0467c5bbea79245d9f726c4aa4d89b27a31c273b0cf5f36bf3e49a294b2d1882

Sharing

Copy URL Twitter E-mail

General

Target

0467c5bbea79245d9f726c4aa4d89b27a31c273b0cf5f36bf3e49a294b2d1882
Size

1.0MB
MD5

b7d4bdb0a13b87c894242b4aa5aacf89
SHA1

1cb5c8cb85e64d9308ae5e0ed50066213161c480
SHA256

0467c5bbea79245d9f726c4aa4d89b27a31c273b0cf5f36bf3e49a294b2d1882
SHA512

bddc4ea35f548b341e674475b6f33fa5229de9373b19746defecfa8f8ccbb21e867fc5b66fde2c6a19bf11d6b1b13be22f432317e1a8ac399e19cd2a23f8c480
SSDEEP

24576:wnAKtf8DndmwIgb2wxWFxP5kgztFa6prVoFYTVJ:wAm0mwIgb2w8XRkupJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0467c5bbea79245d9f726c4aa4d89b27a31c273b0cf5f36bf3e49a294b2d1882

Files

0467c5bbea79245d9f726c4aa4d89b27a31c273b0cf5f36bf3e49a294b2d1882
.dll windows:6 windows x64 arch:x64

96552a8b2dfe3528e872305e3ab53bf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
VirtualProtect
FindResourceA
LoadLibraryA
LockResource
LoadResource
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle

Exports

Exports

dog_cleanup
dog_datetime_to_dogtime
dog_decrypt
dog_dogtime_to_datetime
dog_encrypt
dog_free
dog_get_info
dog_get_sessioninfo
dog_get_size
dog_get_time
dog_get_version
dog_login
dog_login_scope
dog_logout
dog_read
dog_update
dog_vm_dyn_execute
dog_write

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 862KB - Virtual size: 861KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96552a8b2dfe3528e872305e3ab53bf0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 2KB - Virtual size: 6KB

.pdata Size: 3KB - Virtual size: 3KB

.vmp0 Size: 862KB - Virtual size: 861KB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 84KB - Virtual size: 84KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 2KB - Virtual size: 6KB

.pdata
Size: 3KB - Virtual size: 3KB

.vmp0
Size: 862KB - Virtual size: 861KB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 84KB - Virtual size: 84KB