6414c95b14b6e259e6405f9dc3463e4e

Sharing

Copy URL Twitter E-mail

General

Target

6414c95b14b6e259e6405f9dc3463e4e
Size

52KB
MD5

6414c95b14b6e259e6405f9dc3463e4e
SHA1

936484dfc691161788f61b5551185c8f84e6c72a
SHA256

a0c453663dafd94b18f015fd30e22b1ddee0f2dccbe9401465d63751422a53b8
SHA512

98fd688ea61963d7fcead38650868440ecbe531c842a299177a13f3bd6eff0841d1d68b94ba2fb64a6aaf53a37a425ece3a5130492c57fd1dfab097da6d1bbef
SSDEEP

1536:50v2nYfU7Y06QRYvUyuzm8+KjSUBMj9myqMZbaTjv:50eeL06a2Uy58tLAUlMlIj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6414c95b14b6e259e6405f9dc3463e4e

Files

6414c95b14b6e259e6405f9dc3463e4e
.dll windows:5 windows x86 arch:x86

cdee80286f8b3b5af1f22a713e9bc77e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

EndDeferWindowPos
TrackPopupMenu
ClientToScreen
GetMessageW
DestroyCursor
SetCapture
SetCursor
ValidateRect
DeferWindowPos
SetWindowLongA
EnumDisplaySettingsA
KillTimer
GetMonitorInfoA
MessageBoxA
RedrawWindow
GetWindow
AppendMenuW
CloseClipboard

ntdll

NtOpenMutant
NtGetWriteWatch
NtDeleteAtom
NtCreateTimer
ZwImpersonateThread

kernel32

QueryPerformanceCounter
InterlockedDecrement
GetSystemDirectoryW
LoadLibraryExW
CloseHandle
CreateProcessW
lstrcmpiW
GlobalAlloc
SetPriorityClass
GetCommandLineW
VirtualAlloc
GetCurrentThread
GlobalFree
SetThreadPriority
TryEnterCriticalSection
LocalAlloc
GetLongPathNameW
GetModuleHandleA
LoadResource
InterlockedCompareExchange

shlwapi

UrlIsW
UrlGetPartW
PathCanonicalizeW
PathRemoveBackslashW
PathIsUNCW

gdi32

GetObjectW
GetStockObject
SetTextAlign
IntersectClipRect
UpdateColors
CreateRectRgnIndirect

Exports

Exports

CreateIpForwardEntry
GetAdaptersInfo
NhGetGuidFromInterfaceName
InternalSetIpNetEntry
CreateProcessNotify
CreateProxyArpEntry
GetUdpStatistics
InternalDeleteIpNetEntry
GetAdapterIndex
CancelIPChangeNotify
GetExtendedUdpTable
DllClientCleanup
efsuetup
GetOwnerModuleFromTcpEntry
DllClientStartup
GetNetworkParams
GetIpAddrTable
DeleteProxyArpEntry
GetIpStatisticsEx
GetBestRoute
InternalCreateIpForwardEntry
GetPerAdapterInfo
FlushIpNetTable
UnenableRouter
DeleteIpNetEntry
InternalGetTcpTable
InternalSetTcpEntry
GetUniDirectionalAdapterInfo
GetIpErrorString
SetTcpEntry
GetFriendlyIfIndex
GetIpStatistics
NotifyRouteChange
SetAdapterIpAddress
GetTcpTable
EnableRouter
SetIpNetEntry
IcmpCloseHandle
GetBestInterface
CreateIpNetEntry
InternalGetIpAddrTable
InternalCreateIpNetEntry
IcmpCreateFile
GetIpNetTable
AllocateAndGetIpAddrTableFromStack

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdee80286f8b3b5af1f22a713e9bc77e

Headers

DLL Characteristics

File Characteristics

Imports

user32

ntdll

kernel32

shlwapi

gdi32

Exports

Exports

Sections

.text Size: 38KB - Virtual size: 38KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 38KB - Virtual size: 38KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB