1213ddb26ea410f8f1f2caa7397b631c

Sharing

Copy URL

Twitter E-mail

General

Target

1213ddb26ea410f8f1f2caa7397b631c
Size

242KB
MD5

1213ddb26ea410f8f1f2caa7397b631c
SHA1

f496d9ef114c28b5001eee7f482f46c80735d511
SHA256

7b24d5dbead4241114649547632acf049f0324380c9e5a3412c2958e8a21c097
SHA512

15872949a723313150470a88b44a7d8d832d35c48c31efd3021caa8a8409a0c4cd9462cf3e171ddbda93cf17a1fb695545c5a7d47fc9ef747fbb04843b6c35cd
SSDEEP

3072:NGmiZ/CYgwuXJ0Y/eJyeY6DqGvaW9PPp7Nz/nt6WAuHRPkzSr/fBtkPEMpH:BI/o9zerY+aEPPpJ/obkiz8fBS8M5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1213ddb26ea410f8f1f2caa7397b631c

Files

1213ddb26ea410f8f1f2caa7397b631c
.dll windows:5 windows x86 arch:x86

c94cf9d861dd3807c6fcbcb8d457ba1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
CreateFileA
lstrcatA
GetWindowsDirectoryW
GetCommandLineA
GetCommandLineW
FileTimeToDosDateTime
GetProcAddress
LoadLibraryA
AddAtomA
BeginUpdateResourceW
BuildCommDCBW
CancelTimerQueueTimer
CreateEventW
CreateJobObjectW
CreateMutexW
CreatePipe
DeleteTimerQueueTimer
DnsHostnameToComputerNameW
DuplicateHandle
EnumCalendarInfoW
EnumDateFormatsA
EnumResourceNamesA
FindNextVolumeA
FindNextVolumeMountPointA
FindResourceExW
FreeLibrary
GetBinaryType
GetCPInfo
GetCompressedFileSizeA
GetConsoleAliasExesA
GetCurrentDirectoryA
GetHandleInformation
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNamedPipeInfo
GetPrivateProfileStructA
GetProcessHeaps
GetStringTypeA
GetSystemDefaultLangID
InterlockedExchange
IsBadHugeReadPtr
IsBadHugeWritePtr
IsValidCodePage
IsValidLocale
LocalAlloc
PeekConsoleInputW
ProcessIdToSessionId
ReplaceFileA
SetComputerNameA
SetSystemTimeAdjustment
TlsGetValue
WaitForDebugEvent
WriteFile
WriteProfileStringA
lstrcpynW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c94cf9d861dd3807c6fcbcb8d457ba1a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 213KB - Virtual size: 213KB

.data3 Size: 1024B - Virtual size: 1000B

.data2 Size: 1024B - Virtual size: 1000B

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 940B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 213KB - Virtual size: 213KB

.data3
Size: 1024B - Virtual size: 1000B

.data2
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 940B