d432996c9ef7acd7656379680780e9b5

Sharing

Copy URL

Twitter E-mail

General

Target

d432996c9ef7acd7656379680780e9b5
Size

252KB
MD5

d432996c9ef7acd7656379680780e9b5
SHA1

ac1bbd764f01fb170cbdb925a98937bf9a3b5b14
SHA256

1b8399400127b42f3af84832ec8773e81ff7011a45d7ec925d8c16406b492156
SHA512

5d6c7ad628b70e6e43f398ceb8447c411e4fffb74cd0fb65e7265e17d0334fa842bc732bdc58622ce1b335ec260da2871eac21ccdb134bf3caa87376983e0477
SSDEEP

6144:t+TXq8bs9QpeHLI4ilPnvzq78NAgfkH43m5DfwakGQO7j2ySeJ/Cvdpm:t+TXqmoQAI4ilPnvzq78KUL2T4gJknm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d432996c9ef7acd7656379680780e9b5

Files

d432996c9ef7acd7656379680780e9b5
.dll windows:5 windows x86 arch:x86

b18893b405ec801da91ff775f6f1aa95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\d\test_dll\Release\test_dll.pdb

Imports

kernel32

GlobalFree
GlobalAlloc
IsBadReadPtr
Sleep
CreateFileA
WriteFile
CloseHandle
CreateThread
GetTempPathA
LoadLibraryA
GetProcAddress
FreeLibrary
GetTickCount
GetModuleHandleA
FlushFileBuffers
HeapSize
ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
RaiseException

ole32

CoInitializeEx

wsock32

recv
connect
socket
htons
send
WSACleanup
closesocket
WSAStartup
gethostbyname

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b18893b405ec801da91ff775f6f1aa95

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ole32

wsock32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 180KB - Virtual size: 180KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 180KB - Virtual size: 180KB