375e397e1ffcbcafd91a77c0f7ba2fad

Sharing

Copy URL Twitter E-mail

General

Target

375e397e1ffcbcafd91a77c0f7ba2fad
Size

1.0MB
MD5

375e397e1ffcbcafd91a77c0f7ba2fad
SHA1

85e021db4ced3546e24f3a25d29ce38ec5513379
SHA256

e689ad91048c73e349b0e60c75cda2ec724e993f747b0ef82ec0fbf50164641d
SHA512

9730e8004443bdbb86cbad95c64e74c7d24605f07b28e738bbc115c3417add5adc3cfc4f5466fb09058b597cc894de61af8481287a82ce3a89529ec6e23c0bf3
SSDEEP

6144:4roWleROgaanrlYa+RMn3ptu6PwwxhCbPrGGZ5l8:4roW8zBlJ7swrCbDGYK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
375e397e1ffcbcafd91a77c0f7ba2fad

Files

375e397e1ffcbcafd91a77c0f7ba2fad
.dll windows:6 windows x86 arch:x86

19963aea6c2edb59125871261ca8b499

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

data

Kdhzssrd
Reakqzjm
Apsfjefo
Ybptkvjo
Ccaoitdd
Xuxldozp
Zhzwgcem
Kqgymxgm
Bujobzbu
Thmbkmwi
Hojhopgj
Fswcepwn
Lwvavltn
Jqwyvkho
Pusqaquj
Auwjrehp
Oexvyces
Podvwffs
Lglfssux
Metyxhqg
Ukevsqaa
Yshphsoe
Buwtlfrf
Vvqmakou
Tnxqzhxr
Xhowvnqq
Hmqkbdvw
Rghhutsf
Hxjwvxky
Nolytfia
Rlxjrvgq
Iotosjmx
Hdsktuho
Pqiiwnwu
Mjqnohol
Vrnjvjbt
Rpzsyerm
Pjmuumch
Hhczbrdg
Kwasxsvl
Ashdgsnm
Rczccjyg
Ikwwrquo
Jouizhzg
Nejtpbpx
Mdlnqnko
Getxqqdl
Rciuveta
Ghkahbda
Jpfglgzt
Mhzzpwlu
Aacystle
Oxazlrny
Djhuiftc

kernel32

IsDebuggerPresent
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
HeapAlloc
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameA
GetProcAddress
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
DecodePointer
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19963aea6c2edb59125871261ca8b499

Headers

DLL Characteristics

File Characteristics

Imports

data

kernel32

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 2KB - Virtual size: 5KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 2KB - Virtual size: 5KB

.reloc
Size: 5KB - Virtual size: 5KB