c5e53e3d485fdda982cd5949ea125482256bfd76d4e725a874ddbe89dd06e9d0

Sharing

Copy URL Twitter E-mail

General

Target

c5e53e3d485fdda982cd5949ea125482256bfd76d4e725a874ddbe89dd06e9d0
Size

113KB
MD5

727d969984595cf2bbc198773d6c1113
SHA1

424f6ffaa4daa4323311d164c6d16daf74feeb23
SHA256

c5e53e3d485fdda982cd5949ea125482256bfd76d4e725a874ddbe89dd06e9d0
SHA512

27dfb9bda5fbeea175403397ad91d39ba354b2b545cf6c4264800441a9479e744fa0645969f7e084b14f2f73f271e85c36b8856f82d8f1a90650d5407c52f39e
SSDEEP

3072:zeBJMCC5Bfdb+uncT05fefbRziONAxftNh9wIL:6RkdbtI09ARd2XL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5e53e3d485fdda982cd5949ea125482256bfd76d4e725a874ddbe89dd06e9d0

Files

c5e53e3d485fdda982cd5949ea125482256bfd76d4e725a874ddbe89dd06e9d0
.dll regsvr32 windows:6 windows x64 arch:x64

f72a09e259af5cf43c8c952419555216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile

advapi32

CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
GetUserNameW

user32

CreateDesktopW
SetThreadDesktop
wsprintfW

shlwapi

PathFindFileNameW
PathRemoveFileSpecW

Exports

Exports

AcsHlpNbConnection
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WSAttemptAutodialAddr
WSAttemptAutodialName
WSNoteSuccessfulHostentLookup

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f72a09e259af5cf43c8c952419555216

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

shlwapi

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 3KB - Virtual size: 7KB

.pdata Size: 5KB - Virtual size: 4KB

.00cfg Size: 512B - Virtual size: 40B

.gehcont Size: 512B - Virtual size: 36B

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1024B - Virtual size: 880B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 3KB - Virtual size: 7KB

.pdata
Size: 5KB - Virtual size: 4KB

.00cfg
Size: 512B - Virtual size: 40B

.gehcont
Size: 512B - Virtual size: 36B

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 2KB - Virtual size: 1KB