5e4a2a6e2292d69f19116bc720557d5502788909ff662bf526de0df23f4626ad

Sharing

Copy URL Twitter E-mail

General

Target

5e4a2a6e2292d69f19116bc720557d5502788909ff662bf526de0df23f4626ad
Size

270KB
MD5

1b5df59d0e65e972b16fcbc25e47a03e
SHA1

56d53e1a8f45afd2d21c50fdee06093b15176f7f
SHA256

5e4a2a6e2292d69f19116bc720557d5502788909ff662bf526de0df23f4626ad
SHA512

c2c8c7640f8bf8ae1306d9b777d928724b807e7236ae1a177a06ac84bb00ea1f4712e4709d1188547dd766663271b1a8ebb1edaf33c8905d46de44899dcc3874
SSDEEP

6144:NSP6lYsnVMRDNCXiU3P4DvX8epDVao0ZdkmhROrXmYWyzzUu1jK4SPdDS:NSP6lpKO6tDVao0ZdyK1yzzUu1j0dDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e4a2a6e2292d69f19116bc720557d5502788909ff662bf526de0df23f4626ad

Files

5e4a2a6e2292d69f19116bc720557d5502788909ff662bf526de0df23f4626ad
.dll windows:6 windows x86 arch:x86

afe3fe059e52103271b97b5489d53ea3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetQueryOptionW
InternetReadFile
InternetSetOptionW
HttpSendRequestA
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpOpenRequestW

kernel32

GetTimeZoneInformation
WriteConsoleW
SetEndOfFile
HeapSize
GetStringTypeW
FlushFileBuffers
CreateFileW
MultiByteToWideChar
GetLocalTime
WideCharToMultiByte
GetLastError
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
DecodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
HeapFree
CloseHandle
WriteFile
GetConsoleCP
GetFileSizeEx
CompareStringW
LCMapStringW
HeapAlloc
HeapReAlloc
SetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW

user32

wsprintfW

Exports

Exports

DSNLU_DSpotterNLUAddSample
DSNLU_DSpotterNLUEngineVersion
DSNLU_DSpotterNLUGetCmdNum
DSNLU_DSpotterNLUGetNLPNBestNum
DSNLU_DSpotterNLUGetNLPResult
DSNLU_DSpotterNLUGetVRNBestNum
DSNLU_DSpotterNLUGetVRResult
DSNLU_DSpotterNLUInit
DSNLU_DSpotterNLUIsSentenceEnd
DSNLU_DSpotterNLUIsSentenceStart
DSNLU_DSpotterNLURelease
DSNLU_DSpotterNLUUttrEnd
DSNLU_DSpotterNLUUttrStart
DSNLU_Login

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afe3fe059e52103271b97b5489d53ea3

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

Exports

Exports

Sections

.text Size: 206KB - Virtual size: 206KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 2KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 206KB - Virtual size: 206KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 2KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB