18873f23650676de909c41d07a59732f8f63dac63e6dbc68e5279c07ded94c06

Sharing

Copy URL Twitter E-mail

General

Target

18873f23650676de909c41d07a59732f8f63dac63e6dbc68e5279c07ded94c06
Size

262KB
MD5

be80c82b7c053bc058264e3caf214c74
SHA1

515adfb1b4e73f7387f038a85c2f26c422b2f5e2
SHA256

18873f23650676de909c41d07a59732f8f63dac63e6dbc68e5279c07ded94c06
SHA512

a8bdc8ac8637da4284e1385dcf223ba5a2b709100d7515f6668155150128e227387b5b6d1cae75c6a6ba696280dfc9a8e82f93a6eefa0b74ffbcabb3f58cb123
SSDEEP

6144:bhFycrcqsY7Y3DbD8q4E6HYLjBEBYQUIevj+pI:lFDrcLKOv8q4EdLjBEBEIY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18873f23650676de909c41d07a59732f8f63dac63e6dbc68e5279c07ded94c06

Files

18873f23650676de909c41d07a59732f8f63dac63e6dbc68e5279c07ded94c06
.dll windows:5 windows x86 arch:x86

41a644a301dffc3525c1ef55d2bd0e51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SourceCode\Common\ImageLib\Format\Release\JPEG.pdb

Imports

kernel32

DeleteFileA
DeleteFileW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead

msvcp140

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_function_call@std@@YAXXZ
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

vcruntime140

_CxxThrowException
_purecall
__std_terminate
memcpy
_setjmp3
__std_exception_destroy
__CxxFrameHandler3
longjmp
_except_handler4_common
__std_type_info_destroy_list
memmove
memset
__std_exception_copy

api-ms-win-crt-math-l1-1-0

_dtest
_dsign
_except1

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-stdio-l1-1-0

fread
__stdio_common_vsscanf
fflush
__stdio_common_vsprintf
fopen
fwrite
__stdio_common_vfprintf
_wfopen
fclose
__acrt_iob_func
ferror

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_errno
exit
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-convert-l1-1-0

strtoull
strtoll
strtod

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

ILF_DeleteImage
ILF_DeleteImageW
ILF_GetCapability
ILF_GetCapabilityW
ILF_GetFileInfo
ILF_GetFileInfoW
ILF_GetImageInfo
ILF_GetImageInfoW
ILF_ReadImage
ILF_ReadImageEx
ILF_ReadImageW
ILF_SaveImage
ILF_SaveImageW
ILF_TransferJpeg

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

41a644a301dffc3525c1ef55d2bd0e51

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 215KB - Virtual size: 215KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 5KB

.gfids Size: 512B - Virtual size: 64B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 215KB - Virtual size: 215KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 64B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 7KB