6dc4e2c3492f0c0b5b92564fd44cbdd4

General

Target

6dc4e2c3492f0c0b5b92564fd44cbdd4
Size

100KB
MD5

6dc4e2c3492f0c0b5b92564fd44cbdd4
SHA1

f8fdc15cab4c0c4de5a5396a2a15a6b3278322f6
SHA256

b5022a523afd6368dcb7238213c802348ff3d4f4f794dcbba6c22c5c4b35227c
SHA512

a6f55567d1f7fc25ed2e6601b0b98df9b403f0a87dac309ccc0615d7f51237609cc3df7e65c2471dd8f17a880211d1808e4a68b53045c0e34acd7b4023787b78
SSDEEP

1536:dDxlmij9iwiMYQMr3rtaasSyraXwFB5OzT2NHeE2rXPF42XJe2EvIuo:dXniwirftaE7wxOvkHe3rXGqMNID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6dc4e2c3492f0c0b5b92564fd44cbdd4

Files

6dc4e2c3492f0c0b5b92564fd44cbdd4
.dll windows:4 windows x86 arch:x86

eef3793aeff0d4aa1df3ef9fa84056e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
FreeLibrary
SetErrorMode
GetSystemInfo
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
DisableThreadLibraryCalls
ExitProcess
GetSystemTimeAsFileTime

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcr71

sprintf
memmove
tolower
isupper
strncpy
_stricmp
strchr
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__security_error_handler
malloc
??2@YAPAXI@Z
free
_purecall
??3@YAXPAX@Z
_putenv

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eef3793aeff0d4aa1df3ef9fa84056e4

Headers

File Characteristics

Imports

kernel32

advapi32

msvcr71

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 56KB - Virtual size: 52KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 56KB - Virtual size: 52KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB