460a54dd125a4714877942c07e8c5bd9

Sharing

Copy URL

Twitter E-mail

General

Target

460a54dd125a4714877942c07e8c5bd9
Size

11.0MB
MD5

460a54dd125a4714877942c07e8c5bd9
SHA1

e2da6b4ba66554d951fecac3ea53500340650b98
SHA256

e7c303c6b1d92e5050d496fe2bfd5d37d644447755d8033cbbb3704e9dfa7468
SHA512

917b2b7e1ced0a2afb9684204fdffaa4e8bf5a041d7d241a0fae5fc52186541fb0f91fd64dd9f1b89417d3d1f1f7cbc46d5129ae3cc4f8c73e8199040a7f31e4
SSDEEP

49152:lJzIhPiS8SUjr2MnGgMKRGLhRGLjPKksqE:LaJMnH0Lh0LjPKksqE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460a54dd125a4714877942c07e8c5bd9

Files

460a54dd125a4714877942c07e8c5bd9
.dll windows:4 windows x86 arch:x86

b0793bf19a7c4c93430d3c24a6d1b341

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
GetModuleFileNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
Sleep
IsBadWritePtr
IsBadReadPtr
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetConsoleCtrlHandler
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
GetACP
GetOEMCP
SetFilePointer
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
CloseHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

GetCoreFunctions
ScanMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.6MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 520KB - Virtual size: 523KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0793bf19a7c4c93430d3c24a6d1b341

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 5.7MB - Virtual size: 5.7MB

.rdata Size: 4.6MB - Virtual size: 4.5MB

.data Size: 520KB - Virtual size: 523KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 240KB - Virtual size: 236KB

.text
Size: 5.7MB - Virtual size: 5.7MB

.rdata
Size: 4.6MB - Virtual size: 4.5MB

.data
Size: 520KB - Virtual size: 523KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 240KB - Virtual size: 236KB