8d844342a92f5a592593042bc57e2d50

General

Target

8d844342a92f5a592593042bc57e2d50
Size

51KB
MD5

8d844342a92f5a592593042bc57e2d50
SHA1

89f5d9c714bfd0d48e99c5eeb21cc009c186d41a
SHA256

70b00293167fdf461b47de6010632931cf9d9d984d2bc303c1f4c7d3521523aa
SHA512

d6a69c60cb84ecb5c409b6c6919e7c1b39c7fa53e1a959e0296a27de72526616906780ace27324e3c62b9b60a8cc949ea7c0e34544d5be2707de096dde0dcb9f
SSDEEP

1536:2MAhBbfhZ1GDBcK+NkWrmgMNRwOzCji4f:vAhBbT1GFcKWkdpRDzX4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d844342a92f5a592593042bc57e2d50

Files

8d844342a92f5a592593042bc57e2d50
.dll windows:5 windows x86 arch:x86

b8b6e2f9c2b69df9bda1f1af6dd9a188

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
InterlockedDecrement
GlobalDeleteAtom
CreateThread
GlobalUnlock
GetCurrentDirectoryA
VerLanguageNameA
FindFirstFileA
WriteFile
VirtualAlloc
GetProcessHeap
GetCurrentProcessId
HeapLock
LoadLibraryA
GetStdHandle
VirtualFree
CreateEventA
PulseEvent
FlushInstructionCache
FileTimeToSystemTime
CloseHandle

ntdll

NtSetTimer
NtCreateTimer
ZwCreateEvent
ZwClose

Exports

Exports

InternalGetTcpTable
SetIpTTL
GetIpAddrTable
SetIpForwardEntry
Icmp6CreateFile
CreateProcessNotify
DllClientCleanup
atinst
IpRenewAddress
DllClientStartup
NotifyAddrChange
GetOwnerModuleFromUdpEntry
GetOwnerModuleFromTcp6Entry
IcmpParseReplies
GetNetworkParams
GetIcmpStatistics
NhGetInterfaceNameFromGuid
GetAdaptersAddresses
GetNumberOfInterfaces
GetInterfaceInfo
InternalSetIpStats
register_icmp
InternalGetUdpTable
UnenableRouter
GetAdapterIndex
NTPTimeToNTFileTime
SetIpNetEntry
InternalGetIpForwardTable
GetIfTable
GetIpNetTable
InternalSetIpNetEntry

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8b6e2f9c2b69df9bda1f1af6dd9a188

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.data Size: 11KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 37KB - Virtual size: 37KB

.data
Size: 11KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB