c75ea8d16392c78689fd4b4e0aefc0101fde5399e8f437e1b1466ea3149de5f0

Sharing

Copy URL Twitter E-mail

General

Target

c75ea8d16392c78689fd4b4e0aefc0101fde5399e8f437e1b1466ea3149de5f0
Size

136KB
MD5

de5d95248a4ad8a9e0cc6bb893e311dc
SHA1

8af24daf90b77a771dc5e4b8e4b1f5aa00e534da
SHA256

c75ea8d16392c78689fd4b4e0aefc0101fde5399e8f437e1b1466ea3149de5f0
SHA512

34fe47925331b6d0b9abc43fb6b313531be587b997ec332163e7d3800ca4707e9d7d585fc32f482d0ec81ae61acd0f28764bba057e45db895190c63f900529f2
SSDEEP

3072:VzM0FZSjkmVtdr1w/KaUpaipItTBfvSEzN/:qWctdy/KRpa/tTB3VB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c75ea8d16392c78689fd4b4e0aefc0101fde5399e8f437e1b1466ea3149de5f0

Files

c75ea8d16392c78689fd4b4e0aefc0101fde5399e8f437e1b1466ea3149de5f0
.dll windows:5 windows x86 arch:x86

ff3118cf104af2095960a08cc19bdfa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
DeleteCriticalSection
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetSystemDefaultLangID
GetVersionExA
GetCurrentProcessId
GetHandleInformation
GetSystemDirectoryA
TerminateProcess
ReadFile
PeekNamedPipe
FreeLibrary
GlobalAlloc
GetFileSize
DeleteFileA
GlobalFree
DisconnectNamedPipe
CreateProcessA
CreatePipe
WaitForMultipleObjects
SetFileTime
GetProcAddress
OpenProcess
GetProcessHeap
SetEndOfFile
CreateFileW
HeapSize
GetStringTypeW
LCMapStringW
HeapReAlloc
LoadLibraryW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
InitializeCriticalSection
ExpandEnvironmentStringsA
SetFilePointer
WriteFile
FlushFileBuffers
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
FreeConsole
GetFileTime
GetLocalTime
OutputDebugStringA
CreateFileA
Sleep
GetCurrentProcess
DuplicateHandle
CloseHandle
GetModuleFileNameA
ExitProcess
GetFileType
SetHandleCount
IsProcessorFeaturePresent
HeapAlloc
GetModuleFileNameW
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
SetLastError
RtlUnwind
ExitThread
GetLastError
CreateThread
WideCharToMultiByte
DecodePointer
EncodePointer
RaiseException
GetCommandLineA
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW

user32

DefWindowProcA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
ReleaseDC
GetDC
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenInputDesktop
SetThreadDesktop
GetSystemMetrics
CloseWindowStation
CloseDesktop

gdi32

CreateCompatibleDC
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateCompatibleBitmap
GetDIBits
DeleteObject
GetStockObject
CreateDCA

advapi32

RegQueryValueExA
RegCreateKeyExA
GetUserNameA
RegSetValueExA
RegisterServiceCtrlHandlerA
RegOpenKeyExA
RegCloseKey
SetServiceStatus

ws2_32

inet_ntoa
gethostbyname
gethostname
closesocket
recv
connect
htons
inet_addr
socket
send
shutdown

Exports

Exports

ServiceMain
Start

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff3118cf104af2095960a08cc19bdfa4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

Exports

Exports

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 7KB - Virtual size: 7KB