0d0e6846e6c2f1de1ac63036289b8602

Sharing

Copy URL Twitter E-mail

General

Target

0d0e6846e6c2f1de1ac63036289b8602
Size

150KB
MD5

0d0e6846e6c2f1de1ac63036289b8602
SHA1

e767071addac98db8383378a4c94981b28a80c6c
SHA256

e48362091002f8bb63aeae34e44d3eda87dcbd6c24951fd5d63fb82b2af8c354
SHA512

7ea9ec596788b6f640232c207168e352201cc4571991fbea046ca5e61e7c0154736e994a836f269f895e9be0776bfc0d130720aa1e1d3484dd118c631b5884f0
SSDEEP

3072:WJHnO7fwkwrKC1ovLPOqBVmsBNE0W4ffKZV6idCjHasDM073/E+SazlhYOBnAz:KO7uWCYxBVmsBNEvICV6icy+ZnYOBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d0e6846e6c2f1de1ac63036289b8602

Files

0d0e6846e6c2f1de1ac63036289b8602
.dll windows:5 windows x86 arch:x86

4fcda8f58f727c567f1b34d8ba9bbc71

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp100

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Xout_of_range@std@@YAXPBD@Z

msvcr100

_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_amsg_exit
_initterm
_encoded_null
free
_malloc_crt
memchr
sprintf
??_V@YAXPAX@Z
_snprintf
toupper
rename
_stat64
_stat64i32
memset
_wassert
isdigit
tolower
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
memmove
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strchr
_initterm_e
_stricmp
_unlink

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
FindClose
FindFirstFileA
GetFullPathNameA
LocalFree
FormatMessageA
SetEndOfFile
DeleteFileA
SetFilePointer
GetLastError
CreateFileA
WriteFile
ReadFile
FindNextFileA
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GlobalMemoryStatus

Exports

Exports

PAR2Repair
PAR2Verify

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fcda8f58f727c567f1b34d8ba9bbc71

Headers

DLL Characteristics

File Characteristics

Imports

msvcp100

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 122KB - Virtual size: 122KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 512B - Virtual size: 258KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 122KB - Virtual size: 122KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 258KB

.reloc
Size: 7KB - Virtual size: 7KB