62cfb48de1b8e53a3df0087b537fb349720310d9325df608219250cc7fe84a49

Sharing

Copy URL Twitter E-mail

General

Target

62cfb48de1b8e53a3df0087b537fb349720310d9325df608219250cc7fe84a49
Size

54KB
MD5

897da373704fe357925b0e32cb470df1
SHA1

cc250278589df000be3ebccda926832c97c19182
SHA256

62cfb48de1b8e53a3df0087b537fb349720310d9325df608219250cc7fe84a49
SHA512

be60aea1e25e94d9b397fec22295a1b154e5be93e5d2a311e221cf289c8dff540701119334725175f3e10ea2fda0aab1dfda22568629bc91e2903b8a2e72421b
SSDEEP

1536:PaeytMc4YYdOEponTn9vnenJtpsQfEI5:PadMc4YYdFpoT9veJtpsQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62cfb48de1b8e53a3df0087b537fb349720310d9325df608219250cc7fe84a49

Files

62cfb48de1b8e53a3df0087b537fb349720310d9325df608219250cc7fe84a49
.dll windows:4 windows x86 arch:x86

52dfbc7dc110538b161ef8292d85d4f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
calloc
free
fwrite
malloc
strncmp
abort
vfprintf

Exports

Exports

__header
_start
ape_parseheaderbuf
apply_filter_1280_15
apply_filter_16_11
apply_filter_256_13
apply_filter_32_10
apply_filter_64_11
bs_clz_tab
bs_log2_tab
ci
codec_calloc
codec_free
codec_init
codec_main
codec_malloc
codec_realloc
codec_run
codec_set_replaygain
codec_start
decode_chunk
entropy_decode
init_entropy_decoder
init_filter_1280_15
init_filter_16_11
init_filter_256_13
init_filter_32_10
init_filter_64_11
init_frame_decoder
init_predictor_decoder
memchr
memcmp
memcpy
memmove
memset
predictor_decode_mono
predictor_decode_stereo
qsort
strcat
strcmp
strcpy
strlen

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 150KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52dfbc7dc110538b161ef8292d85d4f6

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 44KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 150KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 44KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 150KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 1KB - Virtual size: 1KB