5723fd1917b525a9a190e8b71a3e6b0f

Sharing

Copy URL Twitter E-mail

General

Target

5723fd1917b525a9a190e8b71a3e6b0f
Size

155KB
MD5

5723fd1917b525a9a190e8b71a3e6b0f
SHA1

5c568ed6558d56d3da22f7f11db820b457bce973
SHA256

6a8390cae09ef00e724d3519b1b400bb2b7c8c7c66f59685a02a694832d96224
SHA512

6a8a7c12c5cc3e1f5910858e0dbe9c5d09e4432cf292e34a563693e0a9f170dd32e29ca748129bfc4014db88ac3c8bc0ef19fecb157bd3a3dd1b82198c72b506
SSDEEP

3072:6DtbQ6QcE4zFf+kIX1y8CazYkUj4n7MfkQf7DqmzRqh+Gmj4D+lmd4jCGJ:mlQmFWL5Zskx7M57DPls+a+Co

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5723fd1917b525a9a190e8b71a3e6b0f

Files

5723fd1917b525a9a190e8b71a3e6b0f
.dll windows:6 windows x86 arch:x86

393e29d409bc9242a5ad85852c7d49f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
GetCurrentProcess
GetModuleHandleA
OpenProcess
Sleep
GetCurrentThread
CloseHandle
K32GetModuleInformation
GetProcAddress
WideCharToMultiByte
DisableThreadLibraryCalls
CreateThread
ExitProcess
HeapFree
MultiByteToWideChar
HeapAlloc
GetProcessHeap
LoadLibraryA
TerminateProcess
GetCurrentProcessId
IsDebuggerPresent
CreateMutexA
GetModuleFileNameA
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
RaiseException
DecodePointer
HeapDestroy
DeleteCriticalSection
GetPrivateProfileStringA
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQuery
SetLastError
FreeLibrary
GetModuleHandleW
LoadLibraryExW
ReadConsoleW
ReadFile
SetEndOfFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
CreateFileW
SetStdHandle
SetFilePointerEx
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwind
InterlockedFlushSList
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW

user32

MessageBoxA
CreateWindowExA
GetWindowThreadProcessId
GetWindow
GetTopWindow
GetClassNameA

ws2_32

WSAAddressToStringA
gethostbyname

Exports

Exports

_DllMain@12

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

393e29d409bc9242a5ad85852c7d49f8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

Exports

Exports

Sections

.text Size: 107KB - Virtual size: 107KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 3KB - Virtual size: 5KB

.detourc Size: 4KB - Virtual size: 4KB

.detourd Size: 512B - Virtual size: 12B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 107KB - Virtual size: 107KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 3KB - Virtual size: 5KB

.detourc
Size: 4KB - Virtual size: 4KB

.detourd
Size: 512B - Virtual size: 12B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 6KB