54f4269b6bf7126854ea49b97f51da36

Sharing

Copy URL Twitter E-mail

General

Target

54f4269b6bf7126854ea49b97f51da36
Size

1.4MB
MD5

54f4269b6bf7126854ea49b97f51da36
SHA1

b098ea9e08fb06a9b2612736e751ad746491c648
SHA256

13c777760ec0b6701813f2d0aa1f1e033232a8d851453127f9038aae47704077
SHA512

1f9198a8dfaae9c42bbf546eff45919123246e7196f4adbe790e1a41b5bc5263b2d4dcd9fe26ec402db65ba49c179c31acbf7c5f80266e9d350762695f3b3b33
SSDEEP

24576:oBwojHTL0eyeJtovVXHOZmW9OeTDKXpwpjfQhvExrCN10DSageHWJRfiSh:orH30el/osfHOOpprCj4SaPcRfiSh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54f4269b6bf7126854ea49b97f51da36

Files

54f4269b6bf7126854ea49b97f51da36
.dll windows:6 windows x86 arch:x86

7433e85dc12d32ecdac85fa63dd15040

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dbghelp

SymCleanup
SymInitialize
SymGetSearchPath

ws2_32

ioctlsocket
getsockopt
getaddrinfo
getnameinfo
ntohs
freeaddrinfo
WSASetLastError
WSAGetLastError
send
gethostbyname
setsockopt
connect
WSAStartup
inet_addr
WSASocketW
select
htons
WSAEnumProtocolsW
WSACleanup
recv
socket
__WSAFDIsSet
closesocket
shutdown

kernel32

CreateFileA
GetFileSize
VirtualFree
SetFileTime
WriteFile
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
ReadFile
GetSystemDirectoryA
GetTimeZoneInformation
lstrlenW
GetLastError
RtlUnwind
VirtualAlloc
GetLocalTime
LoadLibraryA
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetFileTime
DeleteCriticalSection
GetDiskFreeSpaceExA
CloseHandle
CreateThread
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetDriveTypeW
SetEndOfFile
GetProcAddress
GetProcessHeap
WriteConsoleW
CreateFileW
FlushFileBuffers
MultiByteToWideChar
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
SetLastError
SystemTimeToFileTime
GetSystemTime
Sleep
FindNextFileW
FindFirstFileW
FindClose
GetModuleHandleW
GetVersion
GetFileType
GetStdHandle
FormatMessageW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
HeapFree
HeapAlloc
DecodePointer
GetCommandLineA
RaiseException
HeapReAlloc
EncodePointer
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameW
SetHandleCount
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
HeapSize

user32

GetUserObjectInformationW
CharNextW
GetProcessWindowStation
MessageBoxW

gdi32

CreateDIBPatternBrushPt
DeleteObject
CreatePolygonRgn

comdlg32

PrintDlgW
FindTextW

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegCloseKey
RegEnumValueW
RegCreateKeyA

ole32

CoGetTreatAsClass
CoCreateGuid

Exports

Exports

add_value_metadata
advance_ptr
advance_recursive
array_to_json
asmain
cbor_encode_double
cbor_encode_negative_int
cbor_encode_text_string
cbor_error_string
cbor_value_get_tag
cbor_value_is_map
cbor_value_is_null
cbor_value_is_tag
dump_bytestring_base64url
tagged_value_to_json
would_overflow

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7433e85dc12d32ecdac85fa63dd15040

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

ws2_32

kernel32

user32

gdi32

comdlg32

advapi32

ole32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 291KB - Virtual size: 290KB

.data Size: 16KB - Virtual size: 39KB

.reloc Size: 59KB - Virtual size: 59KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 291KB - Virtual size: 290KB

.data
Size: 16KB - Virtual size: 39KB

.reloc
Size: 59KB - Virtual size: 59KB