9cb7b52051d9c0784e6491d558c47f92ab28aea24b94735f1902d531621b5fff

Sharing

Copy URL Twitter E-mail

General

Target

9cb7b52051d9c0784e6491d558c47f92ab28aea24b94735f1902d531621b5fff
Size

275KB
MD5

d5303ccf84524e74d65d6624c430eb52
SHA1

2c5d5a8fad0526528d0b694978969f148ca50343
SHA256

9cb7b52051d9c0784e6491d558c47f92ab28aea24b94735f1902d531621b5fff
SHA512

cfb2b86b6114ff8da82267ee15adf0aa70098d594ebd3213f17f817baaabc5389e1fb2ca8be4f9dbe5a6f6a68490f704d45eafca69ebdef8a7ae30d8892d0d49
SSDEEP

6144:RO/u6SR2W0R9DqkryOQ8AxP6iLCDxi7eqR1zqWqo8:A/CRLmDqkryOQ8eCiuDKe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cb7b52051d9c0784e6491d558c47f92ab28aea24b94735f1902d531621b5fff

Files

9cb7b52051d9c0784e6491d558c47f92ab28aea24b94735f1902d531621b5fff
.dll windows:4 windows x64 arch:x64

5e207ae3771fefa32a5bba421d9f1e26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
getenv

api-ms-win-crt-heap-l1-1-0

_set_new_mode
calloc
free
malloc

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
exit

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
ferror
fflush
fread
fwrite

api-ms-win-crt-string-l1-1-0

memset
strlen
strncmp

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

Exports

Exports

jcopy_block_row
jcopy_sample_rows
jdiv_round_up
jinit_1pass_quantizer
jinit_2pass_quantizer
jinit_arith_decoder
jinit_arith_encoder
jinit_c_coef_controller
jinit_c_main_controller
jinit_c_master_control
jinit_c_prep_controller
jinit_color_converter
jinit_color_deconverter
jinit_compress_master
jinit_d_coef_controller
jinit_d_main_controller
jinit_d_post_controller
jinit_downsampler
jinit_forward_dct
jinit_huff_decoder
jinit_huff_encoder
jinit_input_controller
jinit_inverse_dct
jinit_marker_reader
jinit_marker_writer
jinit_master_decompress
jinit_memory_mgr
jinit_merged_upsampler
jinit_upsampler
jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_abort
jpeg_abort_compress
jpeg_abort_decompress
jpeg_add_quant_table
jpeg_alloc_huff_table
jpeg_alloc_quant_table
jpeg_aritab
jpeg_calc_jpeg_dimensions
jpeg_calc_output_dimensions
jpeg_consume_input
jpeg_copy_critical_parameters
jpeg_core_output_dimensions
jpeg_default_colorspace
jpeg_default_qtables
jpeg_destroy
jpeg_destroy_compress
jpeg_destroy_decompress
jpeg_fdct_10x10
jpeg_fdct_10x5
jpeg_fdct_11x11
jpeg_fdct_12x12
jpeg_fdct_12x6
jpeg_fdct_13x13
jpeg_fdct_14x14
jpeg_fdct_14x7
jpeg_fdct_15x15
jpeg_fdct_16x16
jpeg_fdct_16x8
jpeg_fdct_1x1
jpeg_fdct_1x2
jpeg_fdct_2x1
jpeg_fdct_2x2
jpeg_fdct_2x4
jpeg_fdct_3x3
jpeg_fdct_3x6
jpeg_fdct_4x2
jpeg_fdct_4x4
jpeg_fdct_4x8
jpeg_fdct_5x10
jpeg_fdct_5x5
jpeg_fdct_6x12
jpeg_fdct_6x3
jpeg_fdct_6x6
jpeg_fdct_7x14
jpeg_fdct_7x7
jpeg_fdct_8x16
jpeg_fdct_8x4
jpeg_fdct_9x9
jpeg_fdct_float
jpeg_fdct_ifast
jpeg_fdct_islow
jpeg_finish_compress
jpeg_finish_decompress
jpeg_finish_output
jpeg_free_large
jpeg_free_small
jpeg_get_large
jpeg_get_small
jpeg_has_multiple_scans
jpeg_idct_10x10
jpeg_idct_10x5
jpeg_idct_11x11
jpeg_idct_12x12
jpeg_idct_12x6
jpeg_idct_13x13
jpeg_idct_14x14
jpeg_idct_14x7
jpeg_idct_15x15
jpeg_idct_16x16
jpeg_idct_16x8
jpeg_idct_1x1
jpeg_idct_1x2
jpeg_idct_2x1
jpeg_idct_2x2
jpeg_idct_2x4
jpeg_idct_3x3
jpeg_idct_3x6
jpeg_idct_4x2
jpeg_idct_4x4
jpeg_idct_4x8
jpeg_idct_5x10
jpeg_idct_5x5
jpeg_idct_6x12
jpeg_idct_6x3
jpeg_idct_6x6
jpeg_idct_7x14
jpeg_idct_7x7
jpeg_idct_8x16
jpeg_idct_8x4
jpeg_idct_9x9
jpeg_idct_float
jpeg_idct_ifast
jpeg_idct_islow
jpeg_input_complete
jpeg_mem_available
jpeg_mem_dest
jpeg_mem_init
jpeg_mem_src
jpeg_mem_term
jpeg_natural_order
jpeg_natural_order2
jpeg_natural_order3
jpeg_natural_order4
jpeg_natural_order5
jpeg_natural_order6
jpeg_natural_order7
jpeg_new_colormap
jpeg_open_backing_store
jpeg_quality_scaling
jpeg_read_coefficients
jpeg_read_header
jpeg_read_raw_data
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_save_markers
jpeg_set_colorspace
jpeg_set_defaults
jpeg_set_linear_quality
jpeg_set_marker_processor
jpeg_set_quality
jpeg_simple_progression
jpeg_start_compress
jpeg_start_decompress
jpeg_start_output
jpeg_std_error
jpeg_std_huff_table
jpeg_std_message_table
jpeg_stdio_dest
jpeg_stdio_src
jpeg_suppress_tables
jpeg_write_coefficients
jpeg_write_m_byte
jpeg_write_m_header
jpeg_write_marker
jpeg_write_raw_data
jpeg_write_scanlines
jpeg_write_tables
jround_up

Sections

.text
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e207ae3771fefa32a5bba421d9f1e26

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 235KB - Virtual size: 234KB

.data Size: 512B - Virtual size: 256B

.rdata Size: 17KB - Virtual size: 16KB

.pdata Size: 5KB - Virtual size: 4KB

.xdata Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 272B

.edata Size: 5KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 540B

.text
Size: 235KB - Virtual size: 234KB

.data
Size: 512B - Virtual size: 256B

.rdata
Size: 17KB - Virtual size: 16KB

.pdata
Size: 5KB - Virtual size: 4KB

.xdata
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 272B

.edata
Size: 5KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 540B