b638540d1ae5650100ed8f6f8c6312fe

General

Target

b638540d1ae5650100ed8f6f8c6312fe
Size

100KB
MD5

b638540d1ae5650100ed8f6f8c6312fe
SHA1

bf3e624104483d37a14410a06aa45d109dc944c5
SHA256

dab4af84a18debe39f31ac4c8a1fa3c60bd3e58949a8da0f6dd18569ca061b87
SHA512

e2c2d84dc3fbdbab117337cbbdc1cc36581b7aecdfb26d4852131c088876880b31f41e0e886ce89c36a51d17c5540f11bd87b0c1ab8881d9d1b122d1cd53509d
SSDEEP

1536:txS0jwwkS0V6iMamgECUPjrQkNzh8GQnJi+R12fJTqammN:jNMw30giNtUwYzOGQJR12A7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b638540d1ae5650100ed8f6f8c6312fe

Files

b638540d1ae5650100ed8f6f8c6312fe
.dll windows:4 windows x86 arch:x86

59b247baa7d75badd97e4983449e66d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

fewiludvsj.pdb

Imports

kernel32

GetVersionExA
GetStringTypeW
SetHandleCount
lstrcmpiA
GetCPInfo
UnmapViewOfFile
lstrlenA
SetFilePointer
TerminateProcess
MoveFileW
lstrlenW
GetEnvironmentStringsW
TlsAlloc
CreateThread
GetTickCount
GetSystemTimeAsFileTime
WideCharToMultiByte
HeapReAlloc
LCMapStringA
ReleaseMutex
CloseHandle
DeleteFileA
DeleteFileW
LCMapStringW
InterlockedDecrement
GetLastError
GetCurrentThreadId
MoveFileA
QueryPerformanceCounter
SetEndOfFile
TlsGetValue
FreeLibrary
WaitForSingleObject
LocalAlloc
GetEnvironmentVariableA
CreateEventA
DisableThreadLibraryCalls
GetSystemInfo
FreeEnvironmentStringsW
GetFileSize
LocalFree
GetEnvironmentStrings
GetFullPathNameA
EnterCriticalSection
GetLocaleInfoA
CompareFileTime
OpenFileMappingW
GetStringTypeA
Sleep
CreateMutexW
HeapDestroy
VirtualAlloc
CreateFileA
HeapCreate
OpenFileMappingA
VirtualQuery
HeapFree
InterlockedExchange
SetFileTime
TlsFree
InterlockedIncrement
LeaveCriticalSection
FlushViewOfFile
lstrcmpA
VirtualFree
VirtualProtect
DeleteCriticalSection
GetCurrentProcessId
WriteFile
GetFileType
CreateMutexA
FreeEnvironmentStringsA
GetDiskFreeSpaceW
GetCurrentProcess
GetDiskFreeSpaceA
InitializeCriticalSection
MapViewOfFile
GetFullPathNameW
GetStringTypeExA
CreateFileW
SetEvent
InitializeCriticalSectionAndSpinCount

Exports

Exports

uaheu

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59b247baa7d75badd97e4983449e66d8

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 536B

.text
Size: 56KB - Virtual size: 53KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 536B