db467d81dde1a2226d3bdd0981d39e5df5364210a957e635c3b1b15a76710cad

Sharing

Copy URL

Twitter E-mail

General

Target

db467d81dde1a2226d3bdd0981d39e5df5364210a957e635c3b1b15a76710cad
Size

385KB
MD5

39b0b7f972838d3037dc9290d80828c0
SHA1

87fe4167231f4f2664ac9e790faf3360ced11045
SHA256

db467d81dde1a2226d3bdd0981d39e5df5364210a957e635c3b1b15a76710cad
SHA512

87e7c667402d186feda4db39b4309c7c4e58d17c63d4add74e1f2183a947222def5b4478fd4241c734cf0905625ceb5c7c1f56420d66cc8e5df6872f9d4a6ce2
SSDEEP

6144:xTr00JKi84yVRrTV2DNjhjVJr/NiEEEEEEUled7mmXtcd0rwf5m:FZJKTyhjjevtK5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db467d81dde1a2226d3bdd0981d39e5df5364210a957e635c3b1b15a76710cad

Files

db467d81dde1a2226d3bdd0981d39e5df5364210a957e635c3b1b15a76710cad
.dll windows:6 windows x64 arch:x64

f2d3745ae2cdf7afc5b30611c32d439e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

vtkjpeg-9.2

vtkjpeg_jpeg_resync_to_restart
vtkjpeg_jpeg_destroy
vtkjpeg_jpeg_finish_compress
vtkjpeg_jpeg_abort
vtkjpeg_jpeg_start_compress
vtkjpeg_jpeg_suppress_tables
vtkjpeg_jpeg_set_quality
vtkjpeg_jpeg_set_colorspace
vtkjpeg_jpeg_std_error
vtkjpeg_jpeg_write_scanlines
vtkjpeg_jpeg_has_multiple_scans
vtkjpeg_jpeg_set_defaults
vtkjpeg_jpeg_CreateDecompress
vtkjpeg_jpeg_CreateCompress
vtkjpeg_jpeg_write_raw_data
vtkjpeg_jpeg_read_raw_data
vtkjpeg_jpeg_finish_decompress
vtkjpeg_jpeg_read_scanlines
vtkjpeg_jpeg_start_decompress
vtkjpeg_jpeg_read_header
vtkjpeg_jpeg_write_tables

vtkzlib-9.2

vtkzlib_deflate
vtkzlib_deflateEnd
vtkzlib_inflate
vtkzlib_inflateEnd
vtkzlib_deflateReset
vtkzlib_deflateParams
vtkzlib_inflateReset
vtkzlib_deflateInit_
vtkzlib_inflateInit_

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MapViewOfFile
GetLastError
CloseHandle
WriteFile
UnmapViewOfFile
SetFilePointer
ReadFile
GetFileSizeEx
CreateFileW
CreateFileA
CreateFileMappingA
WideCharToMultiByte

vcruntime140

memcpy
memset
memmove
longjmp
strchr
memcmp
__intrinsic_setjmp
__std_type_info_destroy_list
__C_specific_handler

api-ms-win-crt-math-l1-1-0

pow
floor

api-ms-win-crt-string-l1-1-0

strcmp
isprint
strncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
fputs
__stdio_common_vsprintf
__acrt_iob_func
fputc

api-ms-win-crt-utility-l1-1-0

bsearch
qsort

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
calloc

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_execute_onexit_table
_initterm
_cexit
_initterm_e
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll

