__neko_entry_point
deflate_bound__2
deflate_buffer__5
deflate_end__1
deflate_init__1
get_adler32__1
hx_set_loader
inflate_buffer__5
inflate_end__1
inflate_init__1
set_flush_mode__2
update_adler32__4
update_crc32__4
Static task
static1
1 signatures
General
-
Target
zlib.dll
-
Size
130KB
-
MD5
df53802552ac66334866c65146e85122
-
SHA1
cd40947e394430365fb6adf92a9169b032de2083
-
SHA256
0f0a3cc161866249300e3eb0e7c938e3e4ad763c94426e7cb8a23418e5ebea53
-
SHA512
5daec76c28a8770c40daef9dd56a28056c788d590a141ca9777084540a0890f4c42101d3183514453f6b027d089a85cf59789025afd427abce1c50c3fec0aa66
-
SSDEEP
1536:zmV0AhhVV2YQiu3o8SMPJ7Q/lX1zyQ3mLBfi6BnToIfMIOvIOYNcKssWjcdUzJDM:dshP2Yvb8pO3Oi6pTBfChYXUzJDVvC
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource zlib.dll
Files
-
zlib.dll.dll windows:6 windows x86 arch:x86
2c9db726df49710fe2c9815a5654c931
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FreeLibrary
GetModuleHandleA
GetProcAddress
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
WriteFile
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetFileType
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
RtlUnwind
SetFilePointerEx
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
Exports
Exports
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