77c59998bac525c8b462e37939ddee039f163918fffab676dafe3f94be9449e0

Sharing

Copy URL Twitter E-mail

General

Target

77c59998bac525c8b462e37939ddee039f163918fffab676dafe3f94be9449e0
Size

216KB
MD5

37bdb14ba25f7b81d1696538794b5233
SHA1

66f8f0f93e8f8bf7113b193819ad99787e3f6395
SHA256

77c59998bac525c8b462e37939ddee039f163918fffab676dafe3f94be9449e0
SHA512

6686cfef27dd649acd97d29b42157e73401ebf332c7d409c9a9d3c0319465d488f5d90b320631649917f72571efa440a1f25c727e4e00ad9a7e049131c0715dd
SSDEEP

3072:DNk6ZvS0K5KAakQXMVRAgv7TA+XImL2lQBV+UdE+rECWp7hKBeGE:D+6o0xAavXMVfziqBV+UdvrEFp7hKB8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77c59998bac525c8b462e37939ddee039f163918fffab676dafe3f94be9449e0

Files

77c59998bac525c8b462e37939ddee039f163918fffab676dafe3f94be9449e0
.dll windows:5 windows x86 arch:x86

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\WinToHDD\Output\Win32\Release\intl.pdb

Imports

kernel32

EnumResourceLanguagesW
GetThreadLocale
GetProcAddress
GetLastError
GetLocaleInfoA
GetACP
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
HeapReAlloc
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetCPInfo
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
SetHandleCount
GetStartupInfoA
RtlUnwind
CloseHandle
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
SetFilePointer
ReadFile
CreateFileA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetModuleHandleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_nl_expand_alias
_nl_msg_cat_cntr
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_fwprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_set_relocation_prefix
libintl_sprintf
libintl_swprintf
libintl_textdomain
libintl_version
libintl_vfprintf
libintl_vfwprintf
libintl_vprintf
libintl_vsprintf
libintl_vswprintf
libintl_vwprintf
libintl_wprintf
ngettext
textdomain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 6KB