7c29f4a79f74f8b299fb9e778322b00221e9992d0ac6d2bd915da6629516fa2f

General

Target

7c29f4a79f74f8b299fb9e778322b00221e9992d0ac6d2bd915da6629516fa2f
Size

203KB
MD5

3e004dd25b5e836bc2500098c55a2b6d
SHA1

602a80e0924a65316cafc48356fe527e427c291f
SHA256

7c29f4a79f74f8b299fb9e778322b00221e9992d0ac6d2bd915da6629516fa2f
SHA512

da942a965758aac896621eb10aa8021ab7fd9958bade233a227e576b347f32750be29f856283698e73fdf9fb3841bc9f4d129af924f3bcb179f54e6fb25a8e25
SSDEEP

3072:wBets6C+GHl6EqgSpSISpSRhk78TcZ2HVHfR:C6WF6EqgSpSISpSRQ8ztZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c29f4a79f74f8b299fb9e778322b00221e9992d0ac6d2bd915da6629516fa2f

Files

7c29f4a79f74f8b299fb9e778322b00221e9992d0ac6d2bd915da6629516fa2f
.dll windows:6 windows x86 arch:x86

fdb3870ee19b555101bfac048b94e1bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
CloseHandle
WriteConsoleW
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetLastError
SetLastError
MultiByteToWideChar
HeapAlloc
RaiseException
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
WriteFile
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
HeapReAlloc
OutputDebugStringW
HeapSize
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW

user32

wsprintfW

Exports

Exports

ChromeMain

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fdb3870ee19b555101bfac048b94e1bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 171KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 12KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 172KB - Virtual size: 171KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 12KB

.reloc
Size: 6KB - Virtual size: 5KB