25f1637797a6ef338a01d9d43456dd10

Sharing

Copy URL Twitter E-mail

General

Target

25f1637797a6ef338a01d9d43456dd10
Size

268KB
MD5

25f1637797a6ef338a01d9d43456dd10
SHA1

ab85fc2ce906c2f87ff42e09432dc423691aeaf0
SHA256

1c96fc9692d83e17beb4366bc878b05f301f8718d242317bcef7d551fd0853ea
SHA512

65d2f88d4f6c25d9d6d3708b4f1a71ca006d80a336995812d333dbcc2aed0f132d112f3e526f1496f42e11f49bf50a6219c923700a60d031e0b962079f3a72dc
SSDEEP

6144:9YESwmqpEYSBvyxTLbwBPISN8EofQSy1b:9YTYEUWPFw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25f1637797a6ef338a01d9d43456dd10

Files

25f1637797a6ef338a01d9d43456dd10
.dll windows:4 windows x86 arch:x86

d8b0e4fd3ff3e4e174dddd89717bd9e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

CreateCompatibleDC
CreatePen
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
GetClipBox
CreateCompatibleBitmap
GetPixel
GetStockObject
LPtoDP
Polyline
SelectObject
StretchBlt
GetObjectA
BitBlt

comctl32

ImageList_ReplaceIcon

kernel32

CloseHandle
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesA
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OpenProcess
RtlUnwind
SetHandleCount
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
lstrlenW

ole32

CoTaskMemFree

shell32

SHGetPathFromIDListA
SHGetDesktopFolder
SHGetMalloc

Exports

Exports

BindTexture
D3D9Begin
D3D9RegisterVertexBuffer
D3D9ResourceGetMappedPitch
D3D9ResourceGetMappedSize
D3D9ResourceGetSurfaceDimensions
D3D9ResourceSetMapFlags
EnumDeviceReset
EnumFlashSettingNext
EnumImageItemNext
EventQuery
EventSynchronize
GLSetBufferObjectMapFlags
GetChannelDesc
GetDevSplineArrayEx
GetDllsVersion
GetThinImageSize
GetVMSInfo
Memcpy2DFromArray
ThreadExit
WaitForMedia

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d8b0e4fd3ff3e4e174dddd89717bd9e9

Headers

File Characteristics

Imports

gdi32

comctl32

kernel32

ole32

shell32

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 96KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 96KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB