3e54b4ed1ba99eca70e0a6bcaf7332fa

General

Target

3e54b4ed1ba99eca70e0a6bcaf7332fa
Size

412KB
MD5

3e54b4ed1ba99eca70e0a6bcaf7332fa
SHA1

7dd146e7a1195c9c7f4b0efbb608850334487d8f
SHA256

c0e20633e7574805de77504aee14570c080ab7a2664e5f1028f8f12df9a07a3e
SHA512

9a2027ee2934d953ca283431d96a19d422c52915aa6214af3a31905f8737390cc613690aa23570927b81d6dfa9570d79164f1c087a8b6342557df5cba7e7c410
SSDEEP

12288:FVamMi1o8ZzXJZqmFyIc/KzDLBIVMusxtsG:FVamP17ZzXJsmFyIc/KnKMtsG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e54b4ed1ba99eca70e0a6bcaf7332fa

Files

3e54b4ed1ba99eca70e0a6bcaf7332fa
.dll windows:4 windows x86 arch:x86

16fcc1625916c071f7e283c187ff7219

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
ExitProcess
GetSystemTimeAsFileTime

user32

MessageBoxA

msvcp71

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr71

malloc
realloc
free
??3@YAXPAX@Z
sqrt
ldexp
pow
fabs
floor
ceil
exp
sin
cos
sprintf
atof
atoi
strchr
fgets
fmod
frexp
??0exception@@QAE@ABV0@@Z
_CxxThrowException
_vsnprintf
??1exception@@UAE@XZ
??0exception@@QAE@XZ
memmove
log
qsort
time
_callnewh
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
_j1
_hypot
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__security_error_handler
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
__CxxFrameHandler
fclose
??_V@YAXPAX@Z
fopen

Exports

Exports

?nvDXTcompress_wrap@@YAXPAEKKKPAVnvCompressionOptions@@W4nvPixelOrder@@P6A?AW4NV_ERROR_CODE@@PBXIPBUMIPMapData@@PAX@Z@Z

Sections

.text
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16fcc1625916c071f7e283c187ff7219

Headers

File Characteristics

Imports

kernel32

user32

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 360KB - Virtual size: 358KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 24KB - Virtual size: 56KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 360KB - Virtual size: 358KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 24KB - Virtual size: 56KB

.reloc
Size: 12KB - Virtual size: 10KB