7620b0578ea8d539ed86274eff069534

General

Target

7620b0578ea8d539ed86274eff069534
Size

10KB
MD5

7620b0578ea8d539ed86274eff069534
SHA1

912dc0c2e9fce568f114607944719a45e1bcdd71
SHA256

81928dfd4a624418d8ca6a59cd27ee3c06e7e755756c9d4f1674b96c6e633f78
SHA512

2e6b99f45e75b8c9df95d32d2303433a9c0c39d4c5904110f3b81ec4dc8ddf5988e785aebe365e857678d1d9e6e6d9e4c5a672cccdfcf55211c1015dc3df6f35
SSDEEP

192:znmSFkLJuQffW8XZPIwBjOX8B9oVSQhhr7cHu:zntkfesI8j9rHQH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7620b0578ea8d539ed86274eff069534

Files

7620b0578ea8d539ed86274eff069534
.dll windows:6 windows x86 arch:x86

554331261a18e024190d1934adf3df3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
ResumeThread
ExitThread
CloseHandle
GetThreadContext
VirtualAllocEx
CreateProcessA
SetThreadContext
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_cexit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

Exports

Exports

inject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 892B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

554331261a18e024190d1934adf3df3e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 892B

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 356B

.text
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 892B

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 356B