7c17c4b128b59830a5d8257a7f38d3b1

Sharing

Copy URL

Twitter E-mail

General

Target

7c17c4b128b59830a5d8257a7f38d3b1
Size

372KB
MD5

7c17c4b128b59830a5d8257a7f38d3b1
SHA1

c01ec4343973bfa8bb581b871a44b3c29bb576ce
SHA256

729cccb757d5db8cf77592b4447f81711678f216ae191424416699a6ce06c8c4
SHA512

9c5f5c7a958ea22f31a211d4d71ad3785e51bf986bdf8902ec473cace63271b69a6bb2c8b656a7645d90fa06f81df5bcae596f442d693b02fe31c78e9cddb659
SSDEEP

6144:xzkrkyF4kNn5qcD3k/0zbiPdYKdqDoOHAACHgGJT1wySZdMwgkFHQF9oJqblxATA:xzkgyFZNn5qcDU/0zbw26omwyuQbl2TA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c17c4b128b59830a5d8257a7f38d3b1

Files

7c17c4b128b59830a5d8257a7f38d3b1
.dll windows:4 windows x86 arch:x86

0e24b2edf1dc0aa7ac3282db7c83ef5f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

xpcom

NS_GetComponentManager
NS_GetServiceManager
NS_CStringGetMutableData
NS_StringGetMutableData
NS_Alloc
NS_NewLocalFile
NS_StringSetDataRange
NS_StringSetData
NS_NewNativeLocalFile
NS_Free
NS_Realloc
NS_CStringCloneData
NS_CStringSetDataRange
NS_CStringSetData
NS_CStringCopy
NS_CStringGetData
NS_StringCopy
NS_StringGetData
NS_UTF16ToCString
NS_CStringToUTF16
NS_StringContainerInit2
NS_StringContainerFinish
NS_StringContainerInit
NS_StringCloneData
NS_CStringContainerInit2
NS_CStringContainerFinish
NS_CStringContainerInit

nspr4

PR_Free
PR_Read
PR_Close
PR_ImplodeTime
PR_Malloc
PR_sscanf
PR_Now
PR_snprintf
PR_DestroyLock
PR_GetError
PR_Lock
PR_Unlock
PR_NewLock
PR_SetError
PR_Calloc
PR_AtomicDecrement
PR_AtomicIncrement

plc4

PL_strcmp
PL_strlen
PL_strcasecmp
PL_Base64Encode
PL_strncpy
PL_strcpy
PL_strdup

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
GetTickCount
IsDebuggerPresent
GetWindowsDirectoryA
CloseHandle
GetModuleFileNameW
GetShortPathNameW
CreateProcessW
SetErrorMode
LoadLibraryA
GetProcAddress
LocalFree
FreeLibrary
GetEnvironmentVariableW
ExpandEnvironmentStringsW
InterlockedDecrement
FileTimeToSystemTime
SetUnhandledExceptionFilter

user32

ReleaseDC
GetDC
GetSysColor
SetSysColors
wsprintfA
SystemParametersInfoW

gdi32

EnumFontFamiliesExW

advapi32

RegOpenKeyExA
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegEnumValueA
RegCloseKey
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString

mozcrt19

ftell
_crt_debugger_hook
_errno
_stat64i32
memset
strlen
fseek
strncmp
fopen
fwrite
fflush
fread
memcmp
_snprintf
memmove
realloc
_wfopen
_encode_pointer
wcscat
memcpy
wcstol
wcsncpy
swscanf
sscanf
strcpy
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_unlock
__dllonexit
_lock
_onexit
__clean_type_info_names_internal
strcmp
_except_handler4_common
fclose
wcslen
wcscpy
_mktime64
wcschr
printf
free
malloc
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
??_V@YAXPAX@Z

Exports

Exports

NSGetModule

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0e24b2edf1dc0aa7ac3282db7c83ef5f

Headers

DLL Characteristics

File Characteristics

Imports

xpcom

nspr4

plc4

kernel32

user32

gdi32

advapi32

ole32

oleaut32

mozcrt19

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 904B

.reloc Size: 12KB - Virtual size: 8KB

.text Size: 208KB - Virtual size: 208KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 904B

.reloc
Size: 12KB - Virtual size: 8KB

.text
Size: 208KB - Virtual size: 208KB