fc54256ef066ddd790317f984529e6f7

Sharing

Copy URL

Twitter E-mail

General

Target

fc54256ef066ddd790317f984529e6f7
Size

1.2MB
MD5

fc54256ef066ddd790317f984529e6f7
SHA1

5d9c3a595e8ca0e19e08dcef19d960da8323b729
SHA256

e32af1b04615a863dd0f324e4bd08f161599f1d3fdc774c65206427a3ba0c6d5
SHA512

0f145bb62a155c2be8a82972f1714e5dc1df0098a9f77c42ea1aebdf33ea8956653d9a14c1c814358629fc61906bb04ab5b6c706102cd0d383c99afa68560323
SSDEEP

24576:XtxbUZeRJfrfE8gStuw679jCQMGWLV2HcDHqT3qQQpHTd4FMgR6Kb0V:duwaR3AL3DoQpTeFMgR70V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc54256ef066ddd790317f984529e6f7

Files

fc54256ef066ddd790317f984529e6f7
.dll windows:5 windows x86 arch:x86

8cc07c48ebcef01772c73e4ff87ada2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

xpcom

NS_CStringSetData
NS_StringContainerFinish
NS_StringContainerInit2
NS_CStringContainerInit
NS_CStringContainerFinish
NS_CStringGetData
NS_Free
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager
NS_StringContainerInit
NS_StringGetData
NS_StringSetDataRange

nspr4

PR_AtomicDecrement
PR_AtomicIncrement

kernel32

GetStdHandle
ExitThread
InterlockedCompareExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
CreateFileA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
DeleteCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
CreateFileW
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentDirectoryA
GetFullPathNameW
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
LeaveCriticalSection
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
LCMapStringA
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
CreateThread
GetModuleFileNameA
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetTimeZoneInformation
VirtualAlloc
HeapReAlloc
CloseHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer

user32

SetWindowLongW
ShowWindow
CallWindowProcW
SetWindowTextW
MoveWindow
GetWindowRect
SendMessageW
IsWindow
IsWindowVisible
CharUpperW
wsprintfW
SetWindowPos
SystemParametersInfoW
CharLowerW

Exports

Exports

NSGetModule

Sections

.text
Size: 977KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cc07c48ebcef01772c73e4ff87ada2a

Headers

File Characteristics

Imports

xpcom

nspr4

kernel32

user32

Exports

Exports

Sections

.text Size: 977KB - Virtual size: 976KB

.rdata Size: 103KB - Virtual size: 103KB

.data Size: 12KB - Virtual size: 38KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 120KB - Virtual size: 120KB

.text
Size: 977KB - Virtual size: 976KB

.rdata
Size: 103KB - Virtual size: 103KB

.data
Size: 12KB - Virtual size: 38KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 120KB - Virtual size: 120KB