5b229d24c80f24b7f847c8a44ff29a8b54134858dd8637af599bd0c54ba5bea0

Sharing

Copy URL

Twitter E-mail

General

Target

5b229d24c80f24b7f847c8a44ff29a8b54134858dd8637af599bd0c54ba5bea0
Size

575KB
MD5

fec96158785f4bbf7517fbb3fe2174f7
SHA1

a8cdd9fa758e2d8f2a007ba000e4031fdb60365b
SHA256

5b229d24c80f24b7f847c8a44ff29a8b54134858dd8637af599bd0c54ba5bea0
SHA512

040828675e04ef451ad0f4aff1b016e2d1499b812e4b0f47cebd726084eb5d8a535e6959c43824bfa56368888d6313730a2e335dc14a9354c13ded18a395dfe5
SSDEEP

12288:ixKg1AwNw1+YkZHeZFFQrS29gjbxDjN6Hoq:0m1TkZ+ZTQgbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b229d24c80f24b7f847c8a44ff29a8b54134858dd8637af599bd0c54ba5bea0

Files

5b229d24c80f24b7f847c8a44ff29a8b54134858dd8637af599bd0c54ba5bea0
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

HidD_FlushQueue
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetConfiguration
HidD_GetFeature
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetInputReport
HidD_GetManufacturerString
HidD_GetMsGenreDescriptor
HidD_GetNumInputBuffers
HidD_GetPhysicalDescriptor
HidD_GetPreparsedData
HidD_GetProductString
HidD_GetSerialNumberString
HidD_Hello
HidD_SetConfiguration
HidD_SetFeature
HidD_SetNumInputBuffers
HidD_SetOutputReport
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetData
HidP_GetExtendedAttributes
HidP_GetLinkCollectionNodes
HidP_GetScaledUsageValue
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_GetUsageValueArray
HidP_GetUsages
HidP_GetUsagesEx
HidP_GetValueCaps
HidP_InitializeReportForID
HidP_MaxDataListLength
HidP_MaxUsageListLength
HidP_SetData
HidP_SetScaledUsageValue
HidP_SetUsageValue
HidP_SetUsageValueArray
HidP_SetUsages
HidP_TranslateUsagesToI8042ScanCodes
HidP_UnsetUsages
HidP_UsageListDifference
HidservInstaller

Sections

.text
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AKS0
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

jdkey1
Size: 77KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jdkey2
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: - Virtual size: 48KB

.rdata Size: - Virtual size: 40KB

.data Size: - Virtual size: 8KB

.pdata Size: - Virtual size: 4KB

.AKS0 Size: - Virtual size: 40KB

jdkey1 Size: 77KB - Virtual size: 140KB

jdkey2 Size: 496KB - Virtual size: 496KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: - Virtual size: 48KB

.rdata
Size: - Virtual size: 40KB

.data
Size: - Virtual size: 8KB

.pdata
Size: - Virtual size: 4KB

.AKS0
Size: - Virtual size: 40KB

jdkey1
Size: 77KB - Virtual size: 140KB

jdkey2
Size: 496KB - Virtual size: 496KB

.rsrc
Size: 1024B - Virtual size: 4KB