58d6cb80f229326fa0d5418971c2d2706778d99e7712c6149f995036b7113ffe

Sharing

Copy URL Twitter E-mail

General

Target

58d6cb80f229326fa0d5418971c2d2706778d99e7712c6149f995036b7113ffe
Size

73KB
MD5

119063c82373598d00d17734dd280016
SHA1

0aea9755e0b7a7c633d0e33a1ae5ba03f205080f
SHA256

58d6cb80f229326fa0d5418971c2d2706778d99e7712c6149f995036b7113ffe
SHA512

01c0d06c601f3b544e9086619662ea3603014c87e81be27af3e8ebb64182e165a36b3c1eb88ba2a76ef34c10b42ea536d75bc36860d5b29dbc3981a41068b81f
SSDEEP

1536:gOksS+/Tx3a0ZUWnBrEjrkTbGwK2zc+eCvST5MIW:gOksB/TzDnBrEIb3hc+eCvSFfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58d6cb80f229326fa0d5418971c2d2706778d99e7712c6149f995036b7113ffe

Files

58d6cb80f229326fa0d5418971c2d2706778d99e7712c6149f995036b7113ffe
.dll windows:5 windows x64 arch:x64

99eb74366be60fd476ac2f25bc88aef8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
OpenEventA
GetModuleFileNameA
GetCurrentProcessId
GetProcAddress
LoadLibraryA
GetCurrentProcess
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
SetEvent
WaitForSingleObject
FormatMessageA
LocalFree
FormatMessageW
GetLocalTime
OutputDebugStringA
OutputDebugStringW
CreateFileA
SetFilePointer
WriteFile
CloseHandle
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EncodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapFree
Sleep
GetModuleHandleW
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapAlloc
RaiseException
RtlPcToFileHeader
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryW
GetModuleFileNameW
HeapSize
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers

user32

ExitWindowsEx

Exports

Exports

LastErrorToStringA
LastErrorToStringW
LogToDebugA
LogToDebugW
LogToFileA
LogToFileW
SetLogFileName

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99eb74366be60fd476ac2f25bc88aef8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 14KB

.pdata Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 14KB

.pdata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB