04d9bcd3061642a02ee075ed6b7a804a

General

Target

04d9bcd3061642a02ee075ed6b7a804a
Size

356KB
MD5

04d9bcd3061642a02ee075ed6b7a804a
SHA1

5a8f9f5d88be5ffb823a4110c00fc5dabd2ab7ae
SHA256

30b2cbfa67bbd4f88b452c5a3fc167df5b7e27dc5a0d15a26bef9801293fd54c
SHA512

7ff350f8a2db7f439007efd73081618f0a85cabed63ea9b222357e88aab12e8a39c60b629443697067276649aa3d3dd2cbf4296467bb7d06b95d67dbfc4dec63
SSDEEP

6144:8ulvuJ2+UziTD6i59V0rOv7VM+Re6N7HVDQYgMEyy79cRN+XdxkEKCX+thzIZ:7AnUcvg8Rg87HVD7gTni6Xdx3KCO8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d9bcd3061642a02ee075ed6b7a804a

Files

04d9bcd3061642a02ee075ed6b7a804a
.dll windows:4 windows x86 arch:x86

ff53778ad5911629958333d3f5ddc062

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
LsaLookupPrivilegeValue

ole32

CoTaskMemFree
StringFromCLSID

kernel32

lstrlenW
WideCharToMultiByte
WaitForSingleObject
CancelDeviceWakeupRequest
CreateFileA
CreateProcessA
DeleteCriticalSection
ExitProcess
GetACP
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetLastError
GetLocaleInfoA
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetShortPathNameA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryA
QueryPerformanceCounter
RtlMoveMemory
SetFileTime
VirtualAlloc
VirtualLock
VirtualProtect
VirtualUnlock

Exports

Exports

CacheAddRef
GetNextRow
UnbindFwInterfaceFromAdapter
Vec3TransformCoordArray
Vec4TransformArray

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff53778ad5911629958333d3f5ddc062

Headers

File Characteristics

Imports

advapi32

ole32

kernel32

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 170KB - Virtual size: 169KB

.data Size: 69KB - Virtual size: 71KB

.rsrc Size: 50KB - Virtual size: 50KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 170KB - Virtual size: 169KB

.data
Size: 69KB - Virtual size: 71KB

.rsrc
Size: 50KB - Virtual size: 50KB

.reloc
Size: 3KB - Virtual size: 2KB