9b614decaad63e72ec4fd3bb8ee845f141e9bee2cedc4d2a1415a53f94e5d3f8

Sharing

Copy URL

Twitter E-mail

General

Target

9b614decaad63e72ec4fd3bb8ee845f141e9bee2cedc4d2a1415a53f94e5d3f8
Size

71KB
MD5

f1d902caf562a6d43526c1d105b40ef2
SHA1

715de23dd14344245ec351b388705bef043d8f34
SHA256

9b614decaad63e72ec4fd3bb8ee845f141e9bee2cedc4d2a1415a53f94e5d3f8
SHA512

3e1bb90c48ab486b833fb3285bd4e0e07a518d04ac40480206e2893536bf1a3ee91cae62684bff08f9b08986794e4da7f9e5d4cf4fdb6960aae97de11425ce81
SSDEEP

1536:TyM3oShqE5IpzDaT0SW5PV7DxrvrgtTvRuck7qVIZOVNgS9:T33oShqE5GDaT0SW5PlDxrTgZKgIZ0NP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b614decaad63e72ec4fd3bb8ee845f141e9bee2cedc4d2a1415a53f94e5d3f8

Files

9b614decaad63e72ec4fd3bb8ee845f141e9bee2cedc4d2a1415a53f94e5d3f8
.dll windows:5 windows x86 arch:x86

048508dd576d288bbfcb6499255b0ba9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SourceCode\Common\ImageLib\AVIBarcode\Bin\Win32\Release\AVIBarcode.pdb

Imports

kernel32

GetModuleFileNameW
GetProcAddress
FreeLibrary
LoadLibraryExW
EnterCriticalSection
CloseHandle
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LeaveCriticalSection
InitializeSListHead

msvcp140

?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memmove
wcsstr
_purecall
memcpy
__vcrt_InitializeCriticalSectionEx
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list
__CxxFrameHandler3
__std_terminate
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_crt_atexit
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
terminate
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

wcsncpy_s

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

AVIBARCODEGetInstance

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

048508dd576d288bbfcb6499255b0ba9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 5KB

.gfids Size: 512B - Virtual size: 76B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 76B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB