277ed7256b0f184f4ea65fbde0614ba0

Sharing

Copy URL Twitter E-mail

General

Target

277ed7256b0f184f4ea65fbde0614ba0
Size

237KB
MD5

277ed7256b0f184f4ea65fbde0614ba0
SHA1

f96f01638814d1e97cc81c0fe50aa8b583bce4d0
SHA256

7332049255aae5ac8e79d5e684624f31e1e5194b7eccf6f6ee49905d7fed3085
SHA512

2fdd4c39e71c21d989bb166d48d92a974ceeb47adf60d1ce593b5b3e0bdb6b99c60c7f1188f72c6d9f2d06717d4a262d835b267d3e019df62b575976af4bd8a3
SSDEEP

3072:lhn1kX4kZzE2JioDgpqKWqf8Lj4oEmmJW2pUWUFvyo64nMaa3r/AO+5Q7vrZ:bwzrMsKWqf8f4QmJWyfZaa7/z7rZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
277ed7256b0f184f4ea65fbde0614ba0

Files

277ed7256b0f184f4ea65fbde0614ba0
.dll windows:5 windows x86 arch:x86

5aed94329d3001a5cb380611d2354ced

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetPrivateProfileIntA
WritePrivateProfileStringA
MulDiv
CreateThread
GetModuleFileNameA
ExitProcess
GetSystemInfo
Sleep
GetProcessHeap
GetModuleHandleA
IsValidLocale
EnumSystemLocalesA
SetLastError
VirtualProtect
FlushInstructionCache
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualQuery
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetLastError
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetFileAttributesA
GetTimeZoneInformation
HeapAlloc
RaiseException
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetFilePointer
SetStdHandle
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateFileA
VirtualAlloc
HeapReAlloc
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
HeapSize
SetConsoleCtrlHandler
InterlockedExchange
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
GetLocaleInfoW

user32

MessageBoxA
GetAsyncKeyState
GetCursorPos
GetForegroundWindow
ScreenToClient

gdi32

CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
SetTextAlign
GetTextExtentPoint32A
ExtTextOutA
DeleteObject
DeleteDC
CreateCompatibleDC

winmm

sndPlaySoundA

Sections

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5aed94329d3001a5cb380611d2354ced

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winmm

Sections

.text Size: 184KB - Virtual size: 184KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 7KB - Virtual size: 23KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 184KB - Virtual size: 184KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 7KB - Virtual size: 23KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 8KB - Virtual size: 8KB