31e1ceb53adfdbdabf957e5615c47acf

Sharing

Copy URL Twitter E-mail

General

Target

31e1ceb53adfdbdabf957e5615c47acf
Size

88KB
MD5

31e1ceb53adfdbdabf957e5615c47acf
SHA1

b584ca4a125a6b6cca454ef40936ad730c779a6d
SHA256

588ae09c6b42f634525dcf4822f525642c6a9b804b4faa754e53f4937be64505
SHA512

9f99d7b364b065f63128a948c9ef2435d04c248ab4ca00c48020ed12f68e46a68f40ce107dc33d818a79261dbc1c71050edef6771ae159a9b2440f0b8a526218
SSDEEP

1536:enM+c6JpusfCP4JBWntmeKTM+W+xG5SQHC7fqRnsgbzz:eMZ6JMsfCP4JBWUeyM+Wj5vi7yRntz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31e1ceb53adfdbdabf957e5615c47acf

Files

31e1ceb53adfdbdabf957e5615c47acf
.dll windows:4 windows x86 arch:x86

b088e68ff02f60963ed13fdd1842697b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
LeaveCriticalSection
SetLastError
GetCurrentThreadId
ConnectNamedPipe
WaitForMultipleObjects
HeapAlloc
LCMapStringA
IsBadReadPtr
GetVersionExA
InitializeCriticalSection
ResetEvent
lstrcatW
HeapFree
GetSystemInfo
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
GetStdHandle
EnterCriticalSection
GetLocaleInfoA
LoadLibraryA
GetLastError
GetCPInfo
IsBadCodePtr
CreateTimerQueueTimer
GetOEMCP
WriteFile
GetModuleHandleA
SetUnhandledExceptionFilter
QueryPerformanceCounter
UnhandledExceptionFilter
GetStartupInfoA
GetEnvironmentStringsW
CreateNamedPipeA
GetACP
OpenProcess
SetEvent
ReleaseMutex
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchangeAdd
WideCharToMultiByte
GetTickCount
UnmapViewOfFile
RtlUnwind
FreeEnvironmentStringsW
InterlockedExchange
MultiByteToWideChar
HeapDestroy
GetEnvironmentStrings
GetFileType
InterlockedCompareExchange
IsBadWritePtr
lstrcpyW
InterlockedDecrement
CreateMutexW
GetModuleFileNameA
LCMapStringW
GetBinaryTypeA
DisconnectNamedPipe
TerminateProcess
CreateEventA
DeleteTimerQueueTimer

user32

wsprintfW
LoadIconA
DrawIcon
CreateIconFromResource

advapi32

InitializeSecurityDescriptor
GetUserNameA
SetSecurityDescriptorDacl

msvcrt

_stricmp
_wtoi
_wcsnset
fflush
vwprintf
_strnicmp
memset
towupper
wcstol
wcsstr
_ltow
wcscmp
printf
wcstod
strtok
wprintf
calloc
memcpy
wcscpy
wcslen
realloc
fprintf
wcscat
fgetws
wcsncmp
malloc
memmove
wcschr
isdigit
swprintf
scanf
free
wcstok
exit

Exports

Exports

hvjjgdfi

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b088e68ff02f60963ed13fdd1842697b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.data Size: 16KB - Virtual size: 46KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 764B

.text
Size: 60KB - Virtual size: 59KB

.data
Size: 16KB - Virtual size: 46KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 764B