1969df69099c03df5d2f56e6700e90c7

Sharing

Copy URL Twitter E-mail

General

Target

1969df69099c03df5d2f56e6700e90c7
Size

43KB
MD5

1969df69099c03df5d2f56e6700e90c7
SHA1

f9f39133358290018dae3c91e2ed3cd8e48d7c29
SHA256

cb7551f83d6011bf435283345e3c6cc26d5880cd0751d94bf828825f7847cdb0
SHA512

559dcd5a7e23f64e3629453e20222ec658f4462a2af288b9376ea842acb22f424b25cf6dffee67f6206932c3b2843a3f57d8624aa4900cb8ca26ee6189d53501
SSDEEP

768:xsd5uhtcHFMvvgi6RcSrxvW1Nt4T4izYuDGeJYjxpw1pE6Vx2IVhoIxdC8r:sJFkvD5SvIt4kFuDG/pil2I8I3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1969df69099c03df5d2f56e6700e90c7

Files

1969df69099c03df5d2f56e6700e90c7
.dll windows:4 windows x86 arch:x86

130ae6ca4b48cc5247b1d79e37c21aa7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryA
GetDriveTypeW
GetLastError
QueryPerformanceFrequency
GetFileType
GetCommandLineA
GetDiskFreeSpaceA
ConvertDefaultLocale
EraseTape
CallNamedPipeA
GetSystemWindowsDirectoryW
GetSystemDirectoryW

tapi32

lineInitialize
lineSetDevConfigA
linePark
phoneGetIcon
lineGetProxyStatus
phoneInitialize
lineGetCountry
lineUnparkW
lineInitializeExA
lineGetCallStatus
lineRedirectW
lineSetStatusMessages
lineSetMediaMode
lineHandoffW
lineGetCountryW
MMCGetServerConfig
lineConfigDialogW
MMCGetLineInfo

msvcrt

_heapwalk
_beginthreadex
sin
_controlfp
fprintf
__set_app_type
_findnext64
_getpid
wcsxfrm
tanh
_toupper
memcpy
getwc
_jn
srand
_CIsinh
localeconv
_wgetcwd
_putws
_execle

winmm

mmioDescend
midiStreamOut
midiInGetNumDevs
mixerGetLineInfoA
midiInStop
mixerGetLineInfoW
mmioStringToFOURCCW
tid32Message
joyGetNumDevs
mciGetErrorStringA
waveOutOpen
waveInReset
midiOutReset
mciSendStringA
SendDriverMessage
midiStreamRestart
waveOutGetDevCapsW
DrvGetModuleHandle

opengl32

glVertex3fv
glLighti
wglDescribePixelFormat
glPixelMapfv
glCopyTexSubImage2D
glPixelMapusv
glRectsv

Exports

Exports

PmwnPp
CkeQbmyfoqKuxdasaGvyqaqt
PlmQpjvcofPrzkqyf
XngdqIedgUdo

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

130ae6ca4b48cc5247b1d79e37c21aa7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

tapi32

msvcrt

winmm

opengl32

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 32KB - Virtual size: 32KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 22B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 22B