a66bb7eb1e7f4b0f370a1f63e044b0fa003516fb29215526c31abaf48367db9f

Sharing

Copy URL

Twitter E-mail

General

Target

a66bb7eb1e7f4b0f370a1f63e044b0fa003516fb29215526c31abaf48367db9f
Size

60KB
MD5

35fa69eb0e64b560956d3177669e58f3
SHA1

82cf5818066bc75bbc4664b38deb631626fa7e53
SHA256

a66bb7eb1e7f4b0f370a1f63e044b0fa003516fb29215526c31abaf48367db9f
SHA512

5bd81345ddd0fb6b578f11cba1a749f94f2fc00dbf70461f526c7c72878904bd65d40196cd8966f9052080106fe3ee631bdf548df39b0f6104f7b7e582a9faf7
SSDEEP

768:7WQcSfC8iX+Y7TSAg+Dro9hgP5RLyhCB9tnUo9D2uQ:lb67TSA6hZ0BUoa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a66bb7eb1e7f4b0f370a1f63e044b0fa003516fb29215526c31abaf48367db9f

Files

a66bb7eb1e7f4b0f370a1f63e044b0fa003516fb29215526c31abaf48367db9f
.dll windows:4 windows x86 arch:x86

730c740ced20695dd106b232ca785e62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
IsDBCSLeadByte
CloseHandle
UnmapViewOfFile
MapViewOfFile
GetLastError
CreateFileMappingA
SetEnvironmentVariableA
FlushFileBuffers
SetStdHandle
RtlUnwind
GetStringTypeW
GetStringTypeA
GetCommandLineA
GetVersion
GetCurrentDirectoryA
SetCurrentDirectoryA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapAlloc
InterlockedDecrement
InterlockedIncrement
SetFilePointer
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA

user32

CharPrevA
CharNextA
ShowWindow
SetForegroundWindow
SendDlgItemMessageA
GetMenuItemCount
RemoveMenu
GetClassNameA
GetWindowTextA
AppendMenuA
SendMessageA
PostMessageA
PeekMessageA

Exports

Exports

ChangeDefaultSet
CommBinaryEcho
CommBinaryOut
CommInsert1Byte
CommRawOut
CommRead1Byte
CommReadRawByte
CommTextEcho
CommTextOut
GetCOMFlag
GetDefaultSet
GetKeyCode
GetKeyStr
GetNthWin
JIS2SJIS
RegWin
RussConv
RussConvStr
SJIS2EUC
SJIS2JIS
SelectNextWin
SelectWin
SetCOMFlag
SetWinList
SetWinMenu
StartTeraTerm
UnregWin

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

730c740ced20695dd106b232ca785e62

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB