df346759b6c0efb22dc6ab4f2111d99e

General

Target

df346759b6c0efb22dc6ab4f2111d99e
Size

536KB
MD5

df346759b6c0efb22dc6ab4f2111d99e
SHA1

2bd7a2024844eea577027c8057287fa3b5ec98c4
SHA256

47c76fd2cab14d27d46e71b149de38653c6db9a4d949f846c280375f92f5b9dd
SHA512

782d71d55825cd2c2b9dc18c036475738e6db49ab9b6ec19c2381df74627293a38b75e6ff649410356a6871062d906429213ad7a4b2a3ea5b341aefa7c1b849a
SSDEEP

6144:WmOxDHiwwQTUOGDiWcoPIB5rq6OeQ9s8k43B5WSdVMD2a0tqnxAWFiF3XV01ueF:zOJHi58B6iWcoSQiQC8k4x4a1nuSNQu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df346759b6c0efb22dc6ab4f2111d99e

Files

df346759b6c0efb22dc6ab4f2111d99e
.dll windows:4 windows x86 arch:x86

17af3854dcc4ee66c025ab916893252f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

cnlieass.pdb

Imports

shlwapi

PathFileExistsA

kernel32

OutputDebugStringA
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetErrorMode
FindFirstFileExA
SetFileAttributesA
GetFileSize
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFullPathNameA
Sleep
LocalFree
LocalAlloc
ReadFile
GetModuleHandleA
SetEndOfFile
OpenProcess
SetFilePointer
HeapFree
HeapAlloc
CreateFileA
GetTempPathA
GetFileInformationByHandle
CloseHandle
GetCurrentDirectoryA
GetPrivateProfileSectionA
FindNextFileA
LoadLibraryA
GetPrivateProfileStringA
FindClose
GetTempFileNameA
CopyFileA
RemoveDirectoryA
GetProcAddress
GetLastError
FindFirstFileA
SetCurrentDirectoryA
GetFileAttributesA
WriteFile
ExpandEnvironmentStringsA
GetFileAttributesExA
GetCurrentProcess
FreeLibrary
HeapCreate
SetHandleCount
SetLastError
GetProcessHeap
DeleteFileA

advapi32

ConvertStringSidToSidA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

ifgfzgvaq

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 494KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17af3854dcc4ee66c025ab916893252f

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

advapi32

version

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 38KB

.data Size: 494KB - Virtual size: 493KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 39KB - Virtual size: 38KB

.data
Size: 494KB - Virtual size: 493KB

.reloc
Size: 2KB - Virtual size: 1KB