4f94d67c9da7e340b258e26dee7269c89f1e7c2c2625a96073adeec794541e66

Sharing

Copy URL

Twitter E-mail

General

Target

4f94d67c9da7e340b258e26dee7269c89f1e7c2c2625a96073adeec794541e66
Size

148KB
MD5

890f6e09f2b882c0392789a71176d4d2
SHA1

bb9f6ad35542035478c8ccfdddc4a9ce65505c66
SHA256

4f94d67c9da7e340b258e26dee7269c89f1e7c2c2625a96073adeec794541e66
SHA512

f47736a5cedf564c5c74ec39ed67f18cc4b2c1e0abf04e7d1c272f205b00f6f0df0d589a3ffbf39a15057e423e49e94813a5c2545b9715b2bca633eed63007dd
SSDEEP

3072:9N7GuAuQ6r50fI+jhHTSUTkf3u7sovxB4HALBKLZEr:9N7FAuQ6rSIMSsQoJ+A8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f94d67c9da7e340b258e26dee7269c89f1e7c2c2625a96073adeec794541e66

Files

4f94d67c9da7e340b258e26dee7269c89f1e7c2c2625a96073adeec794541e66
.dll windows:5 windows x86 arch:x86

c08377a057f932a75617f5c9009978a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenW
InternetCloseHandle
InternetReadFile
InternetOpenUrlW

iphlpapi

GetAdaptersInfo

kernel32

CreateThread
Sleep
GetVersionExW
GetProcAddress
GetModuleHandleW
GetSystemInfo
LocalAlloc
CreateProcessW
CloseHandle
GetLastError
GetTempPathW
GetTempFileNameW
WriteFile
DeleteFileW
CreateFileW
EnterCriticalSection
GetSystemTimeAsFileTime
VirtualAlloc
VirtualFree
VirtualProtect
IsBadReadPtr
SetLastError
LoadLibraryA
FreeLibrary
HeapAlloc
GetProcessHeap
HeapFree
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
ExpandEnvironmentStringsW
GetWindowsDirectoryW
LeaveCriticalSection
GetFileTime
SetStdHandle
WriteConsoleW
LoadLibraryW
InitializeCriticalSection
DecodePointer
InterlockedIncrement
InterlockedDecrement
EncodePointer
SetEndOfFile
DeleteCriticalSection
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
ReadFile
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleCP
GetConsoleMode
HeapSize
ExitProcess
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
HeapDestroy
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
FlushFileBuffers
GetModuleFileNameW
GetLocaleInfoW
GetUserDefaultLCID

user32

wsprintfW
GetKeyboardLayoutList

advapi32

CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
CryptVerifySignatureW
CryptImportKey
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam

Exports

Exports

MyDllMain

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c08377a057f932a75617f5c9009978a5

Headers

DLL Characteristics

File Characteristics

Imports

wininet

iphlpapi

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 91KB

.rdata Size: 39KB - Virtual size: 39KB

.data Size: 6KB - Virtual size: 15KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 92KB - Virtual size: 91KB

.rdata
Size: 39KB - Virtual size: 39KB

.data
Size: 6KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB