d238e2bc2a02a9bfe81388dbf5563c8a8ace583bb73c983f8af9c6a94178b131

Sharing

Copy URL Twitter E-mail

General

Target

d238e2bc2a02a9bfe81388dbf5563c8a8ace583bb73c983f8af9c6a94178b131
Size

9.5MB
MD5

1a9921b95f605925ef99d5f435bc7f00
SHA1

c08af6f4125d0f09b77ef345427aff822a3903e9
SHA256

d238e2bc2a02a9bfe81388dbf5563c8a8ace583bb73c983f8af9c6a94178b131
SHA512

e5680f367807d9e3d9d643395318b6d366eb02d1d8b331dcbee345c50a1a6ba0373098ea08437f90f2bc7cd6caee8d547b44a55cc0362c44498d6a8d25b19b82
SSDEEP

196608:/8kicWU3NZ+qSANXUyc/2ZAQkXiKKlZLEwtdNbhcoxak2oeEADe3cf2wU:hcw0Klxhcp4ADJfDU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d238e2bc2a02a9bfe81388dbf5563c8a8ace583bb73c983f8af9c6a94178b131

Files

d238e2bc2a02a9bfe81388dbf5563c8a8ace583bb73c983f8af9c6a94178b131
.dll windows:6 windows x86 arch:x86

d660adf7bb207ebce25ea339403c93c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

inet_ntoa

dnsapi

DnsQuery_W

kernel32

ReadProcessMemory

ntdll

NtOpenThreadTokenEx

msvcp140

?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z

msvcrt

strrchr

advapi32

RegCloseKey

Exports

Exports

ogg_packet_clear
ogg_page_bos
ogg_page_checksum_set
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_flush_fill
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_pageout_fill
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpackB_adv
oggpackB_adv1
oggpackB_bits
oggpackB_bytes
oggpackB_get_buffer
oggpackB_look
oggpackB_look1
oggpackB_read
oggpackB_read1
oggpackB_readinit
oggpackB_reset
oggpackB_write
oggpackB_writealign
oggpackB_writeclear
oggpackB_writecopy
oggpackB_writeinit
oggpackB_writetrunc
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writeclear
oggpack_writecopy
oggpack_writeinit
oggpack_writetrunc

Sections

.text
Size: - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detourc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gehcont
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.x30
Size: - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.x31
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x32
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d660adf7bb207ebce25ea339403c93c7

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

dnsapi

kernel32

ntdll

msvcp140

msvcrt

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 337KB

.rdata Size: - Virtual size: 103KB

.data Size: - Virtual size: 222KB

.detourc Size: - Virtual size: 4KB

.detourd Size: - Virtual size: 12B

.gehcont Size: - Virtual size: 4B

.x30 Size: - Virtual size: 7.1MB

.x31 Size: 1KB - Virtual size: 1KB

.x32 Size: 9.5MB - Virtual size: 9.5MB

.rsrc Size: 512B - Virtual size: 469B

.reloc Size: 1024B - Virtual size: 712B

.text
Size: - Virtual size: 337KB

.rdata
Size: - Virtual size: 103KB

.data
Size: - Virtual size: 222KB

.detourc
Size: - Virtual size: 4KB

.detourd
Size: - Virtual size: 12B

.gehcont
Size: - Virtual size: 4B

.x30
Size: - Virtual size: 7.1MB

.x31
Size: 1KB - Virtual size: 1KB

.x32
Size: 9.5MB - Virtual size: 9.5MB

.rsrc
Size: 512B - Virtual size: 469B

.reloc
Size: 1024B - Virtual size: 712B