c535ce460a89061ac72d5fdf9eefddb4

Sharing

Copy URL Twitter E-mail

General

Target

c535ce460a89061ac72d5fdf9eefddb4
Size

45KB
MD5

c535ce460a89061ac72d5fdf9eefddb4
SHA1

eefe073217dca737ab7760e24d767210a4c8b7dd
SHA256

507bfde7c7140cceebb7da8576ce771ce443f520a1af5381efb313faa0da52d3
SHA512

e7ae77f63382881612d97a4081eae6e229f6ea5c42c664a75f4d90c98b1c9976284346d38b902a7bbc34d32e9d79b774077e550b30504f3441e9feaf271d1227
SSDEEP

768:M9YxWrUWAo0KSRq5HPdrAtZiCNtCB3NAhMT2gcXwnajeSiAH:M9228jvqdPds3NA3ybqaj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c535ce460a89061ac72d5fdf9eefddb4

Files

c535ce460a89061ac72d5fdf9eefddb4
.dll windows:5 windows x86 arch:x86

c76c29224586dcbf773c731094b61b20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseSemaphore
SystemTimeToFileTime
DeleteFileW
GetVersion
GetProcAddress
GetEnvironmentVariableW
GetVersionExA
SetErrorMode
CreateEventA
CreateSemaphoreA
GetProcessHeap
GetModuleFileNameA
VirtualAlloc
TerminateProcess
LoadLibraryW
GetPrivateProfileStructA
GetPrivateProfileStringW
InterlockedExchangeAdd
GetPrivateProfileStringA
CloseHandle
TlsGetValue
WritePrivateProfileStringW
lstrlenA
InitializeCriticalSection
GlobalAddAtomW
GetTimeFormatW
FindResourceExW

ntdll

ZwFlushWriteBuffer
NtEnumerateValueKey
NtFindAtom
NtInitiatePowerAction
NtInitializeRegistry
ZwFlushVirtualMemory
ZwDuplicateObject
NtDuplicateToken
NtFsControlFile
NtOpenIoCompletion
NtDeleteAtom
ZwFilterToken
ZwOpenKey
NtCreateTimer
NtDeviceIoControlFile
NtOpenFile
NtOpenEventPair

Exports

Exports

CreateProcessNotify
DllClientCleanup
register_icmp
GetBestInterface
contpamp
NotifyAddrChange
DllClientStartup
SetAdapterIpAddress
Icmp6CreateFile
InternalGetIpForwardTable
InternalSetIfEntry
InternalGetUdpTable
GetOwnerModuleFromUdpEntry
CancelIPChangeNotify
SetIpNetEntry
DeleteIpForwardEntry
NhpAllocateAndGetInterfaceInfoFromStack
CreateIpNetEntry
UnenableRouter
GetIpNetTable
NhGetInterfaceNameFromGuid
GetTcpTable
AddIPAddress
do_echo_rep
NTPTimeToNTFileTime
GetInterfaceInfo
GetBestInterfaceEx
RestoreMediaSense
IcmpCloseHandle
GetAdaptersInfo
InternalSetIpStats
InternalGetIfTable
GetAdapterOrderMap
GetIpForwardTable
GetOwnerModuleFromUdp6Entry
do_echo_req
GetBestRoute
InternalDeleteIpNetEntry
SetIpForwardEntry
InternalSetIpNetEntry
SetTcpEntry
FlushIpNetTable
IpRenewAddress
GetAdapterIndex
IpReleaseAddress
GetIcmpStatisticsEx
IcmpSendEcho
InternalSetTcpEntry
CreateIpForwardEntry
NotifyRouteChange
GetNetworkParams
SetIfEntry
NhGetGuidFromInterfaceName
GetUdpTable
GetIfEntry
GetUniDirectionalAdapterInfo
GetIfTable
IcmpParseReplies
GetNumberOfInterfaces
GetExtendedTcpTable
SendARP
GetUdpStatisticsEx
SetIpStatistics
InternalGetTcpTable
InternalCreateIpNetEntry
Icmp6SendEcho2
GetOwnerModuleFromTcpEntry
GetOwnerModuleFromTcp6Entry
InternalSetIpForwardEntry
GetIpAddrTable
DisableMediaSense
GetIpErrorString
CreateProxyArpEntry
GetIpStatisticsEx
GetPerAdapterInfo
Icmp6ParseReplies
InternalCreateIpForwardEntry
GetIpStatistics
InternalGetIpAddrTable
GetAdaptersAddresses
InternalGetIpNetTable
GetExtendedUdpTable
GetIcmpStatistics
NTTimeToNTPTime
DeleteIpNetEntry
InternalDeleteIpForwardEntry
GetTcpStatistics
IcmpCreateFile
GetUdpStatistics
IcmpSendEcho2
EnableRouter
GetRTTAndHopCount
GetTcpStatisticsEx
DeleteIPAddress
DeleteProxyArpEntry
AllocateAndGetIpAddrTableFromStack
SetIpTTL
GetFriendlyIfIndex
NhGetInterfaceNameFromDeviceGuid

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 251B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c76c29224586dcbf773c731094b61b20

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 251B

.rsrc Size: 33KB - Virtual size: 36KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 251B

.rsrc
Size: 33KB - Virtual size: 36KB

.reloc
Size: 512B - Virtual size: 4KB