6a273fd4abc53bdc4440caea6dc998af09425e2a79789326911d92843de7833c

Sharing

Copy URL Twitter E-mail

General

Target

6a273fd4abc53bdc4440caea6dc998af09425e2a79789326911d92843de7833c
Size

57KB
MD5

681a7a0199c9bced0317c66cc52516c4
SHA1

f3d459c138a55817396b03f6659c54fdb73e22d5
SHA256

6a273fd4abc53bdc4440caea6dc998af09425e2a79789326911d92843de7833c
SHA512

0825ddc202f07193bbf050d8ac62b27ce928a2064a93aa120fb34175abe2a54e7127882126971a5018a81704b6e3d572e1d28159dc2d9e2324381d07c1bcfe81
SSDEEP

768:bYAv41dwpqo8eBYo9sJtPCaeWwR9WjBTJ4kawlSrDzeVFQtD7Y:vv8jo8AY1JtmWwR9MBTCkXozeVFoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a273fd4abc53bdc4440caea6dc998af09425e2a79789326911d92843de7833c

Files

6a273fd4abc53bdc4440caea6dc998af09425e2a79789326911d92843de7833c
.dll windows:6 windows x86 arch:x86

4bbb3a2a6f60e4bee3a8e8b0e04991b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

crypto

RSA_public_encrypt
PEM_read_bio_RSA_PUBKEY
RSA_size
PEM_read_bio_RSAPrivateKey
RSA_private_decrypt
BIO_new_mem_buf
BIO_free_all
RSA_free
X509_STORE_CTX_free
X509_free
ERR_get_error
X509_STORE_add_cert
X509_STORE_new
X509_STORE_free
d2i_X509
X509_STORE_CTX_cleanup
ERR_error_string
X509_STORE_CTX_init
X509_STORE_CTX_new
OPENSSL_init_crypto
X509_verify_cert

commondatasetbase

??0Random@common@@QAE@H@Z
??1Random@common@@QAE@XZ
?next@Random@common@@QAEIXZ
??0MD5Engine@common@@QAE@XZ
??1MD5Engine@common@@UAE@XZ
?digest@MD5Engine@common@@UAEABV?$vector@EV?$allocator@E@std@@@std@@XZ
?digestToHex@DigestEngine@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@EV?$allocator@E@std@@@4@@Z
??0BinaryReader@common@@QAE@XZ
?GetModuleDir@Environment@common@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX@Z
?CreateGUID@GUIDHelper@common@@SA_NAAUtag_GUID@2@@Z

kernel32

FindFirstFileW
FindClose
FileTimeToLocalFileTime
MultiByteToWideChar
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount64
DisableThreadLibraryCalls
FileTimeToDosDateTime

msvcp110

?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr110

_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
_malloc_crt
_amsg_exit
__CppXcptFilter
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
memchr
free
malloc
realloc
??_V@YAXPAX@Z
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ

Exports

Exports

ConfigExtentProperty
DCFCreateEncryptionFileHandle
DCFDecryptKeyValue
DCFEncryptKeyValue
DCFFreeEncryptionFileHandle
DCFGetEncryptionVersion
DCFInitDecryption
DCFInitEncryption
DCFVerifyDigitalCertificate
GetEncryptionLastError
RSADecryptEx
RSAEncryptEx

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4bbb3a2a6f60e4bee3a8e8b0e04991b1

Headers

DLL Characteristics

File Characteristics

Imports

crypto

commondatasetbase

kernel32

msvcp110

msvcr110

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 368B

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 368B

.reloc
Size: 6KB - Virtual size: 6KB