665df86f76be03389c31fb687b2bd2a2

General

Target

665df86f76be03389c31fb687b2bd2a2
Size

107KB
MD5

665df86f76be03389c31fb687b2bd2a2
SHA1

058f983100cac5d81420dfbe703821f3557a4162
SHA256

f5780ceeefacc531c388edece2de094b7f2871c94e130db0d6374c600acbe616
SHA512

0b0679d6e45640d40090e58d75a7a57821bb2d833adbf79d87c8ed212e2c95e91aabf67f645e8113348f8efedfadbd56438c11edf7879f057b0d39cdb60408dc
SSDEEP

1536:U3ZxMuvgf1dnbLd+bXSrkGPe1huQ2Hm4dx8EbnO53BgmQBB:U3TMTXMbXSrkGPNQ2Hm4dxjO5RgmQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665df86f76be03389c31fb687b2bd2a2

Files

665df86f76be03389c31fb687b2bd2a2
.dll windows:4 windows x86 arch:x86

c1022da150cf25c28e650c78740f0be1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
QueryPerformanceCounter
GetLocaleInfoA
GetModuleFileNameA
SetEvent
InterlockedExchange
GetEnvironmentStrings
WideCharToMultiByte
InitializeCriticalSection
GetFileType
IsBadReadPtr
GetACP
DisconnectNamedPipe
DeleteCriticalSection
RtlUnwind
ConnectNamedPipe
GetStartupInfoA
GetCPInfo
GetSystemTimeAsFileTime
TerminateProcess
HeapFree
IsBadCodePtr
GetStdHandle
SetLastError
CreateTimerQueueTimer
LCMapStringA
VirtualProtect
GetEnvironmentStringsW
ResetEvent
CreateEventA
GetOEMCP
lstrcpyW
SetUnhandledExceptionFilter
CreateMutexW
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsBadWritePtr
GetSystemInfo
LoadLibraryA
DeleteTimerQueueTimer
GetCurrentProcessId
WaitForSingleObject
CreateThread
UnmapViewOfFile
WriteFile
InterlockedDecrement
GetCurrentThreadId
HeapAlloc
LCMapStringW
CreateNamedPipeA
InterlockedCompareExchange
DuplicateHandle
WaitForMultipleObjects
FreeEnvironmentStringsA
LeaveCriticalSection
GetLastError
ReleaseMutex
GetModuleHandleA
OpenProcess
GetVersionExA
Sleep
GetTickCount
lstrcatW
MultiByteToWideChar
CopyFileA
EnterCriticalSection
VirtualQuery
InterlockedExchangeAdd

user32

DrawIcon
CreateIconFromResource
wsprintfW
LoadIconA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

Exports

Exports

owiyrx

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1022da150cf25c28e650c78740f0be1

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 76KB

.data Size: 16KB - Virtual size: 45KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 1024B - Virtual size: 692B

.text
Size: 77KB - Virtual size: 76KB

.data
Size: 16KB - Virtual size: 45KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 1024B - Virtual size: 692B