ff0ff2a0b6f2cf60e1767de38162eb0df504f008ee1e5a00792adbcc7f97b95f

Sharing

Copy URL Twitter E-mail

General

Target

ff0ff2a0b6f2cf60e1767de38162eb0df504f008ee1e5a00792adbcc7f97b95f
Size

35KB
MD5

fbe495f4af8e0f093ac395763487720f
SHA1

a13d1d9543795f5c821cdac2d645cce999c4d692
SHA256

ff0ff2a0b6f2cf60e1767de38162eb0df504f008ee1e5a00792adbcc7f97b95f
SHA512

79eb54cf329211dbdcd36249453de7e52f1d2394e6fd53a137d5397a834e103794782ecf51c358d2084046fb9a95854d9d8c04d21a25432e6d8b20cd6fafff4d
SSDEEP

768:mmJ/l3niRu815iCq7nugPHjWEFkxOVB6611kVGt:HJ/l3iRt5iRnuk8xC06118Gt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff0ff2a0b6f2cf60e1767de38162eb0df504f008ee1e5a00792adbcc7f97b95f

Files

ff0ff2a0b6f2cf60e1767de38162eb0df504f008ee1e5a00792adbcc7f97b95f
.dll windows:6 windows x86 arch:x86

5c2f233549f5983ba14aa2a5433e08ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\BlitzToolbox\Release\BlitzToolbox.pdb

Imports

wininet

InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA

kernel32

InitializeSListHead
MultiByteToWideChar
GetFileInformationByHandleEx
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetLastError
CloseHandle
AreFileApisANSI
GetFullPathNameW
GetFileAttributesExW
FindFirstFileW
CreateFileW
GetLocaleInfoEx
FormatMessageA
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
WideCharToMultiByte
DisableThreadLibraryCalls
GetSystemTimeAsFileTime

msvcp140

_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
?_Syserror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
__std_exception_copy
memmove
__CxxFrameHandler3
memset
memcpy
memchr
_except_handler4_common
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-stdio-l1-1-0

fopen_s
fclose
fwrite

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_beginthreadex
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_cexit
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
terminate

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-math-l1-1-0

ceil

Exports

Exports

_ClearS2IMap@4
_CreateS2IMap@0
_DestroyS2IMap@4
_DownloadFileThread@8
_FindNextDirectory@12
_S2IMapContains@8
_S2IMapGet@8
_S2IMapSet@12

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c2f233549f5983ba14aa2a5433e08ff

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

kernel32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB