066037fe657c6ea72de6a5e7ba9fc508

Sharing

Copy URL

Twitter E-mail

General

Target

066037fe657c6ea72de6a5e7ba9fc508
Size

90KB
MD5

066037fe657c6ea72de6a5e7ba9fc508
SHA1

422027e152d3c4eefd39f503432f17025e635cf6
SHA256

7397952b82168c43ba3d6c08a884fe9b0148b6553c882306c3733f31a9f12078
SHA512

86514d6f0e4fc76aec9bc6fcd6bd1ef894f710cf5df47458fb15ad34bc9a3e5342b8148b4e50824bef2532df154dde2b1fe575d8726c19d383a1bccc24e4c0c9
SSDEEP

1536:KA7dGTZgpFx4qdJuQKcxAfoQTs6lgrI/LTNN:LET6pbfdJ+tfoMnlgrgLTNN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
066037fe657c6ea72de6a5e7ba9fc508

Files

066037fe657c6ea72de6a5e7ba9fc508
.dll windows:6 windows x86 arch:x86

4e685b4f5924545a52175568e717ae24

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
_amsg_exit
_initterm
free
malloc
_XcptFilter
memcpy
memset
??2@YAPAXI@Z

ntdll

RtlInitUnicodeString
RtlUnwind
RtlNtStatusToDosError

kernel32

LeaveCriticalSection
CreateEventW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetLastError
SetLastError
DisableThreadLibraryCalls
GetVersionExW
GetProcAddress
GetModuleHandleW
InterlockedDecrement
FreeLibrary
InterlockedIncrement
Sleep
CloseHandle
WaitForSingleObject
SetEvent
GetTickCount
MultiByteToWideChar

gdi32

GetStockObject

user32

IsRectEmpty
SetRect
IntersectRect
SetRectEmpty
EqualRect
GetMonitorInfoW

ole32

CoTaskMemAlloc
CoTaskMemFree

Exports

Exports

CapabilitiesRequestAndCapabilitiesReply
DXVA2CreateDirect3DDeviceManager9
DXVA2CreateVideoService
DXVAHD_CreateDevice
DegaussMonitor
DestroyPhysicalMonitor
DestroyPhysicalMonitors
GetCapabilitiesStringLength
GetMonitorBrightness
GetMonitorCapabilities
GetMonitorColorTemperature
GetMonitorContrast
GetMonitorDisplayAreaPosition
GetMonitorDisplayAreaSize
GetMonitorRedGreenOrBlueDrive
GetMonitorRedGreenOrBlueGain
GetMonitorTechnologyType
GetNumberOfPhysicalMonitorsFromHMONITOR
GetNumberOfPhysicalMonitorsFromIDirect3DDevice9
GetPhysicalMonitorsFromHMONITOR
GetPhysicalMonitorsFromIDirect3DDevice9
GetTimingReport
GetVCPFeatureAndVCPFeatureReply
OPMGetVideoOutputsFromHMONITOR
OPMGetVideoOutputsFromIDirect3DDevice9Object
RestoreMonitorFactoryColorDefaults
RestoreMonitorFactoryDefaults
SaveCurrentMonitorSettings
SaveCurrentSettings
SetMonitorBrightness
SetMonitorColorTemperature
SetMonitorContrast
SetMonitorDisplayAreaPosition
SetMonitorDisplayAreaSize
SetMonitorRedGreenOrBlueDrive
SetMonitorRedGreenOrBlueGain
SetVCPFeature

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e685b4f5924545a52175568e717ae24

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

gdi32

user32

ole32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

Size: 3KB - Virtual size: 4KB

.text
Size: 80KB - Virtual size: 79KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB