58dff4c0040118e6585fa62902f64508

General

Target

58dff4c0040118e6585fa62902f64508
Size

88KB
MD5

58dff4c0040118e6585fa62902f64508
SHA1

1b6437327a85914bd8c9900bab14e1e8a372db21
SHA256

e44aaebe17608f9b5c07bee8ddd43842002a0456c56af4bf9c5f02706050f85c
SHA512

b629db0d4f42fba090c815e368187e6d30a8b6b4252c80417b437c4fb1a596aef8ce3fae73d52722fcf91b894fa57adf556a09642d086f40b6540d46a317fb6f
SSDEEP

1536:luQUGyTL8eFJ11kL1q+PSsMwTHgsFl/h0m6PnC0la:YL8WdkrtXHXFn0m6/3a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58dff4c0040118e6585fa62902f64508

Files

58dff4c0040118e6585fa62902f64508
.dll windows:4 windows x86 arch:x86

e353c287fba550c44df53924fbac7e8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSectionAndSpinCount
GetStringTypeW
UnmapViewOfFile
CreateFileA
GetSystemTimeAsFileTime
WriteFile
MapViewOfFile
SetFileTime
SetEvent
InterlockedDecrement
DeleteFileW
InterlockedExchange
TerminateProcess
CreateEventA
lstrlenW
HeapCreate
ReleaseMutex
DeleteFileA
VirtualAlloc
HeapDestroy
GetSystemInfo
GetStringTypeA
CreateFileW
GetEnvironmentStringsW
GetFileType
lstrcmpA
VirtualProtect
GetCurrentProcessId
lstrlenA
GetFileSize
SetFilePointer
DisableThreadLibraryCalls
InterlockedIncrement
TlsGetValue
GetCurrentProcess
OpenFileMappingW
GetEnvironmentVariableA
DeleteCriticalSection
GetFullPathNameA
TlsAlloc
lstrcmpiA
LocalAlloc
WaitForSingleObject
OpenFileMappingA
VirtualFree
GetVersionExA
CreateThread
SetEndOfFile
LeaveCriticalSection
MoveFileW
MoveFileA
GetDiskFreeSpaceW
CloseHandle
Sleep
HeapFree
GetLastError
GetLocaleInfoA
QueryPerformanceCounter
FreeEnvironmentStringsA
CreateMutexW
FreeLibrary
GetCurrentThreadId
GetTickCount
SetHandleCount
FreeEnvironmentStringsW
TlsFree
VirtualQuery
GetEnvironmentStrings
LocalFree
GetFullPathNameW
GetStringTypeExA
LCMapStringA
CompareFileTime
EnterCriticalSection
GetDiskFreeSpaceA
CreateMutexA
FlushViewOfFile
HeapReAlloc
WideCharToMultiByte
GetCPInfo
LCMapStringW
InitializeCriticalSection

Exports

Exports

payv

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e353c287fba550c44df53924fbac7e8e

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.data Size: 20KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 848B

.reloc Size: 4KB - Virtual size: 546B

.text
Size: 56KB - Virtual size: 53KB

.data
Size: 20KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 848B

.reloc
Size: 4KB - Virtual size: 546B