fb1eb05ed41d7a46624732a7d91596fc

General

Target

fb1eb05ed41d7a46624732a7d91596fc
Size

100KB
MD5

fb1eb05ed41d7a46624732a7d91596fc
SHA1

1da29f86fbfe501db741206c714ff173646b7ffa
SHA256

ead0c4f49f970999dff42fefd0955a7c6c3b47f7f0ab042b256209b6056188cf
SHA512

467623fa925415b11b388b16568eb822c98de65308faae26ef3b1036437ee3bf63aa263d9278b4556d9c9501ee5fb71be72d0e9f6fc0784b50621444680a6a43
SSDEEP

1536:h0Rim3vKJydKSkUktShWAD+KQMLD9EFbLwp/oHn1W:8lCJydK7U42WAD+6EFbLsoHY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1eb05ed41d7a46624732a7d91596fc

Files

fb1eb05ed41d7a46624732a7d91596fc
.dll windows:4 windows x86 arch:x86

e353c287fba550c44df53924fbac7e8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionAndSpinCount
GetStringTypeW
UnmapViewOfFile
CreateFileA
GetSystemTimeAsFileTime
WriteFile
MapViewOfFile
SetFileTime
SetEvent
InterlockedDecrement
DeleteFileW
InterlockedExchange
TerminateProcess
CreateEventA
lstrlenW
HeapCreate
ReleaseMutex
DeleteFileA
VirtualAlloc
HeapDestroy
GetSystemInfo
GetStringTypeA
CreateFileW
GetEnvironmentStringsW
GetFileType
lstrcmpA
VirtualProtect
GetCurrentProcessId
lstrlenA
GetFileSize
SetFilePointer
DisableThreadLibraryCalls
InterlockedIncrement
TlsGetValue
GetCurrentProcess
OpenFileMappingW
GetEnvironmentVariableA
DeleteCriticalSection
GetFullPathNameA
TlsAlloc
lstrcmpiA
LocalAlloc
WaitForSingleObject
OpenFileMappingA
VirtualFree
GetVersionExA
CreateThread
SetEndOfFile
LeaveCriticalSection
MoveFileW
MoveFileA
GetDiskFreeSpaceW
CloseHandle
Sleep
HeapFree
GetLastError
GetLocaleInfoA
QueryPerformanceCounter
FreeEnvironmentStringsA
CreateMutexW
FreeLibrary
GetCurrentThreadId
GetTickCount
SetHandleCount
FreeEnvironmentStringsW
TlsFree
VirtualQuery
GetEnvironmentStrings
LocalFree
GetFullPathNameW
GetStringTypeExA
LCMapStringA
CompareFileTime
EnterCriticalSection
GetDiskFreeSpaceA
CreateMutexA
FlushViewOfFile
HeapReAlloc
WideCharToMultiByte
GetCPInfo
LCMapStringW
InitializeCriticalSection

Exports

Exports

cwiixhinq

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e353c287fba550c44df53924fbac7e8e

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.data Size: 32KB - Virtual size: 28KB

.rsrc Size: 4KB - Virtual size: 848B

.reloc Size: 4KB - Virtual size: 576B

.text
Size: 56KB - Virtual size: 53KB

.data
Size: 32KB - Virtual size: 28KB

.rsrc
Size: 4KB - Virtual size: 848B

.reloc
Size: 4KB - Virtual size: 576B