608a1585a51a8b0d97d40348caeb60fdec9e48d793760cf1e65bcf59291b5b5d

Sharing

Copy URL

Twitter E-mail

General

Target

608a1585a51a8b0d97d40348caeb60fdec9e48d793760cf1e65bcf59291b5b5d
Size

2.8MB
MD5

241c5125542210558f69851deb1f9ae1
SHA1

9d1009f1a1377bd916079920a1f937969f521be6
SHA256

608a1585a51a8b0d97d40348caeb60fdec9e48d793760cf1e65bcf59291b5b5d
SHA512

0f017673c67c0e6b6ce360cbe9194a77fe9d580f85552dfcef1c47bf43333aeb3417e495c6b273049c7cae12655e9c993666eb2b552c5400879decf470da4fe0
SSDEEP

49152:4uI6lxnCY5WwmEKJPdTeJt7ap7p2t4LRNrEbeMwKv:3lVCYow0JPdut7ap7p2t2Eyyv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608a1585a51a8b0d97d40348caeb60fdec9e48d793760cf1e65bcf59291b5b5d

Files

608a1585a51a8b0d97d40348caeb60fdec9e48d793760cf1e65bcf59291b5b5d
.dll windows:6 windows x86 arch:x86

d293e3d3211b96e1d9fc6a010c2f0ab8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vcruntime140

strstr
__CxxQueryExceptionSize
__CxxExceptionFilter
__CxxRegisterExceptionObject
__CxxDetectRethrow
__CxxUnregisterExceptionObject
__FrameUnwindFilter
memmove
strchr
memset
__current_exception_context
__current_exception
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memcpy
__CxxFrameHandler3
_purecall
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
abort
_initialize_onexit_table
_register_onexit_function
_configure_narrow_argv
_execute_onexit_table
_crt_atexit
terminate
_wassert
_cexit

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

kernel32

CreateEventW
GetProcAddress
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
WaitForSingleObject
DeleteTimerQueueTimer
CreateTimerQueueTimer
Sleep
SetLastError
UnhandledExceptionFilter
InitializeCriticalSection

api-ms-win-crt-convert-l1-1-0

strtol
strtoul
atof
atol
atoi

api-ms-win-crt-string-l1-1-0

isxdigit
strncmp
strcpy_s
strtok
strncat
strncpy
isdigit

api-ms-win-crt-time-l1-1-0

_mktime64
_gmtime64

mscoree

_CorDllMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 285KB - Virtual size: 16.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d293e3d3211b96e1d9fc6a010c2f0ab8

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

mscoree

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 285KB - Virtual size: 16.3MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 54KB - Virtual size: 53KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 285KB - Virtual size: 16.3MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 54KB - Virtual size: 53KB