72cdbdf862592f892d1502b69f93687c

General

Target

72cdbdf862592f892d1502b69f93687c
Size

314KB
MD5

72cdbdf862592f892d1502b69f93687c
SHA1

76a3de68870c6cde65f912cec6f072b16307b75d
SHA256

51020f4f8ec8e1b3f7e36200ce6ecf6c0ebe802e09bf5b8947b5d58ea720b65f
SHA512

8be2c5317e70e463e14fa39d9c955de16e7f406a7e7c8da1842d90d2e5f6b2e736af0488c5e05f237c9875f54c19c7b4daaf30cc5d16fe5060d9a3c8c93a4cff
SSDEEP

6144:mc+NJn6f72km7mPk2KPtoIql2sjIpPRBhuoSY15g+/hV2k7aCX/2O+Okc:mPHn6D2km7skGl22EfYoSQgiV2k7a22Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72cdbdf862592f892d1502b69f93687c

Files

72cdbdf862592f892d1502b69f93687c
.dll windows:4 windows x86 arch:x86

d696d1d32005ad5119bf4442ae45be45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mmioSetInfo
timeKillEvent
mmTaskSignal

msvcrt

wcscmp
wcslen
wcsrchr
vsprintf
strlen
strcpy
strcmp
sprintf
memset
memcpy
log10
fwrite
ftell
fseek
free
fread
fopen
floor
ceil
_wstati64
_wstat
_wfopen
_sys_nerr
_strrev
_stati64
_stat
_mbctolower
_mbctokata
_global_unwind2
_errno
_eof
_beginthreadex
_adj_fdivr_m32i
__iscsym
wcscpy

kernel32

CreateEventA
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObject
VirtualAlloc
Sleep
SetThreadPriority
SetThreadAffinityMask
SetEvent
ResetEvent
QueryPerformanceCounter
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
GetThreadPriority
GetSystemTimeAsFileTime
GetSystemInfo
GetProcessPriorityBoost
GetProcessAffinityMask
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
ExitProcess
CloseHandle

Exports

Exports

LoadMarkers
ParsePageControl
PlaneTransform

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d696d1d32005ad5119bf4442ae45be45

Headers

File Characteristics

Imports

winmm

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 135KB - Virtual size: 134KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 48KB - Virtual size: 47KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 135KB - Virtual size: 134KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 48KB - Virtual size: 47KB

.reloc
Size: 3KB - Virtual size: 2KB