ce7b487df0be69370b60c64beedd497a9887ebbc3f70fd6a1914a6c35d6dc3cb

Sharing

Copy URL

Twitter E-mail

General

Target

ce7b487df0be69370b60c64beedd497a9887ebbc3f70fd6a1914a6c35d6dc3cb
Size

275KB
MD5

022ae807682935aa03ae068f5ec61d32
SHA1

6eec8b7385ede647cc7aae32e2204e5bbaf6ecb0
SHA256

ce7b487df0be69370b60c64beedd497a9887ebbc3f70fd6a1914a6c35d6dc3cb
SHA512

533692b44db43b4ae11f58442650f3ba21d0d2cf76eb8c7f047ed720b465d0f24aa0c0b8b19d586fedd7ab2a404fed7b77c5776e38972960a7aa11b1aa41c748
SSDEEP

6144:9Qqw5I/C4DfpFDCbLpsxXpJROcMH4FgkmF/BhyfoRHcsvEuFTJC4SiOzC:9QqwS/C4Y8McMH4FgtzJHcsvEuFTJtOG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce7b487df0be69370b60c64beedd497a9887ebbc3f70fd6a1914a6c35d6dc3cb

Files

ce7b487df0be69370b60c64beedd497a9887ebbc3f70fd6a1914a6c35d6dc3cb
.dll windows:6 windows x86 arch:x86

afe3fe059e52103271b97b5489d53ea3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetQueryOptionW
InternetReadFile
InternetSetOptionW
HttpSendRequestA
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpOpenRequestW

kernel32

GetTimeZoneInformation
WriteConsoleW
SetEndOfFile
HeapSize
GetStringTypeW
FlushFileBuffers
CreateFileW
MultiByteToWideChar
GetLocalTime
WideCharToMultiByte
GetLastError
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
DecodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
HeapFree
CloseHandle
WriteFile
GetConsoleCP
GetFileSizeEx
CompareStringW
LCMapStringW
HeapAlloc
HeapReAlloc
SetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW

user32

wsprintfW

Exports

Exports

DSNLU_DSpotterNLUAddSample
DSNLU_DSpotterNLUEngineVersion
DSNLU_DSpotterNLUGetCmdNum
DSNLU_DSpotterNLUGetNLPNBestNum
DSNLU_DSpotterNLUGetNLPResult
DSNLU_DSpotterNLUGetVRNBestNum
DSNLU_DSpotterNLUGetVRResult
DSNLU_DSpotterNLUInit
DSNLU_DSpotterNLUIsSentenceEnd
DSNLU_DSpotterNLUIsSentenceStart
DSNLU_DSpotterNLURelease
DSNLU_DSpotterNLUUttrEnd
DSNLU_DSpotterNLUUttrStart
DSNLU_Login

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afe3fe059e52103271b97b5489d53ea3

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

Exports

Exports

Sections

.text Size: 212KB - Virtual size: 211KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 2KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 212KB - Virtual size: 211KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 2KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB