4ee8f90c6aa1815c72fb8b5a320041ea586c004807608a91223ab24e86b89899

Sharing

Copy URL Twitter E-mail

General

Target

4ee8f90c6aa1815c72fb8b5a320041ea586c004807608a91223ab24e86b89899
Size

55KB
MD5

c9d87a91c8ac4a762033ace679603a3c
SHA1

ae445213299ac9855b51f0ed120c3514f9fac736
SHA256

4ee8f90c6aa1815c72fb8b5a320041ea586c004807608a91223ab24e86b89899
SHA512

0c257d5d1a31045c50fd912fb66abf601c74624142bde1449830c77c1806f0d31c39d56f3ac77e70a370df8643f0a90c48f5c7b39251780fecf8d0806243e1d0
SSDEEP

768:5qmVtlI0eh0E4AhdFmxi2Z6empKVp4CM1s+gkeCw774dMqxw7PNfN23AQ:5LVtehe8mxi2wpuFtCw77pN18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ee8f90c6aa1815c72fb8b5a320041ea586c004807608a91223ab24e86b89899

Files

4ee8f90c6aa1815c72fb8b5a320041ea586c004807608a91223ab24e86b89899
.dll windows:6 windows x86 arch:x86

8494b8cd0d3a160889125b57308e96da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\plcl\Projects\vcpkg\buildtrees\bzip2\x86-windows-rel\bz2.pdb

Imports

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-stdio-l1-1-0

ungetc
fwrite
fread
fopen
fgetc
fflush
ferror
fclose
__acrt_iob_func
_setmode
_fileno
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

free
malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
exit
_execute_onexit_table
_initterm

api-ms-win-crt-string-l1-1-0

isdigit

api-ms-win-crt-math-l1-1-0

_fdopen

kernel32

DisableThreadLibraryCalls
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Exports

Exports

BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8494b8cd0d3a160889125b57308e96da

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 996B

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 996B