231ff0a9f8d3d4874bcfe470dab7de0edec97fb62f35ce4f6c141e0eafc98134

Sharing

Copy URL Twitter E-mail

General

Target

231ff0a9f8d3d4874bcfe470dab7de0edec97fb62f35ce4f6c141e0eafc98134
Size

72KB
MD5

b15d9adf8246c4b120ade6f8808c8488
SHA1

ff0a160fe172f2a3a67011dc1463bc64ae8976f3
SHA256

231ff0a9f8d3d4874bcfe470dab7de0edec97fb62f35ce4f6c141e0eafc98134
SHA512

2708314f537745c4fc80aa86cdf603ee2761c732653ad540d9a0c6f6cefc545239ff2f4b925c20af2bf3115baecb0fe8b75509d798ed04a858df7ccb85f26337
SSDEEP

768:OI8mkisqfd21hH7axdcERDaR1GGwS/5BMrNtnfdKlTTcG+sGZnVFXevFVajZbP:OUy3H+VER1/7Mr1idb2IvGjZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
231ff0a9f8d3d4874bcfe470dab7de0edec97fb62f35ce4f6c141e0eafc98134

Files

231ff0a9f8d3d4874bcfe470dab7de0edec97fb62f35ce4f6c141e0eafc98134
.dll windows:4 windows x86 arch:x86

4f28ada092c1969c66fa28976dd1987b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msobj10.pdb

Imports

msvcr70

bsearch
wprintf
__security_error_handler
wcslen
_onexit
_initterm
_adjust_fdiv
_except_handler3
strtoul
isprint
_sopen
_read
_strnicmp
_stricmp
_open
_close
_write
_lseek
_tell
ctime
fputs
strncmp
fputc
sprintf
sscanf
atoi
strrchr
_splitpath
strchr
free
malloc
__unDName
_iob
fprintf
printf
strncpy
__dllonexit
_purecall

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
HeapDestroy
HeapCreate
InterlockedDecrement
InterlockedIncrement
SetLastError
GetTempPathA
GetTempFileNameA
GetLastError
WriteFile
DeleteFileA
GetSystemInfo
VirtualFree
VirtualAlloc
UnmapViewOfFile
HeapFree
HeapAlloc
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
CloseHandle
DisableThreadLibraryCalls

Exports

Exports

?FCreate2@ObjectCode@objf@@SA_NAAV?$RefPtr@VObjectCode@objf@@@@KPBD1KK@Z
?FCreate@Image@objf@@SA_NAAV?$RefPtr@UImage@objf@@@@KPBD@Z
?FCreate@Image@objf@@SA_NAAV?$RefPtr@UImage@objf@@@@PAEJK@Z
?FCreate@Library@objf@@SA_NAAV?$RefPtr@ULibrary@objf@@@@KPBD@Z
?FCreate@ObjectCode@objf@@SA_NAAV?$RefPtr@VObjectCode@objf@@@@KPBD1@Z
?FCreateFromBytes@ObjectCode@objf@@SA_NAAV?$RefPtr@VObjectCode@objf@@@@KPAEKPBD2KK@Z
?FCreateReader@IDebugSSectionReader@@SA_NPAEIPAPAV1@K@Z
?FCreateWriter@IDebugSSectionWriter@@SA_N_NPAPAV1@K0@Z
?get@FunctionSymbols@@SA_NAAV?$RefPtr@VSection@objf@@@@PAPAU1@@Z
?get@FunctionSymbols@@SA_NPADPAVObjectCode@objf@@PAPAU1@@Z
ESVGet
ESVNext
ESVRelease
ESVReset
FSGetEnumLocals
FSGetEnumParams
FSGetFrameInfo
FSRelease
FuncSymsGet
OCRelease
ObjectCodeGet
SVName
SVOffBP
SVRelease
SVTypeIndex

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f28ada092c1969c66fa28976dd1987b

Headers

File Characteristics

PDB Paths

Imports

msvcr70

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 54KB

.data Size: 4KB - Virtual size: 428B

.rsrc Size: 4KB - Virtual size: 952B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 56KB - Virtual size: 54KB

.data
Size: 4KB - Virtual size: 428B

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 4KB - Virtual size: 3KB