2de2ee06ee51233ce6dbd6d3f6613735

Sharing

Copy URL Twitter E-mail

General

Target

2de2ee06ee51233ce6dbd6d3f6613735
Size

65KB
MD5

2de2ee06ee51233ce6dbd6d3f6613735
SHA1

844f4e47c655b00a10560df33e7818e7a9a5bd06
SHA256

e0cc37fef1dfa79503fb4a84fd8ce0ea4af563e41b588375b04085784bc15197
SHA512

8d026ea170609861a5e68740dbc96f7e89567f49c070cbfc2868a09df0dc22671baca4908fdb5d90dc8f2aaed97a05e78d5155f3252237ce59eb73eb69db57a1
SSDEEP

1536:hw4FJplpwEJWt11bcK+oP3StaqW3LgK4moAqCgPpto/wFJxad2E:hZFJplWD117/P3NZ0moAFgPfo/wrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2de2ee06ee51233ce6dbd6d3f6613735

Files

2de2ee06ee51233ce6dbd6d3f6613735
.dll windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Exports

Exports

kdfAutoStart
kdfAutoStartClean
kdfAutoStartCleanB
kdfAutoStartCleanD
kdfAutoStartV
kdfCkeckKeylogger
kdfExProtect
kdfGetVersion
kdfSelfCheckIntegrity
kdfSetFlashE2E_INJ
kdfSetImageDir
kdfWebBrowserContextMenu
kdfWebBrowserHandleAdd
kdfWebBrowserHandleRemove

Sections

.text
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1zhd4unb
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xyipnkxk
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rh3pfq4j
Size: 531KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ws99q1hx
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f433e7fcc51e68080022754836705744

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: - Virtual size: 76KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: - Virtual size: 32KB

.rsrc Size: 4KB - Virtual size: 1000KB

1zhd4unb Size: - Virtual size: 12KB

xyipnkxk Size: - Virtual size: 56KB

rh3pfq4j Size: 531KB - Virtual size: 532KB

ws99q1hx Size: 4KB - Virtual size: 4KB

.text
Size: - Virtual size: 76KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: - Virtual size: 32KB

.rsrc
Size: 4KB - Virtual size: 1000KB

1zhd4unb
Size: - Virtual size: 12KB

xyipnkxk
Size: - Virtual size: 56KB

rh3pfq4j
Size: 531KB - Virtual size: 532KB

ws99q1hx
Size: 4KB - Virtual size: 4KB