98fb81a1687982b9e5c27d11d2112b04

General

Target

98fb81a1687982b9e5c27d11d2112b04
Size

27KB
MD5

98fb81a1687982b9e5c27d11d2112b04
SHA1

9a165e63b3ebe5a4d54d62f3eba37f02a9e8057a
SHA256

d739e8f759005f3d5b1108f533b2bb6e1c80a5ed0cb6e81fc6a7fc2e0c983377
SHA512

4148498992c02d46370bf50de127417b8783a2c76bdd173a5a35bd4fb29d71d01d7cec3ab6867662fdafce8e72909051da369b5797412ddbfef3fe1a39a33668
SSDEEP

768:9WYbOW+mVYdEH8+sjNMa7iq+cGPon70zr9Y0Y0:oYbOW+mVYdtMaJ/GwnIzr9XY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98fb81a1687982b9e5c27d11d2112b04

Files

98fb81a1687982b9e5c27d11d2112b04
.dll windows:5 windows x86 arch:x86

aec4afc4132c9462b1c6e53f27fb6172

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Process32First
GetProcAddress
Process32Next
VirtualProtect
CreateToolhelp32Snapshot
CloseHandle
Sleep
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

user32

CharUpperA

msvcr120

_unlock
_calloc_crt
__dllonexit
_onexit
_snprintf
__crtUnhandledException
__crtTerminateProcess
??1type_info@@UAE@XZ
_lock
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
rand
_hypot
??3@YAXPAX@Z
_purecall
isalnum
__CppXcptFilter
_beginthread
memmove
??2@YAPAXI@Z
realloc
malloc
free
__CxxFrameHandler3
memcpy
_crt_debugger_hook
_CxxThrowException
memset

msvcp120

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??0id@locale@std@@QAE@I@Z

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aec4afc4132c9462b1c6e53f27fb6172

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcr120

msvcp120

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB