061e72587045235d6c5c0537c50a93d5d705dcf40281e1715481722de23bc5ef

Sharing

Copy URL

Twitter E-mail

General

Target

061e72587045235d6c5c0537c50a93d5d705dcf40281e1715481722de23bc5ef
Size

40KB
MD5

c5407f1e817847c6c7c82cbe1e68eca5
SHA1

15650d0642053ae62870aff614e807ecc87b1482
SHA256

061e72587045235d6c5c0537c50a93d5d705dcf40281e1715481722de23bc5ef
SHA512

13d6b6fa3d5b64646c4f7aef68ef33d7f11f0b43567abba3c1b13d77c1d0f74ce72d70454fba3ac4692eb6c29c2586d0cb9e012b2a91dc4ad42a0ecfa25580b7
SSDEEP

384:/WiT/51neqjmX01lZY62N3oq2Abkh/JaGoEtHnEMmQS5Ttj893FkDiU:OiLHeqqXs9MopBNoEtHEMEQVQ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
061e72587045235d6c5c0537c50a93d5d705dcf40281e1715481722de23bc5ef

Files

061e72587045235d6c5c0537c50a93d5d705dcf40281e1715481722de23bc5ef
.dll windows:4 windows x86 arch:x86

dc5f6f89ccc35b416a692d63dff43094

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pmautility

?get_mib@CPmaDataAccess@@UBEJJPBDPAK1PAPAU?$IPmcStringBuffer@D@@2@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAKPAPAU?$IPmcStringBuffer@D@@2@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAJPAPAU?$IPmcStringBuffer@D@@2@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAPAUIPmaMIBItem@@@Z
?get_mib@CPmaDataAccess@@UBEJPAUIPmaMIBItem@@@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAPAU?$IPmcStringBuffer@D@@11@Z
?is_supported@CPmaMIBBaseModule@@UBE_NJPBD@Z
?get_mib_module_id@CPmaMIBBaseModule@@UBEJXZ
?clone@CPmaMIBBaseModule@@UBEJPAPAUIPmaDataAccess@@@Z
?set_network_address@CPmaDataAccess@@UAEJPAUIPmcNetworkAddress@@@Z
?get_network_address@CPmaDataAccess@@UBEPBUIPmcNetworkAddress@@XZ
?get_mib@CPmaDataAccess@@UBEJJPBDPAPAVIPmcAsnValue@@PAPAVIPmcAsnObjectID@@2@Z
?add_mibs@CPmaDataAccess@@UAEJPBJ@Z
?add_mib@CPmaDataAccess@@UAEJJPBD@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@J@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@K@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@KK@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@0@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@0J@Z
?destroy@CPmaMIBBaseModule@@UAEXXZ
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@PBU?$IPmcStringBuffer@D@@@Z
??0CPmaDataAccess@@QAE@XZ
??0CPmaMIBBaseModule@@QAE@XZ
??1CPmaDataAccess@@UAE@XZ
?init_mib_data@CPmaMIBBaseModule@@UAEJJJJPAUCPmaMIBInitData@@PBD@Z
?remove_all_mibs@CPmaDataAccess@@UAEJXZ
?is_init@CPmaMIBBaseModule@@UBE_NXZ

msvcrt

malloc
_initterm
_onexit
__dllonexit
free
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
_adjust_fdiv

kernel32

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls

Exports

Exports

pma_create_fx_ops_ps_module
pma_create_fx_ps_module
pma_create_mib_module

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc5f6f89ccc35b416a692d63dff43094

Headers

File Characteristics

Imports

pmautility

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB