49d1978dc16a3c33f6574f4f5601faeb

Sharing

Copy URL Twitter E-mail

General

Target

49d1978dc16a3c33f6574f4f5601faeb
Size

188KB
MD5

49d1978dc16a3c33f6574f4f5601faeb
SHA1

4cb1140b341f95598e6e3ade0c737034fd1643d0
SHA256

5b47ee3bbaf043a22046daf83bf5d05a4c300bcbf8e8b0b745355156e59147ae
SHA512

91ca44b828ad3e633dcefd15f715a092a35b8ac07474788e52ce5d9a4b12ce3023093e1270d901b12e0af9b04421abe8fdf0a12fda8133604dc0b967a17cc95c
SSDEEP

3072:48bP7oCIkCD6Wgk3OIbtRpr1eVE+nxNS5KL/JcmdzuI51u:doCXC223Ow5uznxNS5WBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d1978dc16a3c33f6574f4f5601faeb

Files

49d1978dc16a3c33f6574f4f5601faeb
.dll windows:5 windows x86 arch:x86

c465286f86f74557d97208a90e0e5e44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

esent

JetEndSession

msvcrt

iswlower

crypt32

CryptSIPCreateIndirectData

oleaut32

VarUdateFromDate
BSTR_UserFree

gdi32

StretchBlt

rasapi32

RasDeleteEntryW

user32

ShowOwnedPopups
ImpersonateDdeClientWindow

rpcrt4

RpcBindingSetAuthInfoExW

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleFileNameW
GetTempPathA
VirtualProtect
TransactNamedPipe
EndUpdateResourceA
WriteFile
DebugBreak
SetDefaultCommConfigW

winmm

waveOutGetNumDevs

advapi32

CreateServiceW
RegLoadAppKeyA
FreeSid

shlwapi

ChrCmpIW
StrCmpNW

setupapi

SetupLogErrorW

mprapi

MprAdminGetErrorString

Exports

Exports

PloaesRvommnr

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c465286f86f74557d97208a90e0e5e44

Headers

DLL Characteristics

File Characteristics

Imports

esent

msvcrt

crypt32

oleaut32

gdi32

rasapi32

user32

rpcrt4

kernel32

winmm

advapi32

shlwapi

setupapi

mprapi

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 132KB - Virtual size: 129KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 132KB - Virtual size: 129KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 1KB