8a9d353257f9ca73927d2866ef60681b

Sharing

Copy URL Twitter E-mail

General

Target

8a9d353257f9ca73927d2866ef60681b
Size

74KB
MD5

8a9d353257f9ca73927d2866ef60681b
SHA1

219f1661e95955d724259eb76c7522f328764439
SHA256

dca32086c8c860b7388cf74d588e7679c19f131025df0ee171d8956fc5f1fe2f
SHA512

45005e58e9fb1d51eda45128dc7cdc13cbacf63773a0a00cb01bac1722ae59807ba8778f56f026958a241ba660e6e9c3fe622da351f14ab55bcc0a2fb39a909b
SSDEEP

1536:iB4VjU41dLVwvOhNWdjPQAKrc8KsWjcdkjXy:i2dL6ybVkji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a9d353257f9ca73927d2866ef60681b

Files

8a9d353257f9ca73927d2866ef60681b
.dll windows:5 windows x86 arch:x86

5b5386ff1ab8376ebc7395dca6854368

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetFileSize
lstrcatA
GetProcAddress
GetModuleHandleW
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WriteFile
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
GetStringTypeW
OutputDebugStringW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW

Exports

Exports

AcroWinMain
aabbcccdefgghhijjbbcddefffgghiiijjkpqrsstttuvwwxx
bcccd
cddefffg
eeffghiiijjk
iijjkkllmnnnoopqr
iijjkllmmnnopppqrr
iijkkklmmnoooppqrrr
noopqrrrsstuuuvwwxyyyaabcddde
opppqrrstttuuvwwwxyyabbbcddef
rrsstuuuvwwxxxyabbcccdeefggghiijjj
ssuvwwwxyyabbbcdeeefgghiiijjkllmmmnoo
stttuuvwxxxyyabbcccdefffgghiijjkklmmn
ttuuvwxxxyyabbbcddefffghhiiijkklmmmnoo
uvvwxxxyaabbbcdeefffghhiiijkllmmmnoopqqqs
vvvvwxyyyaabccddeefgghhhijkkkllmnoooppqrr
vvwxxyaaabccdwxyyabbbcddeeffghhiiijkllmmmnop
vwwxxxyaabbccdeefffghiijjjkllmmmnoopqqqrsst
wwxxyyaabccdddeffghhhijjkkklmnnooopqqrsssttu
xxxyabbcccdeeffgghiijjjklmmnnnoppqqqrsttuuuvwx
xxxyyabbcccdeefffghiijjjkllmnnnoopqqqrsstuuu
yyaabbcddeeffghhhijjklllmnnooopqqrsssttuvwwwxxya

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b5386ff1ab8376ebc7395dca6854368

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 5KB - Virtual size: 4KB