78a9f44eb75e29f319ee71fff465d8df

General

Target

78a9f44eb75e29f319ee71fff465d8df
Size

92KB
MD5

78a9f44eb75e29f319ee71fff465d8df
SHA1

d606633f5d20385460d84cd82389f3494abbae8d
SHA256

69fd23bffaf8b3909cfdf0b0933e735cd9d9948a8db585404209cceface2c2e8
SHA512

b3b696de063c65de17716098655d1b11c995ae2d4ebcf5f187e191adfc2d3b80ef95c5c2c9bebb47e9df1ed654caf302bcb912d60fde215ab17296f9ac2a6aff
SSDEEP

1536:GOtggvDUBV5JydKSkUktShWAD+KQbbDFbbGMko7YaSxfCQD:GK70V5JydK7U42WAD+ZDFbhkOYnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a9f44eb75e29f319ee71fff465d8df

Files

78a9f44eb75e29f319ee71fff465d8df
.dll windows:4 windows x86 arch:x86

e353c287fba550c44df53924fbac7e8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionAndSpinCount
GetStringTypeW
UnmapViewOfFile
CreateFileA
GetSystemTimeAsFileTime
WriteFile
MapViewOfFile
SetFileTime
SetEvent
InterlockedDecrement
DeleteFileW
InterlockedExchange
TerminateProcess
CreateEventA
lstrlenW
HeapCreate
ReleaseMutex
DeleteFileA
VirtualAlloc
HeapDestroy
GetSystemInfo
GetStringTypeA
CreateFileW
GetEnvironmentStringsW
GetFileType
lstrcmpA
VirtualProtect
GetCurrentProcessId
lstrlenA
GetFileSize
SetFilePointer
DisableThreadLibraryCalls
InterlockedIncrement
TlsGetValue
GetCurrentProcess
OpenFileMappingW
GetEnvironmentVariableA
DeleteCriticalSection
GetFullPathNameA
TlsAlloc
lstrcmpiA
LocalAlloc
WaitForSingleObject
OpenFileMappingA
VirtualFree
GetVersionExA
CreateThread
SetEndOfFile
LeaveCriticalSection
MoveFileW
MoveFileA
GetDiskFreeSpaceW
CloseHandle
Sleep
HeapFree
GetLastError
GetLocaleInfoA
QueryPerformanceCounter
FreeEnvironmentStringsA
CreateMutexW
FreeLibrary
GetCurrentThreadId
GetTickCount
SetHandleCount
FreeEnvironmentStringsW
TlsFree
VirtualQuery
GetEnvironmentStrings
LocalFree
GetFullPathNameW
GetStringTypeExA
LCMapStringA
CompareFileTime
EnterCriticalSection
GetDiskFreeSpaceA
CreateMutexA
FlushViewOfFile
HeapReAlloc
WideCharToMultiByte
GetCPInfo
LCMapStringW
InitializeCriticalSection

Exports

Exports

vyexpud

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e353c287fba550c44df53924fbac7e8e

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.data Size: 24KB - Virtual size: 22KB

.rsrc Size: 4KB - Virtual size: 848B

.reloc Size: 4KB - Virtual size: 556B

.text
Size: 56KB - Virtual size: 53KB

.data
Size: 24KB - Virtual size: 22KB

.rsrc
Size: 4KB - Virtual size: 848B

.reloc
Size: 4KB - Virtual size: 556B