Exports

Exports

vtktiff_TIFFAccessTagMethods
vtktiff_TIFFCIELabToRGBInit
vtktiff_TIFFCIELabToXYZ
vtktiff_TIFFCheckTile
vtktiff_TIFFCheckpointDirectory
vtktiff_TIFFCleanup
vtktiff_TIFFClientOpen
vtktiff_TIFFClientdata
vtktiff_TIFFClose
vtktiff_TIFFComputeStrip
vtktiff_TIFFComputeTile
vtktiff_TIFFCreateCustomDirectory
vtktiff_TIFFCreateDirectory
vtktiff_TIFFCreateEXIFDirectory
vtktiff_TIFFCreateGPSDirectory
vtktiff_TIFFCurrentDirOffset
vtktiff_TIFFCurrentDirectory
vtktiff_TIFFCurrentRow
vtktiff_TIFFCurrentStrip
vtktiff_TIFFCurrentTile
vtktiff_TIFFDataWidth
vtktiff_TIFFDefaultDirectory
vtktiff_TIFFDefaultStripSize
vtktiff_TIFFDefaultTileSize
vtktiff_TIFFDeferStrileArrayWriting
vtktiff_TIFFError
vtktiff_TIFFErrorExt
vtktiff_TIFFFdOpen
vtktiff_TIFFFieldDataType
vtktiff_TIFFFieldName
vtktiff_TIFFFieldPassCount
vtktiff_TIFFFieldReadCount
vtktiff_TIFFFieldTag
vtktiff_TIFFFieldWithName
vtktiff_TIFFFieldWithTag
vtktiff_TIFFFieldWriteCount
vtktiff_TIFFFileName
vtktiff_TIFFFileno
vtktiff_TIFFFindCODEC
vtktiff_TIFFFindField
vtktiff_TIFFFlush
vtktiff_TIFFFlushData
vtktiff_TIFFFlushData1
vtktiff_TIFFForceStrileArrayWriting
vtktiff_TIFFFreeDirectory
vtktiff_TIFFGetBitRevTable
vtktiff_TIFFGetClientInfo
vtktiff_TIFFGetCloseProc
vtktiff_TIFFGetConfiguredCODECs
vtktiff_TIFFGetField
vtktiff_TIFFGetFieldDefaulted
vtktiff_TIFFGetMapFileProc
vtktiff_TIFFGetMode
vtktiff_TIFFGetReadProc
vtktiff_TIFFGetSeekProc
vtktiff_TIFFGetSizeProc
vtktiff_TIFFGetStrileByteCount
vtktiff_TIFFGetStrileByteCountWithErr
vtktiff_TIFFGetStrileOffset
vtktiff_TIFFGetStrileOffsetWithErr
vtktiff_TIFFGetTagListCount
vtktiff_TIFFGetTagListEntry
vtktiff_TIFFGetUnmapFileProc
vtktiff_TIFFGetVersion
vtktiff_TIFFGetWriteProc
vtktiff_TIFFInitCCITTFax3
vtktiff_TIFFInitCCITTFax4
vtktiff_TIFFInitCCITTRLE
vtktiff_TIFFInitCCITTRLEW
vtktiff_TIFFInitDumpMode
vtktiff_TIFFInitJPEG
vtktiff_TIFFInitNeXT
vtktiff_TIFFInitOJPEG
vtktiff_TIFFInitPackBits
vtktiff_TIFFInitThunderScan
vtktiff_TIFFInitZIP
vtktiff_TIFFIsBigEndian
vtktiff_TIFFIsByteSwapped
vtktiff_TIFFIsCODECConfigured
vtktiff_TIFFIsMSB2LSB
vtktiff_TIFFIsTiled
vtktiff_TIFFIsUpSampled
vtktiff_TIFFJPEGIsFullStripRequired
vtktiff_TIFFLastDirectory
vtktiff_TIFFMergeFieldInfo
vtktiff_TIFFNumberOfDirectories
vtktiff_TIFFNumberOfStrips
vtktiff_TIFFNumberOfTiles
vtktiff_TIFFOpen
vtktiff_TIFFOpenW
vtktiff_TIFFPrintDirectory
vtktiff_TIFFRGBAImageBegin
vtktiff_TIFFRGBAImageEnd
vtktiff_TIFFRGBAImageGet
vtktiff_TIFFRGBAImageOK
vtktiff_TIFFRasterScanlineSize
vtktiff_TIFFRasterScanlineSize64
vtktiff_TIFFRawStripSize
vtktiff_TIFFRawStripSize64
vtktiff_TIFFReadBufferSetup
vtktiff_TIFFReadCustomDirectory
vtktiff_TIFFReadDirectory
vtktiff_TIFFReadEXIFDirectory
vtktiff_TIFFReadEncodedStrip
vtktiff_TIFFReadEncodedTile
vtktiff_TIFFReadFromUserBuffer
vtktiff_TIFFReadGPSDirectory
vtktiff_TIFFReadRGBAImage
vtktiff_TIFFReadRGBAImageOriented
vtktiff_TIFFReadRGBAStrip
vtktiff_TIFFReadRGBAStripExt
vtktiff_TIFFReadRGBATile
vtktiff_TIFFReadRGBATileExt
vtktiff_TIFFReadRawStrip
vtktiff_TIFFReadRawTile
vtktiff_TIFFReadScanline
vtktiff_TIFFReadTile
vtktiff_TIFFRegisterCODEC
vtktiff_TIFFReverseBits
vtktiff_TIFFRewriteDirectory
vtktiff_TIFFScanlineSize
vtktiff_TIFFScanlineSize64
vtktiff_TIFFSetClientInfo
vtktiff_TIFFSetClientdata
vtktiff_TIFFSetCompressionScheme
vtktiff_TIFFSetDirectory
vtktiff_TIFFSetErrorHandler
vtktiff_TIFFSetErrorHandlerExt
vtktiff_TIFFSetField
vtktiff_TIFFSetFileName
vtktiff_TIFFSetFileno
vtktiff_TIFFSetMode
vtktiff_TIFFSetSubDirectory
vtktiff_TIFFSetTagExtender
vtktiff_TIFFSetWarningHandler
vtktiff_TIFFSetWarningHandlerExt
vtktiff_TIFFSetWriteOffset
vtktiff_TIFFSetupStrips
vtktiff_TIFFStripSize
vtktiff_TIFFStripSize64
vtktiff_TIFFSwabArrayOfDouble
vtktiff_TIFFSwabArrayOfFloat
vtktiff_TIFFSwabArrayOfLong
vtktiff_TIFFSwabArrayOfLong8
vtktiff_TIFFSwabArrayOfShort
vtktiff_TIFFSwabArrayOfTriples
vtktiff_TIFFSwabDouble
vtktiff_TIFFSwabFloat
vtktiff_TIFFSwabLong
vtktiff_TIFFSwabLong8
vtktiff_TIFFSwabShort
vtktiff_TIFFTileRowSize
vtktiff_TIFFTileRowSize64
vtktiff_TIFFTileSize
vtktiff_TIFFTileSize64
vtktiff_TIFFUnRegisterCODEC
vtktiff_TIFFUnlinkDirectory
vtktiff_TIFFUnsetField
vtktiff_TIFFVGetField
vtktiff_TIFFVGetFieldDefaulted
vtktiff_TIFFVSetField
vtktiff_TIFFVStripSize
vtktiff_TIFFVStripSize64
vtktiff_TIFFVTileSize
vtktiff_TIFFVTileSize64
vtktiff_TIFFWarning
vtktiff_TIFFWarningExt
vtktiff_TIFFWriteBufferSetup
vtktiff_TIFFWriteCheck
vtktiff_TIFFWriteCustomDirectory
vtktiff_TIFFWriteDirectory
vtktiff_TIFFWriteEncodedStrip
vtktiff_TIFFWriteEncodedTile
vtktiff_TIFFWriteRawStrip
vtktiff_TIFFWriteRawTile
vtktiff_TIFFWriteScanline
vtktiff_TIFFWriteTile
vtktiff_TIFFXYZToRGB
vtktiff_TIFFYCbCrToRGBInit
vtktiff_TIFFYCbCrtoRGB
vtktiff__TIFFBuiltinCODECS
vtktiff__TIFFCastUInt64ToSSize
vtktiff__TIFFCheckMalloc
vtktiff__TIFFCheckRealloc
vtktiff__TIFFClampDoubleToFloat
vtktiff__TIFFDataSize
vtktiff__TIFFDefaultStripSize
vtktiff__TIFFDefaultTileSize
vtktiff__TIFFGetExifFields
vtktiff__TIFFGetGpsFields
vtktiff__TIFFMultiply32
vtktiff__TIFFMultiply64
vtktiff__TIFFMultiplySSize
vtktiff__TIFFNoPostDecode
vtktiff__TIFFNoPreCode
vtktiff__TIFFNoRowDecode
vtktiff__TIFFNoRowEncode
vtktiff__TIFFNoSeek
vtktiff__TIFFNoStripDecode
vtktiff__TIFFNoStripEncode
vtktiff__TIFFNoTileDecode
vtktiff__TIFFNoTileEncode
vtktiff__TIFFReadEncodedStripAndAllocBuffer
vtktiff__TIFFReadEncodedTileAndAllocBuffer
vtktiff__TIFFReadTileAndAllocBuffer
vtktiff__TIFFRewriteField
vtktiff__TIFFSeekOK
vtktiff__TIFFSetDefaultCompressionState
vtktiff__TIFFSetGetFieldSize
vtktiff__TIFFSwab16BitData
vtktiff__TIFFSwab24BitData
vtktiff__TIFFSwab32BitData
vtktiff__TIFFSwab64BitData
vtktiff__TIFFUInt64ToDouble
vtktiff__TIFFUInt64ToFloat
vtktiff__TIFFcalloc
vtktiff__TIFFerrorHandler
vtktiff__TIFFerrorHandlerExt
vtktiff__TIFFfree
vtktiff__TIFFgetMode
vtktiff__TIFFmalloc
vtktiff__TIFFmemcmp
vtktiff__TIFFmemcpy
vtktiff__TIFFmemset
vtktiff__TIFFprintAscii
vtktiff__TIFFprintAsciiTag
vtktiff__TIFFrealloc
vtktiff__TIFFsetByteArray
vtktiff__TIFFsetDoubleArray
vtktiff__TIFFsetFloatArray
vtktiff__TIFFsetLongArray
vtktiff__TIFFsetShortArray
vtktiff__TIFFsetString
vtktiff__TIFFwarningHandler
vtktiff__TIFFwarningHandlerExt

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2d3745ae2cdf7afc5b30611c32d439e

Headers

DLL Characteristics

File Characteristics

Imports

vtkjpeg-9.2

vtkzlib-9.2

kernel32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 204KB - Virtual size: 203KB

.rdata Size: 169KB - Virtual size: 169KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 9KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 848B

.text
Size: 204KB - Virtual size: 203KB

.rdata
Size: 169KB - Virtual size: 169KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 848B