d0485a5570075fce9b7ba1749c3f5026f0f0e970c71e5cda4fae93589c77410d

Sharing

Copy URL Twitter E-mail

General

Target

d0485a5570075fce9b7ba1749c3f5026f0f0e970c71e5cda4fae93589c77410d
Size

745KB
MD5

2278e7f80fea5be6934a99d97bd94db1
SHA1

331014741d99b3e708bbbfc25ffaa7737b817fac
SHA256

d0485a5570075fce9b7ba1749c3f5026f0f0e970c71e5cda4fae93589c77410d
SHA512

d964397d0858dec000e496ece6e7348482bb9c20b816c6539db7beb3d115c89fe7f5026fa3f2b7896bd3b103995dcc830b73aac7208666995aafb222bcc704e1
SSDEEP

12288:F4FYYqK4uqq0y1oKsBqvn4+R1e0r93zBvImLUbTNwHPd:KYYqK4FLy7Xr9DCbTuHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0485a5570075fce9b7ba1749c3f5026f0f0e970c71e5cda4fae93589c77410d

Files

d0485a5570075fce9b7ba1749c3f5026f0f0e970c71e5cda4fae93589c77410d
.dll windows:6 windows x86 arch:x86

19dbfd34bbd93b6f3fe21b6e800ccf4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
DisableThreadLibraryCalls

msvcp110

?_Winerror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z

msvcr110

strchr
strncpy
memmove
__crtUnhandledException
__crtTerminateProcess
_lock
_unlock
malloc
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
sprintf
strtoul
_strtoui64
free
??2@YAPAXI@Z
??3@YAXPAX@Z
_calloc_crt
_purecall
_crt_debugger_hook
_CxxThrowException
__CxxFrameHandler3
memcpy
memset

Exports

Exports

GainReasonCode
GainVersion
Gain_Authentication_Request_Win_Data
Gain_CC_Setup_Win_Data
Gain_CM_Service_Reject_Win_Data
Gain_CP_Data_Win_Data
Gain_Enhanced_Measurement_Report_Uplink_Data_Point
Gain_GSM_Activate_PDP_Context_Accept_Win_Data
Gain_GSM_Activate_PDP_Context_Request_Win_Data
Gain_GSM_Attach_Accept_Win_Data
Gain_GSM_CM_Service_Request_Win_Data
Gain_MEASUREMENT_INFORMATION_Downlink_Data_Point
Gain_MMLocationUpdatingAccept_Data_Point
Gain_MMS_Push_Win_Data
Gain_MMTMSIReallocationCommand_Data_Point
Gain_OriginalSMSInfo
Gain_PagingRequest_Data_Point
Gain_RRAssignmentCommand_Data_Point
Gain_RRChannelRelease_Data_Point
Gain_RRChannelRequest_Data_Point
Gain_RRHandoverCommand_Data_Point
Gain_RRMeasurementReport_Data_Point
Gain_RRPagingResponse_Data_Point
Gain_RR_NAS_Struct_Param
Gain_Routing_Area_Update_Accept
Gain_SM_Deactivate_PDP_Context_Request_Data
Gain_SystemInfoType13_Data_Point
Gain_SystemInfoType1_Data_Point
Gain_SystemInfoType2_Data_Point
Gain_SystemInfoType2qur_Data_Point
Gain_SystemInfoType2ter_Data_Point
Gain_SystemInfoType3_Data_Point
Gain_SystemInfoType4_Data_Point
Gain_SystemInfoType6_Data_Point
Gaingsml3DiagNoseData
Layer3Decode
NAS_GSMRRDecode
gsml3decode

Sections

.text
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19dbfd34bbd93b6f3fe21b6e800ccf4e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp110

msvcr110

Exports

Exports

Sections

.text Size: 515KB - Virtual size: 515KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 83KB - Virtual size: 84KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 34KB - Virtual size: 34KB

.text
Size: 515KB - Virtual size: 515KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 83KB - Virtual size: 84KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 34KB - Virtual size: 34KB