1f2a62ecc263610192c102c4fe9497fccbb62494f005d51509a1eec51fa661c0

General

Target

1f2a62ecc263610192c102c4fe9497fccbb62494f005d51509a1eec51fa661c0
Size

15KB
MD5

3b4475241cf910a1a19f46d1accae8df
SHA1

55ecb4ee30e8ad21652b045fc7cf908bebaa83eb
SHA256

1f2a62ecc263610192c102c4fe9497fccbb62494f005d51509a1eec51fa661c0
SHA512

a22a6ede5db869eb6877a112ce8031f5021d1cf6944511036eb3e0e1fc8a813a2ba7ba8380f173f5cf6cdb746382e0c14cc3a92308bb939f9f15781fd6dc9a24
SSDEEP

192:eHgImICQRj5iaCf/zf8NvlA2IbwH8S1p4Iqoha9rUFwYXUPUOA3XmS9Rd:u6/zf8NvHIb7SMXoIyGOUUOAvJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f2a62ecc263610192c102c4fe9497fccbb62494f005d51509a1eec51fa661c0

Files

1f2a62ecc263610192c102c4fe9497fccbb62494f005d51509a1eec51fa661c0
.dll windows:6 windows x64 arch:x64

a5960bddd24c80af7bc2e16973637112

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
DisableThreadLibraryCalls
VirtualProtect
CreateThread
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DecodePointer
EncodePointer
GetSystemTimeAsFileTime

msvcp120

?_Syserror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAPEBDH@Z

msvcr120

_unlock
_lock
__dllonexit
__C_specific_handler
_onexit
__CppXcptFilter
??2@YAPEAX_K@Z
free
_malloc_crt
_initterm
_initterm_e
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
??3@YAXPEAX@Z
_purecall
memmove
_amsg_exit
_calloc_crt
_CxxThrowException
__CxxFrameHandler3
memcpy

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5960bddd24c80af7bc2e16973637112

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp120

msvcr120

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 704B

.pdata Size: 1024B - Virtual size: 564B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 136B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 704B

.pdata
Size: 1024B - Virtual size: 564B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 136B