0effb873312ca6e9e0ed7792a3ceda2c

Sharing

Copy URL Twitter E-mail

General

Target

0effb873312ca6e9e0ed7792a3ceda2c
Size

51KB
MD5

0effb873312ca6e9e0ed7792a3ceda2c
SHA1

09aa49011e4023bd31ee3daaa3612a790b5bd8b5
SHA256

21a0f570b3cc4ebe57ad2d33dc62c9f8cc036d12767f7174d51ae008c0e0825e
SHA512

85c5c6bb032a5678734ff6e733574efd8cb1a1c1b0c926a39a0b94df4a4b68b54858bc67ac00b1b0c1b5e5817bed7148d32da4d76c7fe6bd40ae14d5021cc584
SSDEEP

1536:6TpBP+ZTM8xRgLPjWg90BL/mkJ8BOpIBHujgcin9:6Ty68xRqPjWLL+kCLRcgci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0effb873312ca6e9e0ed7792a3ceda2c

Files

0effb873312ca6e9e0ed7792a3ceda2c
.dll windows:5 windows x86 arch:x86

5b599bc8d707bdd481c49a2905f92728

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

ZwFlushVirtualMemory
NtOpenMutant
ZwFlushKey

shlwapi

PathIsRelativeW
PathAppendA
PathFileExistsW
StrToIntW
ord29
StrToIntExW
PathCanonicalizeW
PathStripPathW

kernel32

GlobalDeleteAtom
FreeResource
LocalAlloc
SetUnhandledExceptionFilter
InterlockedIncrement
CloseHandle
FindFirstFileA
GetStringTypeExA
GlobalUnlock
GetLastError
GetVersionExW
InterlockedIncrement
VirtualAlloc
LocalFree

gdi32

GetNearestColor
GetDeviceCaps
SetPixel
CombineRgn

user32

LoadAcceleratorsA
SendMessageTimeoutA
LoadIconA
ShowCursor
ReplyMessage
GetWindowThreadProcessId
EnumThreadWindows
GetDlgItemTextW
DialogBoxParamW
BringWindowToTop
GetSysColorBrush
SendMessageCallbackA
SystemParametersInfoW
MessageBoxW
GetMenuStringW
SetWindowTextW
ChildWindowFromPoint
FillRect
CharPrevA
DialogBoxIndirectParamW
SetCapture
GetClassInfoW

Exports

Exports

IpReleaseAddress
CreateProcessNotify
DllClientCleanup
GetOwnerModuleFromUdpEntry
IcmpCreateFile
NhGetInterfaceNameFromGuid
SetIpStatistics
cmdlonui
GetIcmpStatisticsEx
RestoreMediaSense
CreateIpNetEntry
DllClientStartup
DisableMediaSense
GetNetworkParams
do_echo_rep
InternalGetIfTable
DeleteProxyArpEntry
SetAdapterIpAddress
InternalSetTcpEntry
GetBestInterface
InternalCreateIpForwardEntry
NhpAllocateAndGetInterfaceInfoFromStack
IcmpSendEcho2
GetUdpStatisticsEx
NhGetGuidFromInterfaceName
AddIPAddress
DeleteIPAddress
Icmp6SendEcho2
SetIpForwardEntry
DeleteIpForwardEntry
GetNumberOfInterfaces
InternalDeleteIpNetEntry
InternalGetIpAddrTable
IcmpParseReplies
GetIpStatistics
SetTcpEntry
NTPTimeToNTFileTime
GetExtendedUdpTable
Icmp6CreateFile
InternalGetUdpTable
SetIpNetEntry
InternalSetIpStats
GetTcpTable
InternalSetIfEntry
GetUdpStatistics
GetIpAddrTable
IpRenewAddress
EnableRouter
AllocateAndGetIpAddrTableFromStack
do_echo_req
UnenableRouter
GetBestRoute
InternalGetTcpTable
GetAdaptersAddresses
InternalDeleteIpForwardEntry
SetIpTTL
GetAdapterIndex
NotifyAddrChange
SetIfEntry
GetIpNetTable
CancelIPChangeNotify
GetIpStatisticsEx
SendARP
InternalGetIpForwardTable
GetAdaptersInfo
register_icmp
NTTimeToNTPTime
GetPerAdapterInfo
GetFriendlyIfIndex
GetAdapterOrderMap
GetIfTable
GetInterfaceInfo
NhGetInterfaceNameFromDeviceGuid
FlushIpNetTable
InternalSetIpNetEntry
IcmpSendEcho
GetOwnerModuleFromTcpEntry
GetExtendedTcpTable
IcmpCloseHandle
GetRTTAndHopCount
GetIpErrorString
GetBestInterfaceEx

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b599bc8d707bdd481c49a2905f92728

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

shlwapi

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB