7bb43989ecf473ec38ee5218a9caee56

Sharing

Copy URL Twitter E-mail

General

Target

7bb43989ecf473ec38ee5218a9caee56
Size

249KB
MD5

7bb43989ecf473ec38ee5218a9caee56
SHA1

f741a02a42430b764614533657083ead596e112b
SHA256

52aeb1a1b2018cfa4558b8adcc5f65c1f2dfebad36cc0a7d0dc0e238cd380221
SHA512

e8ab991f6532256c7ecb2d501002720e38ea92c67b5ce6f58d747fb2b007d1d3fa2d15601b3cb388dbfd5d02c88b3e9d376e6c7fef63a8b234cf571d4fc1e18e
SSDEEP

6144:o3/0Sj5ItFhp/Q/uyej7UXIOM38zNgqsrxJ0HnRow:o3/0Sj58fIuyek9/zqqQ0xow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bb43989ecf473ec38ee5218a9caee56

Files

7bb43989ecf473ec38ee5218a9caee56
.dll windows:6 windows x86 arch:x86

2a9e325fadd2449ee3dae23ed6f3a71d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dbghelp

SymGetModuleBase64
SymCleanup
SymGetFileLineOffsets64
SymInitialize

urlmon

CoInternetGetSecurityUrl

msimg32

AlphaBlend

rpcrt4

MesDecodeIncrementalHandleCreate
MesEncodeIncrementalHandleCreate
MesHandleFree

version

VerFindFileA

kernel32

SetStdHandle
FlushFileBuffers
GetProcessHeap
FindFirstFileA
FindNextFileA
FindClose
GetVolumeInformationA
Sleep
SetFilePointerEx
LoadLibraryA
DeleteFileA
GetProcAddress
GetFileSize
FreeLibrary
CreateDirectoryA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
WriteConsoleW
HeapSize
GetLastError
CreateFileW
GetOEMCP
IsValidCodePage
FindFirstFileExA
CloseHandle
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
DecodePointer
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
HeapAlloc
HeapFree
GetStdHandle
GetFileType
HeapReAlloc
GetACP
WriteFile
GetConsoleCP
GetConsoleMode

user32

ReleaseDC
WindowFromPoint
GetDC

gdi32

GetTextCharacterExtra
SetTextCharacterExtra
PolyTextOutA

winspool.drv

EnumJobsW
OpenPrinterW
ClosePrinter
AddPrintProvidorW
DeletePrintProvidorW

advapi32

CredRenameA
OpenEventLogW
NotifyChangeEventLog
CloseEventLog

ole32

CoTaskMemFree

Exports

Exports

ServiceMain
dmi_additional_info
dmi_bios_characteristics
dmi_event_log_descriptors
dmi_event_log_status
dmi_ipmi_register_spacing
dmi_memory_channel_type
dmi_memory_controller_slots
dmi_memory_module_speed
dmi_voltage_probe_value
mycore_string_crop_whitespace_from_begin
overwrite_dmi_address
print_help

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a9e325fadd2449ee3dae23ed6f3a71d

Headers

DLL Characteristics

File Characteristics

Imports

dbghelp

urlmon

msimg32

rpcrt4

version

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

Exports

Exports

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 86KB - Virtual size: 85KB

.data Size: 6KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 86KB - Virtual size: 85KB

.data
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 8KB