6021f5ac5da6cc682ce5748f8bd50a91

Sharing

Copy URL Twitter E-mail

General

Target

6021f5ac5da6cc682ce5748f8bd50a91
Size

336KB
MD5

6021f5ac5da6cc682ce5748f8bd50a91
SHA1

55cd13b694bd638eded095a4f77c12dd9d9f51dd
SHA256

dba311368a1d913336a0db2dc5a197641425592a5eab8944cb44d478e8975468
SHA512

3630696b095244799f4af2cd6d5c7b3556c92977e8d087375966f4ee42f674a4ed6d4fe5a0537d8dd2a821baf474ff513c93029b8f6438c0eee49b07c0861092
SSDEEP

3072:3TxQ1/jPz7BD5LZoZVvUJFH9kIg97DNS85i5RdPfCH7bWg3obhNO:3Txy55LZobUJLkByfCbpoM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6021f5ac5da6cc682ce5748f8bd50a91

Files

6021f5ac5da6cc682ce5748f8bd50a91
.dll windows:4 windows x86 arch:x86

075c5852495c0b676d8179d608133cd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
Sleep
FindClose
FindFirstFileA
RemoveDirectoryA
FindNextFileA
CopyFileA
ExpandEnvironmentStringsA
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetPrivateProfileStringA
GetSystemDefaultLangID
LocalFree
GetFileSize
LoadLibraryExA
FormatMessageA
OpenProcess
GetVersionExA
GetVersion
GetSystemInfo
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
GetLocaleInfoW
CloseHandle
DeleteFileA
GetLocalTime
WritePrivateProfileStringA
FreeLibrary
GetModuleFileNameA
GetTimeZoneInformation
SetFilePointer
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetCommandLineA
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetUnhandledExceptionFilter
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetConsoleCtrlHandler
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
VirtualAlloc
IsBadCodePtr
ReadFile

user32

LoadCursorA
SetCursor
FindWindowA
PostMessageA
wsprintfA
GetSystemMetrics

advapi32

FreeSid
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AllocateAndInitializeSid

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller

Exports

Exports

??0CHuDevice@@QAE@XZ
??4CHuDevice@@QAEAAV0@ABV0@@Z
?fnHuDevice@@YAHXZ
?nHuDevice@@3HA
HuDevice_IFE

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

075c5852495c0b676d8179d608133cd3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

setupapi

Exports

Exports

Sections

.text Size: 276KB - Virtual size: 273KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 16KB - Virtual size: 21KB

.idata Size: 8KB - Virtual size: 4KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 276KB - Virtual size: 273KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 16KB - Virtual size: 21KB

.idata
Size: 8KB - Virtual size: 4KB

.reloc
Size: 12KB - Virtual size: 9KB