e1b93c2a515bd35eddbe456b754398774b15712ff443ec47258242bd2c4cc1d8

Sharing

Copy URL

Twitter E-mail

General

Target

e1b93c2a515bd35eddbe456b754398774b15712ff443ec47258242bd2c4cc1d8
Size

32KB
MD5

77cf73c3f318b6ad4a0aee74655e0762
SHA1

388cc05f2219ef3d858cdcbd6f4048a95d997587
SHA256

e1b93c2a515bd35eddbe456b754398774b15712ff443ec47258242bd2c4cc1d8
SHA512

1af7ea76aaa6da87d8fbcc72df8c24f421b7afd17fb78109336bb1e88cd2e4cf962f43a5787c705db099edf0d4b3401a940bbedeabe58c5b9b6f790b18edff3d
SSDEEP

192:CUDUFD/7gwqv7JPbIIhlEHQi8rUQz9TBVt5r:EPuVT/hYp8AyRBN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1b93c2a515bd35eddbe456b754398774b15712ff443ec47258242bd2c4cc1d8

Files

e1b93c2a515bd35eddbe456b754398774b15712ff443ec47258242bd2c4cc1d8
.dll windows:4 windows x86 arch:x86

dc5f6f89ccc35b416a692d63dff43094

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pmautility

?get_mib@CPmaDataAccess@@UBEJJPBDPAK1PAPAU?$IPmcStringBuffer@D@@2@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAKPAPAU?$IPmcStringBuffer@D@@2@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAJPAPAU?$IPmcStringBuffer@D@@2@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAPAUIPmaMIBItem@@@Z
?get_mib@CPmaDataAccess@@UBEJPAUIPmaMIBItem@@@Z
?get_mib@CPmaDataAccess@@UBEJJPBDPAPAU?$IPmcStringBuffer@D@@11@Z
?is_supported@CPmaMIBBaseModule@@UBE_NJPBD@Z
?get_mib_module_id@CPmaMIBBaseModule@@UBEJXZ
?clone@CPmaMIBBaseModule@@UBEJPAPAUIPmaDataAccess@@@Z
?set_network_address@CPmaDataAccess@@UAEJPAUIPmcNetworkAddress@@@Z
?get_network_address@CPmaDataAccess@@UBEPBUIPmcNetworkAddress@@XZ
?get_mib@CPmaDataAccess@@UBEJJPBDPAPAVIPmcAsnValue@@PAPAVIPmcAsnObjectID@@2@Z
?add_mibs@CPmaDataAccess@@UAEJPBJ@Z
?add_mib@CPmaDataAccess@@UAEJJPBD@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@J@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@K@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@KK@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@0@Z
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@0J@Z
?destroy@CPmaMIBBaseModule@@UAEXXZ
?add_mib@CPmaDataAccess@@UAEJJPBDW4EValueType@NPmaAccess@@PBU?$IPmcStringBuffer@D@@@Z
??0CPmaDataAccess@@QAE@XZ
??0CPmaMIBBaseModule@@QAE@XZ
??1CPmaDataAccess@@UAE@XZ
?init_mib_data@CPmaMIBBaseModule@@UAEJJJJPAUCPmaMIBInitData@@PBD@Z
?remove_all_mibs@CPmaDataAccess@@UAEJXZ
?is_init@CPmaMIBBaseModule@@UBE_NXZ

msvcrt

malloc
_initterm
_onexit
__dllonexit
free
??2@YAPAXI@Z
__CxxFrameHandler
_purecall
_adjust_fdiv

kernel32

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls

Exports

Exports

pma_create_mib_module
pma_create_xcmi_job_management_module
pma_create_xcmi_job_monitor_module

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc5f6f89ccc35b416a692d63dff43094

Headers

File Characteristics

Imports

pmautility

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 992B

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 992B