4663bba7172a24a9a46a1e2b8d1ed0df

Sharing

Copy URL

Twitter E-mail

General

Target

4663bba7172a24a9a46a1e2b8d1ed0df
Size

403KB
MD5

4663bba7172a24a9a46a1e2b8d1ed0df
SHA1

a8d683cca49ac28a89a30418b94818be0184a887
SHA256

a314401b8e12130bea249a3734022a8ebd46b8e65b18535db60944a00e84e6f6
SHA512

48fb556ecda308ab9fe42f18283acb39a2dd2f57a07635867e6a09a9c733414902baf75901f33c8a2d0b6ec8a3b865237612ef92f9a59de795fff54fbc33f2b4
SSDEEP

12288:ZinPGC8lXe1gwijX52yN7stYqaHVbBBRY:gnPAlOWwIX5ZNpFY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4663bba7172a24a9a46a1e2b8d1ed0df

Files

4663bba7172a24a9a46a1e2b8d1ed0df
.dll windows:6 windows x64 arch:x64

83a661f70c4411105c2ffd1b9d57feba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileA
FindNextFileA
CreateFileA
CreatePipe
GetProcessHeap
GetProcAddress
ExitProcess
CreateFileW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
FindClose
FindFirstFileExA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CloseHandle

Exports

Exports

StartW
ajhqkcldxvhpmnbs
dbyvvql
degrteurwtvqfdpm
dgpsjrjtpclpituj
dingkpynhjpjybpl
dnbmxrtjygfwyuu
dqxxyynlks
ezkkuqdggcvnbl
fceuizrtxyqy
gpltroqelxb
gvldutwhyi
hbtrgnfzqcddh
icllypwwsm
ipvljvexiggspmvpp
jedmpzkrwfxg
jeswtoquvjmhczrez
jqphpzshykkphl
juvybcptqimkwzt
kcgpyesjmkfi
kzrdmotwjdsxa
lgjctck
nsrgxriqvsmpwch
nwoncweloozaiz
oucjqal
oxzbrsgqpgwif
oyagefuhqjx
phwgikfmfaosh
pxeofsrgxkklo
ralixgfywasek
rrhohtqlnkzuw
rtvorir
sgexgqpcuqtonmm
torbziekvewyhrx
trpyzmpqytjjzlz
ttkllaup
ufmwoljsw
ujctkjrfcmpn
vcctiohcb
vemuycsheyzvjmd
vsalaplyzhpdr
wwkyozshqalgcgdz
yhwnhwcmbc
ylgspdrukxmmbqfiq

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83a661f70c4411105c2ffd1b9d57feba

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 132KB

.rdata Size: 49KB - Virtual size: 48KB

.data Size: 4KB - Virtual size: 9KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 210KB - Virtual size: 209KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 132KB - Virtual size: 132KB

.rdata
Size: 49KB - Virtual size: 48KB

.data
Size: 4KB - Virtual size: 9KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 210KB - Virtual size: 209KB

.reloc
Size: 2KB - Virtual size: 1KB