4cc37183fe00dd955a765313b5edba8203f9faebce448ccdfceea45bb6b7c046

Sharing

Copy URL Twitter E-mail

General

Target

4cc37183fe00dd955a765313b5edba8203f9faebce448ccdfceea45bb6b7c046
Size

247KB
MD5

1d29efc3e124ab3bd2391e41ab23675b
SHA1

987ec3b9c3ed6c7ae0dba7a8f0b7574f8c4fc88c
SHA256

4cc37183fe00dd955a765313b5edba8203f9faebce448ccdfceea45bb6b7c046
SHA512

1c7a62e960677cb896c09b0a74ea04ce177d9555ed4e2ccfb79ae3511f80d908c8c37ec1561bb904058b5dde6ad4b1a6a1c80010c838cfbfdb6d9c0918ddbd21
SSDEEP

6144:FjnyJ1Js9jdz1JJhR7vYgdiwybA7E6NR4deum:FjnWYdz1JJLYjwO56NRvum

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/02ed6568159de27622ff4e378089ee54f90c1d04f24eae7eb9790749cc38b9ff.dll

Files

4cc37183fe00dd955a765313b5edba8203f9faebce448ccdfceea45bb6b7c046
.zip

Password: infected
02ed6568159de27622ff4e378089ee54f90c1d04f24eae7eb9790749cc38b9ff.dll
.dll windows:5 windows x86 arch:x86

6db8f52d34e707ea8ce246e337afd54a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
WideCharToMultiByte
Sleep
CreateProcessA
GetACP
MultiByteToWideChar
lstrlenW
GetTempPathW
LocalAlloc
GetModuleFileNameA
DeleteFileA
CreateThread
GetNativeSystemInfo
FreeLibrary
HeapAlloc
HeapFree
VirtualFree
GetProcessHeap
IsBadReadPtr
SetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
VirtualProtect
CreateMutexW
WaitForSingleObject
GetSystemInfo
ReleaseMutex
CloseHandle
CreateFileW
HeapSize
WriteConsoleW
SetStdHandle
RtlUnwind
GetLastError
GetFileAttributesA
HeapReAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
HeapCreate
HeapDestroy
GetStringTypeW
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
LCMapStringW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
FlushFileBuffers

shell32

CommandLineToArgvW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Exports

Exports

CtrlDesktop
CtrlPanel
CtrlPanelW
pcre_assign_jit_stack
pcre_callout
pcre_compile
pcre_compile2
pcre_config
pcre_copy_named_substring
pcre_copy_substring
pcre_dfa_exec
pcre_exec
pcre_free
pcre_free_study
pcre_free_substring
pcre_free_substring_list
pcre_fullinfo
pcre_get_named_substring
pcre_get_stringnumber
pcre_get_stringtable_entries
pcre_get_substring
pcre_get_substring_list
pcre_jit_exec
pcre_jit_free_unused_memory
pcre_jit_stack_alloc
pcre_jit_stack_free
pcre_maketables
pcre_malloc
pcre_pattern_to_host_byte_order
pcre_refcount
pcre_stack_free
pcre_stack_guard
pcre_stack_malloc
pcre_study
pcre_version

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 204KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

6db8f52d34e707ea8ce246e337afd54a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

ole32

Exports

Exports

Sections

.text Size: 291KB - Virtual size: 291KB

.rdata Size: 93KB - Virtual size: 92KB

.data Size: 204KB - Virtual size: 211KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 291KB - Virtual size: 291KB

.rdata
Size: 93KB - Virtual size: 92KB

.data
Size: 204KB - Virtual size: 211KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB