8e1b4822315e569c10b9d3e55a1dfe87

Sharing

Copy URL Twitter E-mail

General

Target

8e1b4822315e569c10b9d3e55a1dfe87
Size

2.4MB
MD5

8e1b4822315e569c10b9d3e55a1dfe87
SHA1

79ad284d86330130b7b8f1d8420e09c2b663e141
SHA256

7ae7d7917277cc3ebbddabea8398b8d2ecdc29624200ce5a3e413c7fe0046b92
SHA512

66ff73ea9acbb13feca9a8894befc18e652ddc5f84a143511746150bb921bb723815a2f2510e2ef723361675a1f3aa7f479a0357ace1d09b0a6bd6e339d0d52f
SSDEEP

49152:/93H2GV2Lweu3KQ4oqgUiHkcLzwvO6ZHGOxn7LyCw6nb7zeP0lWsvVNIF0ZUobio:/97Vv3KjtgUiHlzwvO63xn7Lyn6vlt/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1b4822315e569c10b9d3e55a1dfe87

Files

8e1b4822315e569c10b9d3e55a1dfe87
.dll windows:6 windows x86 arch:x86

f53749de97847dd892a6a57cbd139d7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeEndPeriod
timeBeginPeriod

comdlg32

GetFileTitleA
GetFileTitleW

ole32

CoCreateGuid
StgOpenStorage
CreateStreamOnHGlobal
GetHGlobalFromStream
StgIsStorageFile

version

VerFindFileA

ws2_32

WSAStartup

comctl32

FlatSB_SetScrollRange
FlatSB_GetScrollRange
InitializeFlatSB
FlatSB_ShowScrollBar
UninitializeFlatSB

gdi32

EndPage

kernel32

DuplicateHandle
LoadLibraryExW
TlsGetValue
lstrcmpiA
SetErrorMode
OutputDebugStringW
GlobalAlloc
GetLocaleInfoW
LeaveCriticalSection
RtlUnwind
GlobalFree
IsDebuggerPresent
EnterCriticalSection
GetFileAttributesA
GetCurrentProcess
GetACP
GetModuleFileNameW
WideCharToMultiByte

oleaut32

VarAdd

advapi32

CloseServiceHandle

user32

ReleaseDC
WindowFromPoint
GetDC

Exports

Exports

Siren7_CloseEncoder
acl_get_tcp_solinger
decode_vector
huffman_vector
next_bit
quantize_mlt
set_bitstream
siren_dct4

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdbid
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f53749de97847dd892a6a57cbd139d7e

Headers

DLL Characteristics

File Characteristics

Imports

winmm

comdlg32

ole32

version

ws2_32

comctl32

gdi32

kernel32

oleaut32

advapi32

user32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 108KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2.2MB - Virtual size: 2.3MB

.sdbid Size: 6KB - Virtual size: 6KB

.didat Size: 512B - Virtual size: 512B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 108KB - Virtual size: 108KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2.2MB - Virtual size: 2.3MB

.sdbid
Size: 6KB - Virtual size: 6KB

.didat
Size: 512B - Virtual size: 512B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB