64c3bdfd7e030422310eeaf3334a6b67

Sharing

Copy URL Twitter E-mail

General

Target

64c3bdfd7e030422310eeaf3334a6b67
Size

533KB
MD5

64c3bdfd7e030422310eeaf3334a6b67
SHA1

1fc9a0ea92402f76e5231aa049525460ae2de465
SHA256

ea684d594837438450ff2ace6574301c7aabdfd977e247f339a5b2ca5a70821b
SHA512

8bc61feb28a6822c362713b3808dc75b3c54cbe5ad31e7e7b0beafb771e6d9aee76c4ea4edb064c09631e25c28fd070ffe3ebcce1f26dc0e87bbe4a4f351aaa6
SSDEEP

6144:kHJzrT1az+H9MSRZrtiFcOYWK5sIwxHuVcvY:StsaH9MqZucH0THun

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64c3bdfd7e030422310eeaf3334a6b67

Files

64c3bdfd7e030422310eeaf3334a6b67
.dll windows:4 windows x86 arch:x86

6a87df4ae202b67a56c786d68dfc2aa8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDateFormatA
GetLocalTime
EnumCalendarInfoA
SetEndOfFile
GetProcAddress
Sleep
SizeofResource
lstrcmpA
HeapAlloc
VirtualAllocEx
ExitProcess
GlobalAlloc
LoadLibraryA
GetCPInfo
IsBadReadPtr
ResetEvent
SetErrorMode
GetCommandLineW
VirtualAlloc
GlobalDeleteAtom
GetStringTypeW
lstrlenA
LoadResource
GetOEMCP
GlobalFindAtomA

user32

LoadBitmapA
GetMenu
GetCursor
IsMenu
GetWindowTextLengthA
GetCapture
IsCharUpperA
CharUpperA
IsDlgButtonChecked

ole32

CreateStreamOnHGlobal
CoDisconnectObject
CoCreateFreeThreadedMarshaler
CoCreateInstanceEx
StringFromIID
CoGetMalloc
CLSIDFromString
PropVariantClear
CLSIDFromProgID

comctl32

ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Add
ImageList_Read

Exports

Exports

_Tl_SiVLydV0MD

Sections

CODE
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lkdata
Size: 491KB - Virtual size: 491KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a87df4ae202b67a56c786d68dfc2aa8

Headers

File Characteristics

Imports

kernel32

user32

ole32

comctl32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 11KB

.data Size: 10KB - Virtual size: 9KB

.lkdata Size: 491KB - Virtual size: 491KB

.idata Size: 1KB - Virtual size: 1KB

.jdata Size: 512B - Virtual size: 412B

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

CODE
Size: 12KB - Virtual size: 11KB

.data
Size: 10KB - Virtual size: 9KB

.lkdata
Size: 491KB - Virtual size: 491KB

.idata
Size: 1KB - Virtual size: 1KB

.jdata
Size: 512B - Virtual size: 412B

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB