ce470cd83c903630354d91bc1eae0b865b63549c986c019152daec3958519e59

Sharing

Copy URL Twitter E-mail

General

Target

ce470cd83c903630354d91bc1eae0b865b63549c986c019152daec3958519e59
Size

731KB
MD5

5406646f89c902168dacce19903f6d71
SHA1

ec5a6bcf75d86d625de0aede86bfd4cdaaffcd70
SHA256

ce470cd83c903630354d91bc1eae0b865b63549c986c019152daec3958519e59
SHA512

0870670e0ea7b6a0aeb62fe5b9a95c404b254f9eca7c913baf9b75e594101ef0d170b7cffd25a2cfa110117c5cdeb0ea905948b53cdc6803e8926feb0e7a0812
SSDEEP

12288:glr9JKCpwBgx+724aWR/6zEMAGyQFqNjSq2p6GeIEHdXnU7CHgh/XP9c1CkrvR/T:gd9JhpwBgxg3pRyzXtFqNjX2p6GeIEp9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce470cd83c903630354d91bc1eae0b865b63549c986c019152daec3958519e59

Files

ce470cd83c903630354d91bc1eae0b865b63549c986c019152daec3958519e59
.dll windows:6 windows x86 arch:x86

0613760b03bd1a3acb2e1a4fcff3d120

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
QueryPerformanceCounter
GetTickCount
IsDebuggerPresent
CreateFileA
GetLocalTime
CreateDirectoryA
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetFileType
EncodePointer
DecodePointer
GetCommandLineA
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
DeleteCriticalSection
GetStartupInfoW
ReadFile
GetConsoleMode
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
GetConsoleCP
HeapSize
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
RaiseException
LoadLibraryExW
OutputDebugStringW
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
LCMapStringW
WriteConsoleW
CreateFileW
SetEndOfFile

advapi32

CryptReleaseContext
CryptAcquireContextA
CryptGenRandom

Exports

Exports

JasymmetricMaxnumber
JasymmetricVersion
easy_rsa_encrypt_memory
supper_asymmetric_work

Sections

.text
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0613760b03bd1a3acb2e1a4fcff3d120

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 527KB - Virtual size: 526KB

.rdata Size: 108KB - Virtual size: 108KB

.data Size: 79KB - Virtual size: 107KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 527KB - Virtual size: 526KB

.rdata
Size: 108KB - Virtual size: 108KB

.data
Size: 79KB - Virtual size: 107KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 14KB - Virtual size: 13KB