - Virtual size: 1KB

RES2 Size: 512B - Virtual size: 481B

RES7 Size: 2KB - Virtual size: 1KB

RES4 Size: 1024B - Virtual size: 517B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 636B

CODE
Size: 109KB - Virtual size: 108KB

.data
Size: 191KB - Virtual size: 190KB

RES1
Size: 1KB - Virtual size: 1KB

RES3
Size: 512B - Virtual size: 508B

RES9
Size: 2KB - Virtual size: 2KB

RES5
Size: 2KB - Virtual size: 1KB

RES2
Size: 512B - Virtual size: 481B

RES7
Size: 2KB - Virtual size: 1KB

RES4
Size: 1024B - Virtual size: 517B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 636B