2aec9b42ddd2f978642735cb00c36c60a325c8291f2f9eb4d25aa0fcb21a6f2a

Sharing

Copy URL Twitter E-mail

General

Target

2aec9b42ddd2f978642735cb00c36c60a325c8291f2f9eb4d25aa0fcb21a6f2a
Size

98KB
MD5

35b8df7c123c46a2b4751f25940fe0b4
SHA1

e37a2efcf796cb3d3001fbd0038705eb7e81469c
SHA256

2aec9b42ddd2f978642735cb00c36c60a325c8291f2f9eb4d25aa0fcb21a6f2a
SHA512

43ee68eb3beebd3c39036e2873c602c63a9e779033657ff63652573beccfbd80e1eba75bcb61342a06e1e81ef81cd98afac23e1d8dea61d65979bd9892ee5806
SSDEEP

1536:8WsIaDNGWYXJfd1l/WSH+5nIJCbg9Xv8Dc4daqi/ncFx0B+7S5SmJ0d4aPO3rSq9:8W+DNGTZRz+5uXoc4biLB+mi4aPKrX9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aec9b42ddd2f978642735cb00c36c60a325c8291f2f9eb4d25aa0fcb21a6f2a

Files

2aec9b42ddd2f978642735cb00c36c60a325c8291f2f9eb4d25aa0fcb21a6f2a
.dll windows:5 windows x64 arch:x64

63d677aff404e7daf204c1531ef39a15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libfftw

fftw_free
fftw_plan_dft_1d
fftw_malloc
fftw_execute
fftw_destroy_plan

kernel32

DeleteCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
GetFileType
GetStartupInfoA
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

emxCreateND_real_T
emxCreateWrapperND_real_T
emxCreateWrapper_real_T
emxCreate_real_T
emxDestroyArray_real_T
sfrmat3v_cr
sfrmat3v_cr_initialize
sfrmat3v_cr_terminate

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63d677aff404e7daf204c1531ef39a15

Headers

File Characteristics

Imports

libfftw

kernel32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 6KB - Virtual size: 10KB

.pdata Size: 2KB - Virtual size: 2KB

text Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 768B

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 6KB - Virtual size: 10KB

.pdata
Size: 2KB - Virtual size: 2KB

text
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 768B