8d777861c46ec897129bcf6c0dcc4c6626a42dd4ff401aab2078c164ee99186d

Sharing

Copy URL Twitter E-mail

General

Target

8d777861c46ec897129bcf6c0dcc4c6626a42dd4ff401aab2078c164ee99186d
Size

1.0MB
MD5

ba05a3f399d5baa725d5c5f0debf3257
SHA1

0b69f836fa5c9267fbfb2ef18a7b15b0d52946f8
SHA256

8d777861c46ec897129bcf6c0dcc4c6626a42dd4ff401aab2078c164ee99186d
SHA512

915cbb31a62921c4a5bfab8cdd862e95d9853fa0aa7e4f3c99b9195533dd533d5302e0a095ce107981e196e633337c19788b06dc47f992d140fbd8ec3005dfb8
SSDEEP

384:YIkBBOD6U1ZAwJC3V8WwTlIbq/zx4R3e2Lvq/B:YDBOD3awJSCMbuc3zLoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d777861c46ec897129bcf6c0dcc4c6626a42dd4ff401aab2078c164ee99186d

Files

8d777861c46ec897129bcf6c0dcc4c6626a42dd4ff401aab2078c164ee99186d
.dll windows:6 windows x86 arch:x86

cc6aee112b6f85383b8e72ed6074a70b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\UserData\Feidesktop\ARTFAPI\Output\AtrfCommon.pdb

Imports

kernel32

FormatMessageA
WideCharToMultiByte
GetLastError
LocalFree
GetModuleFileNameW
CreateDirectoryA
GetModuleHandleExA
QueryPerformanceCounter
WaitForSingleObject
GetPrivateProfileIntA
GetModuleFileNameA
CreateMutexA
QueryPerformanceFrequency
ReleaseMutex
IsProcessorFeaturePresent
DisableThreadLibraryCalls
EncodePointer
DecodePointer
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent

user32

wsprintfA

msvcr120

ftell
fseek
fclose
sprintf
strrchr
fputs
strftime
_localtime64
_time64
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_except_handler4_common
fopen
_access
malloc
free
strncpy
memset
vsprintf
_except1

ws2_32

inet_addr
WSAStartup
connect
getpeername
WSAGetLastError
setsockopt
WSACleanup
recv
socket
closesocket
send
htons
getsockname
ntohs

Exports

Exports

AtrfCommon_Version_Get
Atrf_Error_Clear
Atrf_Error_ErrCode_Get
Atrf_Error_ErrCode_Set
Atrf_Error_ErrFileLength_Get
Atrf_Error_ErrFile_Get
Atrf_Error_ErrFuncLength_Get
Atrf_Error_ErrFunc_Get
Atrf_Error_ErrLine_Get
Atrf_Error_ErrMsgLength_Get
Atrf_Error_ErrMsg_Get
Atrf_Error_ErrMsg_Set
Atrf_Error_GetSystemErrMsg
Atrf_Error_Init
Atrf_Error_Instance_Get
Atrf_Error_Release
Atrf_Error_Set
Atrf_Error_SystemErr_Get
Atrf_IO_CreateDirectory
Atrf_IO_ExecuteDir_Get
Atrf_IO_File_IsExists
Atrf_IO_File_Size_Get
Atrf_Scpi_Init
Atrf_Scpi_Init_Datalink
Atrf_Scpi_IsSocketName
Atrf_Scpi_RcvTimeout_Set
Atrf_Scpi_Release
Atrf_Scpi_SndTimeout_Set
Atrf_Scpi_Transmit
log_get_level
log_init
log_set_level
log_set_logpath
log_write

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc6aee112b6f85383b8e72ed6074a70b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcr120

ws2_32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1.0MB - Virtual size: 2.0MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1.0MB - Virtual size: 2.0MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB