9ab0598f2f61a6f771a002dead082fca

Sharing

Copy URL Twitter E-mail

General

Target

9ab0598f2f61a6f771a002dead082fca
Size

316KB
MD5

9ab0598f2f61a6f771a002dead082fca
SHA1

1ae042d825bc45ef22364c7cd46c9d8be3d73f0e
SHA256

b05ac1395e9974467f94444cca9bcd06c278ab6dd7a828cae837f9206ef2f5c0
SHA512

2acf51134962d31ecf32156bac4d89ac988b13467ad7204ed67a15860d75be17010cca6c3a0ea1d3b65927de7cfd104a47d3e384cef3a8e86e4c9a93f5f9e545
SSDEEP

3072:xYWtgWUyOaqICQq5YggDKVUUkeV3t4mO5zxCY1JHTf98sXg7ZYKTlR5mCdtB9Cw3:xo4lpjhwV3t4meNHIi6Tj5TR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ab0598f2f61a6f771a002dead082fca

Files

9ab0598f2f61a6f771a002dead082fca
.dll windows:4 windows x86 arch:x86

48ef3d670f822e8009072d859de82a14

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
WriteFile
CloseHandle
GetModuleFileNameW
CreateDirectoryW
MoveFileW
FindFirstFileW
FindClose
GetProcAddress
LoadLibraryW
GetLastError
MultiByteToWideChar
lstrcpynW
ReadFile
GetCurrentDirectoryW
SetFilePointer
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesW
WideCharToMultiByte
SetFileTime
DebugBreak
CreateFileA
SetEndOfFile
Sleep
GetSystemTime
WaitForSingleObject
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
ExitProcess
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
DeleteCriticalSection
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
FreeLibrary
LoadLibraryA
InitializeCriticalSection
SetStdHandle
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEnvironmentVariableW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualQuery

user32

MessageBoxW
GetDesktopWindow
GetWindow

advapi32

RegSetValueExW
RegQueryValueExW
RegDeleteValueW

Sections

.text
Size: 268KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48ef3d670f822e8009072d859de82a14

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 268KB - Virtual size: 265KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 268KB - Virtual size: 265KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 12KB - Virtual size: 11KB