5e8311c26091839a292e2d12f88378f8093fc739ced86aa1e9ba1b707ad516d8

Sharing

Copy URL Twitter E-mail

General

Target

5e8311c26091839a292e2d12f88378f8093fc739ced86aa1e9ba1b707ad516d8
Size

53KB
MD5

31954d8bfcf8edbcd0b9ac90f098b891
SHA1

c1e6d701107d812c3fbb12dd4a2fbcc388e572e0
SHA256

5e8311c26091839a292e2d12f88378f8093fc739ced86aa1e9ba1b707ad516d8
SHA512

68f89ce8db7f6adc38077e2f176e254e64bce1a086ff3dc5669baa116a1b43d5848befe47a59f838358877944203dbec5e8884e82e100aa71ba9e5c28bf41cc7
SSDEEP

768:98Zfu/GYDJkvmDz7ETbrDz7Nz4UrPfpCQbFMI7CDj5uq:yZfuOU5KfDz7NzDPgv5uq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e8311c26091839a292e2d12f88378f8093fc739ced86aa1e9ba1b707ad516d8

Files

5e8311c26091839a292e2d12f88378f8093fc739ced86aa1e9ba1b707ad516d8
.dll windows:5 windows x86 arch:x86

94c2e8a8fcf59ad3871d0bd849632326

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA
SetServiceStatus
RegCloseKey
RegisterServiceCtrlHandlerA

kernel32

CreateFileA
GetFileSize
lstrlenA
WriteFile
Sleep
FreeConsole
ReadFile
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
HeapAlloc
ExitThread
GetLastError
ResumeThread
CreateThread
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
FlushFileBuffers

Exports

Exports

ServiceMain

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94c2e8a8fcf59ad3871d0bd849632326

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.reloc
Size: 4KB - Virtual size: 3KB