adf58e4cb21c1af790adda9b0d875cd0484feff02e766b36c1606bec4d8fcaa5

Sharing

Copy URL Twitter E-mail

General

Target

adf58e4cb21c1af790adda9b0d875cd0484feff02e766b36c1606bec4d8fcaa5
Size

675KB
MD5

fb6cac843f345f6e462b2d0e67296fc1
SHA1

46140b21a710bc20e117786ac839b8add0580d44
SHA256

adf58e4cb21c1af790adda9b0d875cd0484feff02e766b36c1606bec4d8fcaa5
SHA512

c5a20fda7ce2227740bb004e0329246ef076890e8adc5fb9229fd4640c211cb098aca0abd216d9fa231319af1756b51a73802f7c930accd96a98b4abb4f381da
SSDEEP

12288:qvMm5dZsGzlHT/cCZoBwFZQgsICTUbTNwHPL:GMm5dZ1VUCrZzbTuHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf58e4cb21c1af790adda9b0d875cd0484feff02e766b36c1606bec4d8fcaa5

Files

adf58e4cb21c1af790adda9b0d875cd0484feff02e766b36c1606bec4d8fcaa5
.dll windows:6 windows x86 arch:x86

73c1d65bea5d2931cf14b8c334d4e6d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
FreeLibrary
GetModuleFileNameA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CreateFileW
CloseHandle
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
EncodePointer
DecodePointer
GetStringTypeW
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
GetCommandLineA
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
WriteFile
ExitProcess
HeapSize
IsDebuggerPresent
SetLastError
GetProcessHeap
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
IsValidCodePage
GetACP
GetOEMCP
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
LCMapStringEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle

ws2_32

inet_addr

Exports

Exports

CreateDLMessageParser
FreeDLMessageParser
RegisterWriteLogCallBack
SetFilterXmlConfigFilePathInterface
SetFilterXmlConfigVersionInterface

Sections

.text
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

73c1d65bea5d2931cf14b8c334d4e6d4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

Exports

Exports

Sections

.text Size: 472KB - Virtual size: 472KB

.rdata Size: 81KB - Virtual size: 80KB

.data Size: 90KB - Virtual size: 98KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 472KB - Virtual size: 472KB

.rdata
Size: 81KB - Virtual size: 80KB

.data
Size: 90KB - Virtual size: 98KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 29KB - Virtual size: 28KB