114faf7bbd4a8781b7654d366222ae12a9fe9183b71aeca0fb211737ab5f00bd

Sharing

Copy URL Twitter E-mail

General

Target

114faf7bbd4a8781b7654d366222ae12a9fe9183b71aeca0fb211737ab5f00bd
Size

273KB
MD5

e28264c464dbc8ceed325b7f6d1e961d
SHA1

4b67676ad6122bb9b6b0567104ea87b3d2382735
SHA256

114faf7bbd4a8781b7654d366222ae12a9fe9183b71aeca0fb211737ab5f00bd
SHA512

b40bb703b448bdb6bee36818acd68b3a616f7d3a4d2ccb54087137ac779abf2f01b2cc4fb4179ce6edaf7728c8b9f6ed48e75dc4cc522f8bc7e19478b7f9d501
SSDEEP

6144:J78QXq4cEWDCSnSygQamXLJJ8TkCi4aEkmHbBheU8Rir1GsJEuFTAT4SMDzC:J78QXqxJx6kCi4aEPveY1GsJEuFTAqDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
114faf7bbd4a8781b7654d366222ae12a9fe9183b71aeca0fb211737ab5f00bd

Files

114faf7bbd4a8781b7654d366222ae12a9fe9183b71aeca0fb211737ab5f00bd
.dll windows:6 windows x86 arch:x86

afe3fe059e52103271b97b5489d53ea3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetQueryOptionW
InternetReadFile
InternetSetOptionW
HttpSendRequestA
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpOpenRequestW

kernel32

GetTimeZoneInformation
WriteConsoleW
SetEndOfFile
HeapSize
GetStringTypeW
FlushFileBuffers
CreateFileW
MultiByteToWideChar
GetLocalTime
WideCharToMultiByte
GetLastError
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RaiseException
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
DecodePointer
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
HeapFree
CloseHandle
WriteFile
GetConsoleCP
GetFileSizeEx
CompareStringW
LCMapStringW
HeapAlloc
HeapReAlloc
SetStdHandle
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW

user32

wsprintfW

Exports

Exports

DSNLU_DSpotterNLUAddSample
DSNLU_DSpotterNLUEngineVersion
DSNLU_DSpotterNLUGetCmdNum
DSNLU_DSpotterNLUGetNLPNBestNum
DSNLU_DSpotterNLUGetNLPResult
DSNLU_DSpotterNLUGetVRNBestNum
DSNLU_DSpotterNLUGetVRResult
DSNLU_DSpotterNLUInit
DSNLU_DSpotterNLUIsSentenceEnd
DSNLU_DSpotterNLUIsSentenceStart
DSNLU_DSpotterNLURelease
DSNLU_DSpotterNLUUttrEnd
DSNLU_DSpotterNLUUttrStart
DSNLU_Login

Sections

.text
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

afe3fe059e52103271b97b5489d53ea3

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

Exports

Exports

Sections

.text Size: 210KB - Virtual size: 209KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 2KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 210KB - Virtual size: 209KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 2KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 6KB