d810f68813b1fc6f0350edc96df6491eca98dab3640ec6ac1db9008b5e3fef11

Sharing

Copy URL

Twitter E-mail

General

Target

d810f68813b1fc6f0350edc96df6491eca98dab3640ec6ac1db9008b5e3fef11
Size

179KB
MD5

0b4a60256d23a4dfdc8533e1b22f91fa
SHA1

491098b31eff0b9eb28581b63ef3f1ad78d3e561
SHA256

d810f68813b1fc6f0350edc96df6491eca98dab3640ec6ac1db9008b5e3fef11
SHA512

a52134c3a241ad4a1883a539d4462d3f27ce4fc235b3ca6cee59ebf5bce0e7c2e76b55a9003075cc4aec56526a5878d0322f978b0ec2f129a3ae1241256880f3
SSDEEP

3072:Ug7ZE04kfMdgaC9pkEb6SU0fBhJQL0SdxVuLJa8YrjKCdPg:Ug7frf8ckERvQD7VisXd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d810f68813b1fc6f0350edc96df6491eca98dab3640ec6ac1db9008b5e3fef11

Files

d810f68813b1fc6f0350edc96df6491eca98dab3640ec6ac1db9008b5e3fef11
.dll windows:5 windows x86 arch:x86

2c015b6dc959b64b8682410ab33f9972

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
Sleep
WideCharToMultiByte
GetPrivateProfileStringA
GetCurrentDirectoryA
CloseHandle
CreateThread
GetFileAttributesA
CompareStringW
SetEndOfFile
CreateFileW
CreateFileA
SetStdHandle
WriteConsoleW
LoadLibraryW
GetModuleFileNameW
IsValidLocale
EnumSystemLocalesA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentThreadId
GetCommandLineA
LCMapStringW
MultiByteToWideChar
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
GetUserDefaultLCID
GetLocaleInfoA
SetEnvironmentVariableA

user32

GetDesktopWindow
GetWindow
FindWindowExA
GetWindowTextA
GetClassNameA
BlockInput
ShowWindow
SetForegroundWindow
PostMessageA

Exports

Exports

?BKG2POOL@@YGHPBUCALCINFO@@@Z
?CLEANBLK@@YGHPBUCALCINFO@@@Z
?CLEANBLKD@@YGHPBUCALCINFO@@@Z
?CLEANBLKT@@YGHPBUCALCINFO@@@Z
?CLEANPOOL@@YGHPBUCALCINFO@@@Z
?COUNTBKG@@YGHPBUCALCINFO@@@Z
?COUNTBLK@@YGHPBUCALCINFO@@@Z
?COUNTPOOL@@YGHPBUCALCINFO@@@Z
?DELE2BLK@@YGHPBUCALCINFO@@@Z
?DELE2BLKD@@YGHPBUCALCINFO@@@Z
?DELE2BLKT@@YGHPBUCALCINFO@@@Z
?DELE2POOL@@YGHPBUCALCINFO@@@Z
?GETDATE@@YGHPBUCALCINFO@@@Z
?INPOOL@@YGHPBUCALCINFO@@@Z
?SAVE2BLK@@YGHPBUCALCINFO@@@Z
?SAVE2BLKD@@YGHPBUCALCINFO@@@Z
?SAVE2BLKT@@YGHPBUCALCINFO@@@Z
?SAVE2POOL@@YGHPBUCALCINFO@@@Z
?STKFROMBLK@@YGHPBUCALCINFO@@@Z
?SUMINPOOL@@YGHPBUCALCINFO@@@Z
?ZXGSHORTKEY@@YGHPBUCALCINFO@@@Z
_BKG2POOL
_CLEANBLK
_CLEANBLKD
_CLEANBLKT
_CLEANPOOL
_COUNTBKG
_COUNTBLK
_COUNTPOOL
_DELE2BLK
_DELE2BLKD
_DELE2BLKT
_DELE2POOL
_GETDATE
_INPOOL
_SAVE2BLK
_SAVE2BLKD
_SAVE2BLKT
_SAVE2POOL
_STKFROMBLK
_SUMINPOOL
_ZXGSHORTKEY

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c015b6dc959b64b8682410ab33f9972

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 135KB - Virtual size: 135KB

.rdata Size: 26KB - Virtual size: 25KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 135KB - Virtual size: 135KB

.rdata
Size: 26KB - Virtual size: 25KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 9KB - Virtual size: 9KB