173f45b8e958bde602e0e476f3e67758

General

Target

173f45b8e958bde602e0e476f3e67758
Size

9KB
MD5

173f45b8e958bde602e0e476f3e67758
SHA1

65836cac72209a93975f1f8181176dbdd4a056ff
SHA256

db70ce7c2309e49a131e020f585d58a9b9a4fc37d9285f07cd3f0ee09878d703
SHA512

4439e8b4081c773fb0057b93fee2bebc5daeb7f7df8a59b7fe4225c6785151dcfd1546f92ebc52e1d23198ecb5a17088659bf5cae4cb7d7e78c028c42858ba42
SSDEEP

192:Rt69N5a2UIuBcemqfjumvwJjORCfOPljKM3:RtM22Am0vvIj04I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
173f45b8e958bde602e0e476f3e67758

Files

173f45b8e958bde602e0e476f3e67758
.dll windows:6 windows x86 arch:x86

6282f0a9f7e39e35db26902c7a0c59a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
lstrlenW
GetModuleHandleW
LoadLibraryW
GetProcAddress
SetThreadPriority
GetCurrentThread
ExitThread
CreateThread
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

ws2_32

htons
send
socket
ioctlsocket
connect
WSAGetLastError
select
__WSAFDIsSet
closesocket
gethostbyname

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initterm
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6282f0a9f7e39e35db26902c7a0c59a2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 400B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 400B