726e5471f5b4704d46d5872169a47c0a

Sharing

Copy URL Twitter E-mail

General

Target

726e5471f5b4704d46d5872169a47c0a
Size

148KB
MD5

726e5471f5b4704d46d5872169a47c0a
SHA1

06692fcb78064f16a4cbb4301b9d0dadae27a321
SHA256

c4c026d53bd6754f781d15c0c35ca27341419b6cb0581d2f7a2838263a7b9058
SHA512

2031c40d1053224dd96ec853a463278256241cad4fa298409b60f11aaba0989aa443726ffd3961baf57e8eaf5cc5d5fe689be3bdd5eaefa3852b33ca6e42c06d
SSDEEP

3072:vyP7veRn6y6SbxaLTxwYLvvMXTkskol4:UnrSoTLHMjd14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
726e5471f5b4704d46d5872169a47c0a

Files

726e5471f5b4704d46d5872169a47c0a
.dll windows:4 windows x86 arch:x86

165353ef32f8bfcf63ad16e93fef6747

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
ReleaseMutex
CreateMutexA
InterlockedExchange
WaitForMultipleObjects
CloseHandle
InterlockedIncrement
GetLastError
FormatMessageA
TlsSetValue
GetACP
GetCPInfo
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapFree
HeapAlloc
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
RaiseException
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
InterlockedDecrement
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WriteFile
SetFilePointer
GetOEMCP
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
ReadFile
SetEndOfFile

user32

MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
PeekMessageA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

MC_closeContext
MC_createContext
MC_generateRegFeatures
MC_getFeaturesLen
MC_getSecurityLevel
MC_getSettings
MC_getVersion
MC_getVersionInfo
MC_init
MC_setSecurityLevel
MC_terminate
MC_verifyFeatures
MC_verifyFeaturesEx

Sections

.text
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

165353ef32f8bfcf63ad16e93fef6747

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 96KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 24KB - Virtual size: 254KB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 100KB - Virtual size: 96KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 24KB - Virtual size: 254KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 8KB - Virtual size: 7KB