9a4e7104587807aa2af135fa33570f51

Sharing

Copy URL Twitter E-mail

General

Target

9a4e7104587807aa2af135fa33570f51
Size

244KB
MD5

9a4e7104587807aa2af135fa33570f51
SHA1

e7a77ea5133ecd0afece06c144d6938dd549cf4a
SHA256

d3d5257f70debe6ad37aff161edf8dd3274afe021318141058c1cc199c83bfaa
SHA512

27ea4b90c68162e869bf8ad0b6c05d884ddd6f0d21dac28140e59743066961632c0e2085b1fb63edffa65cc1e1b6a0ea97618b0af4e4d8aa8f785a19f55b04f8
SSDEEP

6144:7hLAfyk/4wHYNKjJRNYqLznN/uc9Vj47kQubVcwZh4hCm:7y/B8sznskumb+w+h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a4e7104587807aa2af135fa33570f51

Files

9a4e7104587807aa2af135fa33570f51
.dll windows:4 windows x86 arch:x86

17a69ee85fc54be0bfbd8331611e21a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegDeleteKeyA

oleaut32

VarDecNeg
VarDateFromDec
VariantCopyInd
SysStringLen
SafeArrayGetElemsize
VarCyFromDec

kernel32

EnumDateFormatsExA
EnumDateFormatsExW
ExitProcess
ExpandEnvironmentStringsW
FindFirstVolumeMountPointW
GetBinaryTypeA
GetCommConfig
GetCommandLineA
GetDateFormatA
GetFileSizeEx
GetModuleHandleA
GetTapeParameters
GetVersionExA
CreateJobObjectW
HeapAlloc
HeapCreate
InitializeCriticalSection
IsBadReadPtr
IsBadWritePtr
LocalReAlloc
Module32FirstW
ReadFileEx
ReplaceFileW
SetFileAttributesW
UnmapViewOfFile
VirtualProtectEx
lstrcatW
lstrlenA
CompareFileTime
AddConsoleAliasW
GlobalLock

ole32

CoGetClassVersion
CoRegisterMallocSpy
StgCreateDocfile
OleCreateLinkToFile
CoTaskMemRealloc
CLSIDFromProgIDEx

imm32

ImmUnregisterWordA
ImmReleaseContext
ImmReSizeIMCC
ImmIsIME
ImmGetCompositionFontW
ImmGetVirtualKey
ImmEnumInputContext

comctl32

PropertySheetA

ntdll

wcscpy
wcscspn
RtlInitString
RtlDestroyEnvironment

Exports

Exports

AudioGetFormatInfo
D3D10MapResources
D3D9ResourceGetSurfaceDimensions
D3D9UnmapResources
EnumShootingModeNext
Free
GLUnmapBufferObjectAsync
GetAtCaptureThumbnail
GetDllsVersion
GetObjectInfo
GetSupportParamValueHead
Memset
ReplaceStreamOfRAW
SetDoubleForDevice
UnregisterFatBinary

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17a69ee85fc54be0bfbd8331611e21a9

Headers

File Characteristics

Imports

advapi32

oleaut32

kernel32

ole32

imm32

comctl32

ntdll

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 72KB - Virtual size: 116KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 72KB - Virtual size: 116KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB