1392933bc624afb9509deb857c694bc9

Sharing

Copy URL

Twitter E-mail

General

Target

1392933bc624afb9509deb857c694bc9
Size

1.1MB
MD5

1392933bc624afb9509deb857c694bc9
SHA1

369a3fc3b988c1b82149829a789944805edbc28c
SHA256

a0264e888da6b92026cc36fbe053808ce016421a66d7bbc3008f1a14b93d7551
SHA512

401024b1b628a34c303801491c334549bdbb17f445f32636a019587651554718f6eaeabed9c3388a6af3e32c549855612268a814702817f303975bddb0685b3b
SSDEEP

24576:5RgjyfPjOF8kuMhqx58tC9FyjzA2MzZ/gOuobg1XR799yH:5RgjynyFldSuteF6zA2cgOt8XL9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1392933bc624afb9509deb857c694bc9

Files

1392933bc624afb9509deb857c694bc9
.dll windows:6 windows x64 arch:x64

ce90c61dfbec0e286b5dc8f8017a5b0a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
CreateFileW
DeleteFileW
GetFileAttributesA
GetFileSize
GetFileSizeEx
GetFileType
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
CloseHandle
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
GetOverlappedResult
DeviceIoControl
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
TerminateThread
GetTickCount
DisableThreadLibraryCalls
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
ClearCommBreak
ClearCommError
SetupComm
EscapeCommFunction
GetCommModemStatus
GetCommState
GetCommTimeouts
PurgeComm
SetCommBreak
SetCommState
SetCommTimeouts
FormatMessageW
CreateSemaphoreW
GetLocaleInfoEx
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140

memset
memcpy
memmove
__std_type_info_destroy_list
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memchr
memcmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_errno
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
exit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

isxdigit
isspace
isprint
tolower
wcsncat
wcsncpy
_wcsnicmp
strncat
strncpy
_strnicmp
strncmp

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free
realloc
_callnewh

api-ms-win-crt-convert-l1-1-0

wcstombs_s
_ultow
_itow
_ltoa
strtoul
_itoa

api-ms-win-crt-utility-l1-1-0

srand
rand

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

fflush
fgets
__acrt_iob_func
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vfprintf
setbuf
puts
putchar
ftell
ferror
fclose
_kbhit
__stdio_common_vswprintf
fseek
__stdio_common_vswprintf_s
fputs
fopen

api-ms-win-crt-time-l1-1-0

asctime
_gmtime64
_time64

api-ms-win-crt-math-l1-1-0

sqrt

api-ms-win-crt-conio-l1-1-0

_getch

Exports

Exports

OPL_Timer_StartThread
cstr_free
deser_u64
run_ecdsa_edge_cases
run_ecmult_const_tests
secp256k1_context_clone
secp256k1_ecmult_context_build
secp256k1_gej_eq_x_var
secp256k1_schnorr_partial_combine
vector_find

Sections

.text
Size: 629KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 511KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce90c61dfbec0e286b5dc8f8017a5b0a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-conio-l1-1-0

Exports

Exports

Sections

.text Size: 629KB - Virtual size: 628KB

.rdata Size: 511KB - Virtual size: 510KB

.data Size: 11KB - Virtual size: 17KB

.pdata Size: 7KB - Virtual size: 6KB

INIT Size: 3KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 629KB - Virtual size: 628KB

.rdata
Size: 511KB - Virtual size: 510KB

.data
Size: 11KB - Virtual size: 17KB

.pdata
Size: 7KB - Virtual size: 6KB

INIT
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB