857ea4a3da0de85cf0d3f84ebfc48b6db0585a55038574b48381a2d463b51ba4

Sharing

Copy URL

Twitter E-mail

General

Target

857ea4a3da0de85cf0d3f84ebfc48b6db0585a55038574b48381a2d463b51ba4
Size

225KB
MD5

4a70ab516cbff881e0f1b8cf2b22d7ee
SHA1

8cf1cd40eeb44485916bbb6f3aa6661c13336c73
SHA256

857ea4a3da0de85cf0d3f84ebfc48b6db0585a55038574b48381a2d463b51ba4
SHA512

d753c4b0463b3058908d6ef9f5be6698bb43442d09547ff6a5041f1f25e5236cf91d96086e3c57ea3a5026c36f6a9d4b0b02abb3a19d3625478a5cc69498be5e
SSDEEP

6144:2LZoe1S+IQh5wfWUbfKmkGo/HtCs5888888888888W88888888888:2W8SxMwfWOfK5Go/NCs588888888888G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
857ea4a3da0de85cf0d3f84ebfc48b6db0585a55038574b48381a2d463b51ba4

Files

857ea4a3da0de85cf0d3f84ebfc48b6db0585a55038574b48381a2d463b51ba4
.dll windows:5 windows x86 arch:x86

7e0d842448e2d3927b36fe6d5177b52a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

user32

LoadStringW
MessageBoxA
CharNextW
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperBuffW

kernel32

lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
SignalObjectAndWait
SetEvent
ResetEvent
MultiByteToWideChar
LeaveCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetDiskFreeSpaceW
GetDateFormatW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateEventW
CompareStringW
CloseHandle

api.a

RApiFloats_Dvd
RApiFloats_Mul
RApiFloats_Sub
RApiFloats_Abs
RApiFloats_SetNAN
RApiFloats_IsValid
RApiComplexes_Ang
RApiComplexes_Mag
RApiComplexes_Conj
RApiComplexes_Dvd_DC
RApiComplexes_Dvd_CC
RApiComplexes_Mul_CD
RApiComplexes_Mul_DC
RApiComplexes_Mul_CC
RApiComplexes_Sub_CC
RApiComplexes_Add_CC
RApiMemory_Allocate

api.d

Firestarter_Relay_GetMainFrequency_TPG
Firestarter_Relay_GetSequence_CLM
Firestarter_FourierTransform_ExtractHarmonic
Firestarter_Phasors_MulC_CC
Firestarter_Phasors_Sub
Firestarter_SignalProcessing_Derivative

Exports

Exports

RWavesLocator_CreateCalculator
RWavesLocator_CreateParallel
RWavesLocator_CreatePowerline
RWavesLocator_CreateSegment

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e0d842448e2d3927b36fe6d5177b52a

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

api.a

api.d

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 156KB

.itext Size: 1024B - Virtual size: 608B

.data Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 19KB

.idata Size: 4KB - Virtual size: 3KB

.edata Size: 512B - Virtual size: 210B

.reloc Size: 16KB - Virtual size: 15KB

.rsrc Size: 42KB - Virtual size: 42KB

.text
Size: 156KB - Virtual size: 156KB

.itext
Size: 1024B - Virtual size: 608B

.data
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 19KB

.idata
Size: 4KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 210B

.reloc
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 42KB - Virtual size: 42KB