233e5fb47b9046c14732d0d777096ac3704352c7ee68dab66dea1f5a4a1c81df

Sharing

Copy URL Twitter E-mail

General

Target

233e5fb47b9046c14732d0d777096ac3704352c7ee68dab66dea1f5a4a1c81df
Size

53KB
MD5

01153bb574f41afbfe5854d05a56727c
SHA1

709cab98f5be18054dc3a257c0be4f5ccc443706
SHA256

233e5fb47b9046c14732d0d777096ac3704352c7ee68dab66dea1f5a4a1c81df
SHA512

bbe2d11ec3df412f7c408a07c4c3c07389dc72d1f239e25de9354adf15694b828ce2720baf21271b6c7ecf7db5481183c515c6694c86f0add13c803acab40105
SSDEEP

768:Kv0FmZ7LIrVgkAlgmcA0mH8P9hTlkZkaIKYzDzeftkYY57Yf8F6rHThH4cJAkDlw:1mJ7iZTmZ+eeY+7u8F6LTd4cJFtqM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
233e5fb47b9046c14732d0d777096ac3704352c7ee68dab66dea1f5a4a1c81df

Files

233e5fb47b9046c14732d0d777096ac3704352c7ee68dab66dea1f5a4a1c81df
.dll windows:5 windows x64 arch:x64

c0a637b40035d3461481ea5cc36a4c36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetFileSize
MapViewOfFile
UnmapViewOfFile
HeapAlloc
WaitForSingleObject
SetEvent
GetProcessHeap
Sleep
GetModuleFileNameW
CreateFileW
CreateFileMappingW
CreateEventW
lstrcatW
VirtualProtect
CloseHandle
CreateThread
FlushFileBuffers
GetStringTypeW
LCMapStringW
GetProcAddress
GetModuleHandleW
DecodePointer
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
LoadLibraryW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RtlUnwindEx
WriteFile
GetStdHandle
HeapFree
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
HeapReAlloc
SetStdHandle
WriteConsoleW

Exports

Exports

LockDownProtectProcessById

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0a637b40035d3461481ea5cc36a4c36

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 5KB - Virtual size: 19KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 5KB - Virtual size: 19KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 720B