a5b4e01f37c9b693eef8910c7ad1345b7a9f2ebcfa666047e87165cd248abb10

Sharing

Copy URL Twitter E-mail

General

Target

a5b4e01f37c9b693eef8910c7ad1345b7a9f2ebcfa666047e87165cd248abb10
Size

13KB
MD5

86ac6104e25ff1d687483ae2dbc07a99
SHA1

10a3181e39779beddc72b0d32fe2e828ab946b0c
SHA256

a5b4e01f37c9b693eef8910c7ad1345b7a9f2ebcfa666047e87165cd248abb10
SHA512

f48c9fbe4a56402736a00dbdc069e2b445dd9ff70dd8f8a6015211e0c6367444935a6bb0f74fed1897fae871344ede9659f1ec3aefba93e958c296339d682bb0
SSDEEP

192:aMp2BV9wRgVTAnQ+o6ZIVqTyOEmXThu7wO7c6kvMXe699DCf3X/uDPO2:pQBVqRgV0nTbIVqPjhuS6kv7699Yvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b4e01f37c9b693eef8910c7ad1345b7a9f2ebcfa666047e87165cd248abb10

Files

a5b4e01f37c9b693eef8910c7ad1345b7a9f2ebcfa666047e87165cd248abb10
.dll windows:5 windows x86 arch:x86

1ea39505d8ad52933fdcad7037164fcf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Parent
CM_Get_DevNode_Status
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDW

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
GetProcAddress
lstrcmpiW
LoadLibraryW
EncodePointer

msvcp120

?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z

msvcr120

calloc
free
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
memmove
_CxxThrowException
__CxxFrameHandler3
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__clean_type_info_names_internal
_except_handler4_common

Exports

Exports

MCCopyDevNodeBusDescription
MCCopyDevNodeProperty
MCCreateDevTree
MCDestroyDevTree
MCEnumDevNodes
MCFreeDevNodeProperty
MCGetDevNodeChild
MCGetDevNodeDisplayName
MCGetDevNodeHwIDs
MCGetDevNodeID
MCGetDevNodeParent
MCGetDevNodeSibling
MCGetDevNodeStatus
MCGetDevTreeRoot

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ea39505d8ad52933fdcad7037164fcf

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

msvcp120

msvcr120

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 868B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 448B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 868B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 448B