098ae99ddc9cfe8194941cfeb89a9cd3

Sharing

Copy URL Twitter E-mail

General

Target

098ae99ddc9cfe8194941cfeb89a9cd3
Size

64KB
MD5

098ae99ddc9cfe8194941cfeb89a9cd3
SHA1

acbf5216d4729cd84245019889ac0a05526f4150
SHA256

e4db0b4ff21e15a7db90d2a813d2218e9bb9ec7bc4d4b8e8c495dd429140b759
SHA512

1d0d65ee4d3f927663d76392c663c8722e507d193bce9ef5a84caab8dd9e6bc693edfcb4b76e431466102611e8690be1d649060ca609f093ed021f14c3a6d470
SSDEEP

1536:jNa3rpfCvdrgEKD6lfXHYIMIe/LJdGNttfE+u:xaHEBxgIUn+t1Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098ae99ddc9cfe8194941cfeb89a9cd3

Files

098ae99ddc9cfe8194941cfeb89a9cd3
.dll windows:4 windows x86 arch:x86

254c4ff7c1d5342db87d2ba9206d9d50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDriveTypeA
GetVolumeInformationA
lstrcatA
GetLastError
GetProcAddress
LoadLibraryA
FreeLibrary
DeviceIoControl
CloseHandle
LocalFree
GetModuleHandleA
GetVersionExA
lstrlenA
CreateFileA
LocalAlloc
GetFullPathNameA
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
ExitProcess
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
SetFilePointer
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo
HeapSize

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

iphlpapi

GetAdaptersInfo

Exports

Exports

_Java_com_ibm_cbt_slight_CbtSysInfo_getInstallDate@8
_Java_com_ibm_cbt_slight_CbtSysInfo_getMacAddress@12
_Java_com_ibm_cbt_slight_CbtSysInfo_getMachineSerialNumber@8
_Java_com_ibm_cbt_slight_CbtSysInfo_getOsBuildNumber@8
_Java_com_ibm_cbt_slight_CbtSysInfo_getOsName@8
_Java_com_ibm_cbt_slight_CbtSysInfo_getOsVersion@8
_Java_com_ibm_cbt_slight_CbtSysInfo_getPhysicalSerialNumber@12
_Java_com_ibm_cbt_slight_CbtSysInfo_getSerialFromDriveNumber@12
_Java_com_ibm_cbt_slight_CbtSysInfo_getTypeFromDriveNumber@12
_Java_com_ibm_cbt_slight_CbtSysInfo_getTypeOfDrive@12
_Java_com_ibm_cbt_slight_CbtSysInfo_getVolumeDetails@12
_Java_com_ibm_cbt_slight_CbtSysInfo_getVolumeSerialNumber@12
_Java_com_ibm_cbt_slight_CbtSysInfo_isRemovable@12
test_GetMacAddress
test_GetOsBuildNumber
test_GetOsInstallDate
test_GetOsName
test_GetOsVersion
test_GetPhysicalDriveNumber
test_GetPhysicalSN
test_GetSerialFromDriveNumber
test_GetTypeFromDriveNumber
test_GetTypeOfDrive
test_GetVolumeDetails
test_GetVolumeSN

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

254c4ff7c1d5342db87d2ba9206d9d50

Headers

File Characteristics

Imports

kernel32

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 9KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 8KB - Virtual size: 4KB