07d876ddb3925a2a21c7b2e8f367e421

Sharing

Copy URL Twitter E-mail

General

Target

07d876ddb3925a2a21c7b2e8f367e421
Size

1.7MB
MD5

07d876ddb3925a2a21c7b2e8f367e421
SHA1

8a5388cf92c03cdf7e1aa9fffc4434018e0e7961
SHA256

e19d53fe48a775e24ba2d3a584d45a6d04160fc06a741c56b9da7dc886da1c6d
SHA512

9793d40b0b6dd2bcd29f0326f65e68e5bc032a43920012977de7e46fed2ed6d2613ddf16882a46512ff2a3200812207c1e0cd5e068e8bad536908f5929084f28
SSDEEP

49152:O4CojCo7Z6/zXZGy9QpopaDh5BjLze90FBVEJ:O4C3o7gXZX9Q2k3nLEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d876ddb3925a2a21c7b2e8f367e421

Files

07d876ddb3925a2a21c7b2e8f367e421
.dll windows:5 windows x86 arch:x86

8e99c983205b5be7f8e6bcbaa5139bb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
LoadLibraryA
UpdateResourceA
RtlMoveMemory
FreeEnvironmentStringsW
AttachConsole
GetProcAddress
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
Sleep
InterlockedIncrement
InterlockedDecrement
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
HeapAlloc
HeapSize
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
RaiseException
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
FlushFileBuffers

user32

SetPropA

gdi32

EnumObjects
StrokePath
CreateCompatibleDC
SetGraphicsMode
EndPath

Exports

Exports

hqyjfokssijv
ntqyuhxqbetw
ofoptglnhocyln
owsbevtehh

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 85.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e99c983205b5be7f8e6bcbaa5139bb1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 159KB - Virtual size: 159KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 33KB - Virtual size: 85.9MB

.reloc Size: 81KB - Virtual size: 80KB

.text
Size: 159KB - Virtual size: 159KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 33KB - Virtual size: 85.9MB

.reloc
Size: 81KB - Virtual size: 80KB