87729eb5e727f7aadcb015b40ea71122

Sharing

Copy URL

Twitter E-mail

General

Target

87729eb5e727f7aadcb015b40ea71122
Size

18KB
MD5

87729eb5e727f7aadcb015b40ea71122
SHA1

1da7b5c84bcf3a1368276feac8d750d504381ed2
SHA256

9d91ecca4318e8850433d026b8303333dbb1c7f4646ca3082ff42989a6cf591a
SHA512

b15b16a99b18268247e3cf9d62e3b8b26cd232f630f413777e5895238ecd143af5d1565c7cda745653e2b7cbceb3fcca2e483070a1656edc9329760d3fb663bc
SSDEEP

192:ryOakiU8zRPTTp0IMgi48QU1gn4esQtX3b3qOqKsKqKBJdJpZW3X3b3qOqK8uqKC:rAjNUzHQnRfvqlzVwsmhoZGg1XPuEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87729eb5e727f7aadcb015b40ea71122

Files

87729eb5e727f7aadcb015b40ea71122
.dll windows:5 windows x86 arch:x86

9f855595c88fe111f9e4aed7144cc645

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Users\EUCLIDES\Desktop\gm\Release\L0OocKir.pdb

Imports

kernel32

Sleep
DisableThreadLibraryCalls
GetModuleHandleA
CreateThread
VirtualProtect
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
SetUnhandledExceptionFilter

user32

GetAsyncKeyState
SetRect
GetCursorPos

d3dx9_43

D3DXCreateFontA

msvcr90

_encoded_null
free
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_malloc_crt
_encode_pointer
vsprintf_s
malloc
memset
_decode_pointer
memcpy

Sections

_TEXT
Size: 512B - Virtual size: 431B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f855595c88fe111f9e4aed7144cc645

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

d3dx9_43

msvcr90

Sections

_TEXT Size: 512B - Virtual size: 431B

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 1KB - Virtual size: 1KB

_TEXT
Size: 512B - Virtual size: 431B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 1KB - Virtual size: 1KB