a95ee6e8dfb28b453f9634c43c165f5027e65609369a4e733c8bc603e48fa708

Sharing

Copy URL

Twitter E-mail

General

Target

a95ee6e8dfb28b453f9634c43c165f5027e65609369a4e733c8bc603e48fa708
Size

1.0MB
MD5

57f80c3e162db36577f2ea5646396f65
SHA1

a019a3c1769955b287fb29705959d572456e57dc
SHA256

a95ee6e8dfb28b453f9634c43c165f5027e65609369a4e733c8bc603e48fa708
SHA512

0bcd6f7e4774b2898a896432dade4cc77ddbd766cb969cc16af30d1528d21be4de3fe982c12f329301f1c721b9809214f6f8f57e7b3bb8e6efc181249178d81e
SSDEEP

24576:4ZUnyWXxB7jARLgq4X5tdoCkLJlUx3jBU+mDbYL:Ryo6RLjg5t6CWlUxw/YL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a95ee6e8dfb28b453f9634c43c165f5027e65609369a4e733c8bc603e48fa708

Files

a95ee6e8dfb28b453f9634c43c165f5027e65609369a4e733c8bc603e48fa708
.dll windows:5 windows x86 arch:x86

3002672091e618d2ff633d108676c85d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalMemoryStatus
GetVersionExA
FlushConsoleInputBuffer
SetEndOfFile
CreateFileA
WriteConsoleW
SetEnvironmentVariableA
GetCurrentProcessId
GetStringTypeW
HeapSize
CreateFileW
SetFilePointer
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetFileType
GetVersion
GetModuleHandleA
GetCurrentThreadId
MultiByteToWideChar
GetLastError
CompareStringW
LoadLibraryExA
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalAlloc
LocalFree
LoadLibraryA
GetProcAddress
Sleep
GetModuleFileNameA
ReleaseMutex
lstrcatA
CreateMutexA
WaitForSingleObject
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
DecodePointer
GetCommandLineA
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
ExitProcess
EncodePointer
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
WideCharToMultiByte
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
LCMapStringW
HeapCreate
HeapDestroy
WriteFile
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryW
ReadFile
GetConsoleCP
FlushFileBuffers
RtlUnwind
GetProcessHeap

user32

GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
DialogBoxParamA
GetDlgItem
GetWindowTextA
MessageBoxA
EndDialog
SetFocus
SendMessageA
PeekMessageA
TranslateMessage
DispatchMessageA

advapi32

InitializeSecurityDescriptor
CryptGetHashParam
CryptReleaseContext
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
SetSecurityDescriptorDacl

Exports

Exports

SKFEX_ECCDecrypt
SKFEX_RSADecrypt
SKF_CancelWaitForDevEvent
SKF_ChangeDevAuthKey
SKF_ChangePIN
SKF_ClearSecureState
SKF_CloseApplication
SKF_CloseContainer
SKF_CloseHandle
SKF_ConnectDev
SKF_CreateApplication
SKF_CreateContainer
SKF_CreateFile
SKF_Decrypt
SKF_DecryptFinal
SKF_DecryptInit
SKF_DecryptUpdate
SKF_DeleteApplication
SKF_DeleteContainer
SKF_DeleteFile
SKF_DevAuth
SKF_Digest
SKF_DigestFinal
SKF_DigestInit
SKF_DigestUpdate
SKF_DisConnectDev
SKF_ECCExportSessionKey
SKF_ECCSignData
SKF_ECCVerify
SKF_Encrypt
SKF_EncryptFinal
SKF_EncryptInit
SKF_EncryptUpdate
SKF_EnumApplication
SKF_EnumContainer
SKF_EnumDev
SKF_EnumFiles
SKF_ExportCertificate
SKF_ExportPublicKey
SKF_ExtECCDecrypt
SKF_ExtECCEncrypt
SKF_ExtECCSign
SKF_ExtECCVerify
SKF_ExtRSAPriKeyOperation
SKF_ExtRSAPubKeyOperation
SKF_FormatCard
SKF_GenECCKeyPair
SKF_GenExtEccKey
SKF_GenExtRSAKey
SKF_GenRSAKeyPair
SKF_GenRandom
SKF_GenerateAgreementDataAndKeyWithECC
SKF_GenerateAgreementDataWithECC
SKF_GenerateKeyWithECC
SKF_GetContainerType
SKF_GetContianerProperty
SKF_GetContianerType
SKF_GetDevInfo
SKF_GetDevState
SKF_GetFileInfo
SKF_GetPINInfo
SKF_GetRsaType
SKF_ImportCertificate
SKF_ImportECCKeyPair
SKF_ImportRSAKeyPair
SKF_ImportSessionKey
SKF_LockDev
SKF_Mac
SKF_MacFinal
SKF_MacInit
SKF_MacUpdate
SKF_OpenApplication
SKF_OpenContainer
SKF_PriRsaDecrypt
SKF_PrvKeyDecrypt
SKF_PrvRsaKeyDecrypt
SKF_RSAExportSessionKey
SKF_RSASignData
SKF_RSAVerify
SKF_ReadFile
SKF_SetLabel
SKF_SetSymmKey
SKF_Transmit
SKF_UnblockPIN
SKF_UnlockDev
SKF_VerifyPIN
SKF_WaitForDevEvent
SKF_WriteFile

Sections

.text
Size: 549KB - Virtual size: 549KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GPShared
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3002672091e618d2ff633d108676c85d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 549KB - Virtual size: 549KB

.rdata Size: 166KB - Virtual size: 165KB

.data Size: 10KB - Virtual size: 25KB

GPShared Size: 276KB - Virtual size: 275KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 35KB - Virtual size: 34KB

.text
Size: 549KB - Virtual size: 549KB

.rdata
Size: 166KB - Virtual size: 165KB

.data
Size: 10KB - Virtual size: 25KB

GPShared
Size: 276KB - Virtual size: 275KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 35KB - Virtual size: 34KB