604b202cbe5e97c7c8a74a12e1f08e843c08ae08be34dc60b8518b9417c133a9

Sharing

Copy URL Twitter E-mail

General

Target

604b202cbe5e97c7c8a74a12e1f08e843c08ae08be34dc60b8518b9417c133a9
Size

52KB
MD5

6684f18283c28d060ee319057f782b67
SHA1

77176678c2818b4524a18e1ebed4a09836879085
SHA256

604b202cbe5e97c7c8a74a12e1f08e843c08ae08be34dc60b8518b9417c133a9
SHA512

1d47af3b6c5ececddc8408dd6dc698e9009daaf10f169f45855f111802235fa0ffb9bf2244724ca8d39bf468f4d6ccd6829b815e91b7f60922900488a949a482
SSDEEP

768:6pWebd3iilkgSQb0hckk3YetzPnDEDDUMEOfSJo8RVjlrbScTa:gWSdvkvckUl/ZOfSJo8RVjlr+Ia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
604b202cbe5e97c7c8a74a12e1f08e843c08ae08be34dc60b8518b9417c133a9

Files

604b202cbe5e97c7c8a74a12e1f08e843c08ae08be34dc60b8518b9417c133a9
.dll windows:5 windows x86 arch:x86

28ad2a8b3afc8a43944d9759a31f0571

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
GetFileSize
HeapAlloc
OutputDebugStringW
GetProcessHeap
WideCharToMultiByte
Sleep
ReadFile
GetModuleFileNameW
lstrlenW
VirtualProtect
CloseHandle
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
GetSystemTimeAsFileTime
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
IsProcessorFeaturePresent
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
WriteFile
LCMapStringW
MultiByteToWideChar
GetStringTypeW
RaiseException

Exports

Exports

Log2GetSender
Log2PostMessage
Log2RegisterModule
Log2SendMessage
LogAnsiToUTF8
LogAppendOID
LogClose
LogClosePolicyDriver
LogCompareOID
LogCompleteOID
LogCopy
LogCopyOID
LogCreateMessage
LogCreatePackage
LogCreatePolicyGroupSetPackage
LogCreatePolicyOID
LogCreatePolicySetPackage
LogCreatePolicyTable
LogCreatePolicyVar
LogCreatePolicyVarFromPackage
LogCreateUID
LogCreateUserSessionPolicyOID
LogCustomizeDialog
LogDelayLoadInitialize
LogDeleteMessage
LogFindFirstOID
LogFindNextOID
LogFormatCellStringA
LogFormatCellStringW
LogFormatChoiceStringA
LogFormatChoiceStringW
LogFormatStringA
LogFormatStringW
LogFormatTypeNameA
LogFormatTypeNameW
LogFreeBitmapResource
LogFreeChangeList
LogFreeHostIdentityList
LogFreeIconResource
LogFreeMemory
LogFreePackage
LogGetAccessRights
LogGetAccessibleOIDList
LogGetApiVersion
LogGetBinary
LogGetBindingImpl
LogGetBitmapHandle
LogGetBitmapPalette
LogGetBitmapResource
LogGetBitmapResourceFilePath
LogGetBitmapResourceFilePathLength
LogGetCellAccessRights
LogGetCellInt
LogGetCellRestriction
LogGetCellStringA
LogGetCellStringW
LogGetCellValue
LogGetCellValueSize
LogGetChoice
LogGetChoiceInt
LogGetChoiceSize
LogGetChoiceStringA
LogGetChoiceStringW
LogGetColumnType
LogGetDepthOID
LogGetDialogResource
LogGetDirectoryPath
LogGetDirectoryPathLength
LogGetDriverStatisticsA
LogGetGroupPackageCount
LogGetHostIdentityList
LogGetIconHandle
LogGetIconResource
LogGetIconResourceEx
LogGetIconResourceFilePath
LogGetIconResourceFilePathLength
LogGetInt
LogGetMessageData
LogGetMessageDataBuffer
LogGetMessageDataSize
LogGetMessageID
LogGetModuleHandle
LogGetNumChoices
LogGetOID
LogGetPackedOID
LogGetPackedOIDFromGroupPackage
LogGetPackedOIDFromPackage
LogGetPackedOIDSize
LogGetPartOID
LogGetPolicy
LogGetPolicyInt
LogGetPolicyIntoPackage
LogGetPolicyString
LogGetRange
LogGetResponseData
LogGetResponseDataBuffer
LogGetResponseDataSize
LogGetRestriction
LogGetSender
LogGetSenderPID
LogGetSource
LogGetStringA
LogGetStringResource
LogGetStringResourceLength
LogGetStringResourceLengthUTF8
LogGetStringResourceUTF8
LogGetStringW
LogGetTableDimensions
LogGetType
LogGetUIDA
LogGetUIDOperation
LogGetUIDW
LogGetValue
LogGetValueSize
LogGetVersion
LogInit
LogInitLibrary
LogInitMessagePump
LogInitialize
LogInitializeHook
LogInsertColumn
LogInsertRow
LogIsEqual
LogIsEqualValue
LogIsIndexColumn
LogIsMessagePosted
LogIsPrefixOID
LogLockToUIDMode
LogOpenPolicyDriver
LogPostMessage
LogReadPolicyFileA
LogRegisterLanguageHandle
LogRegisterLanguageHandleByName
LogRegisterLanguageHandleCustom
LogRegisterLocalizationResource
LogRegisterModule
LogRegisterModuleWithKnownChannelName
LogRemoveRow
LogRunMessagePump
LogSendMessage
LogSetBinary
LogSetBindingImpl
LogSetCellBinary
LogSetCellInt
LogSetCellStringA
LogSetCellStringW
LogSetCellValue
LogSetInstallationTimeMode
LogSetInt
LogSetMessageData
LogSetOID
LogSetOidFromBuffer
LogSetOidFromPackedData
LogSetPartOID
LogSetPolicy
LogSetPolicyFromPackage
LogSetPolicyGroupFromPackage
LogSetResponseData
LogSetStringA
LogSetStringW
LogSetValue
LogStopMessagePump
LogStringFromOID
LogStringFromPackedOID
LogTruncateOID
LogUTF8ToAnsi
LogUTF8ToUnicode
LogUnicodeToUTF8
LogUninitialize
LogUninitialize
LogUnpackPolicyGetPackage
LogUnregisterLanguageHandle
LogUnregisterLocalizationResource
LogUnregisterModule
LogWaitForChangeNotification
LogWritePolicyFileA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28ad2a8b3afc8a43944d9759a31f0571

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 3KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 3KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 4KB