a86d0297e160d47a6531b05f4dd9916ac685bb284728f870d83c66fd29e5006b

Sharing

Copy URL Twitter E-mail

General

Target

a86d0297e160d47a6531b05f4dd9916ac685bb284728f870d83c66fd29e5006b
Size

4.7MB
MD5

f8fe01a9ea11c9752b50afd4d3f80717
SHA1

9e67c6e0fd86e6f0cc0170e47b52ebfa04957c98
SHA256

a86d0297e160d47a6531b05f4dd9916ac685bb284728f870d83c66fd29e5006b
SHA512

f8c0c348142224e2dc339bce5f283642516bd5e068be4b97fd3eca5fcaa81914e539644d04763216323e3ae97c4c603257fc5fab6bea081dc66a8fa79a18224a
SSDEEP

98304:V06qoT/AuwfHQL3H2m/ltB0+KwZ4kTMeKkYm:C6qG/AuWQL3T/ltB0+KwZ4kTMe+m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a86d0297e160d47a6531b05f4dd9916ac685bb284728f870d83c66fd29e5006b

Files

a86d0297e160d47a6531b05f4dd9916ac685bb284728f870d83c66fd29e5006b
.dll windows:5 windows x86 arch:x86

e79b044c52905dffb19e1aba6c076b7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libifcoremd

for_deallocate
for_is_nan_t_
d_int_val
for_eof
for_read_seq
for_cpusec
for_cpusec_t
for_write_seq
for_stop_core
for_read_int_fmt
for_allocate
for_alloc_allocatable
for_check_mult_overflow
for_dealloc_allocatable
for_read_int_lis_xmit
for_read_int_lis
for_write_seq_fmt_xmit
for_len_trim
for_trim
for_adjustl
for_adjustr
for_write_seq_lis_xmit
for_open
for_inquire
for_close
for_rewind
for_read_seq_fmt_xmit
for_write_seq_lis
for_write_int_lis_xmit
for_cpystr
for_write_int_lis
for_read_seq_lis_xmit
for_read_seq_fmt
for_read_seq_lis
for_pause
for_write_seq_fmt
for_f90_index
for_concat
for_write_int_fmt_xmit
for_write_int_fmt
for_cpstr
for_gerror_

libifportmd

CHANGEDIRQQ
GETDRIVEDIRQQ
SYSTEMQQ
RUNQQ
PACKTIMEQQ
GETTIMI2
GETDATI2
RAND
SECNDS

libmmd

cos
pow
__libm_sse2_exp2
__libm_sse2_sin
__libm_sse2_powf
sin
__libm_sse2_sincos
__libm_sse2_log10
tanh
__libm_sse2_exp
tan
exp
log
log10
acos
__libm_sse2_tan
cot
atan
__libm_sse2_acos
asin
__libm_sse2_cbrt
__libm_sse2_log
sinh
cosh
__libm_sse2_pow
__libm_sse2_cos
__libm_sse2_atan
__powr8i4

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
memcpy
memset
memmove

svml_dispmd

__svml_round2
__svml_cbrt2
__svml_log2_mask
__svml_pow2_mask
__svml_log102
__svml_sinh2
__svml_log2
__svml_tanh2
__svml_exp2
__svml_exp2_mask
__svml_pow2
__svml_cosh2

kernel32

EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer

Exports

Exports

ABFL1
ABFL1dll
ABFL2
ABFL2dll
AG
AGdll
CCRIT
CCRITdll
CP0dll
CRITP
CRITPdll
CSATK
CSATKdll
CV2PK
CV2PKdll
CVCP
CVCPK
CVCPKdll
CVCPdll
DBDT
DBDTdll
DBFL1
DBFL1dll
DBFL2
DBFL2dll
DBFLSH
DDDP
DDDPdll
DDDT
DDDTdll
DEFL1
DEFL2
DEFLSH
DEFLSHdll
DHD1
DHD1dll
DHFL1
DHFL2
DHFLSH
DHFLSHdll
DIELEC
DIELECdll
DOTFILL
DOTFILLdll
DPDD
DPDD2
DPDD2dll
DPDDK
DPDDKdll
DPDDdll
DPDT
DPDTK
DPDTKdll
DPDTdll
DPTSATK
DPTSATKdll
DQFL2
DSFL1
DSFL2
DSFLSH
DSFLSHdll
ENERGY
ENTHAL
ENTHALdll
ENTRO
ENTROdll
ERRMSG
ESFLSH
ESFLSHdll
FGCTY
FGCTYdll
FLUIDPROPREFP
FPV
FPVdll
GERG04
GERG04dll
GETFIJ
GETFIJdll
GETKTV
GETKTVdll
GETMOD
GIBBS
GIBBSdll
HSFL1
HSFLSH
HSFLSHdll
INFO
INFOdll
LIMITK
LIMITKdll
LIMITS
LIMITSdll
LIMITX
LIMITXdll
MELTP
MELTPdll
MELTT
MELTTdll
MLTH2O
MLTH2Odll
NAME
NAMEdll
PBFLSH
PDFL1
PDFL1dll
PDFL2
PDFLSH
PDFLSHdll
PEFL1
PEFL2
PEFLSH
PEFLSHdll
PHFL1
PHFL1dll
PHFL2
PHFLSH
PHFLSHdll
PLATERD
PLATEWR
PQFL2
PQFLSH
PQFLSHdll
PREOS
PREOSdll
PRESS
PRESSdll
PSFL1
PSFL1dll
PSFL2
PSFLSH
PSFLSHdll
PUREFLD
PUREFLDdll
QMASS
QMASSdll
QMOLE
QMOLEdll
SATD
SATDdll
SATE
SATEdll
SATH
SATHdll
SATP
SATPdll
SATS
SATSdll
SATT
SATTdll
SETAGA
SETAGAdll
SETKTV
SETKTVdll
SETMIX
SETMIXdll
SETMOD
SETMODdll
SETREF
SETREFdll
SETUP
SETUP0
SETUPdll
SOLVEPFR
SUBLP
SUBLPdll
SUBLT
SUBLTdll
SURFT
SURFTdll
SURTEN
SURTENdll
TBFLSH
TDFL2
TDFLSH
TDFLSHdll
TEFL1
TEFL2
TEFLSH
TEFLSHdll
THERM
THERM0
THERM0dll
THERM2
THERM2dll
THERM3
THERM3dll
THERMdll
THFL1
THFL2
THFLSH
THFLSHdll
TPFL2
TPFLSH
TPFLSHdll
TPRHO
TPRHOdll
TQFL2
TQFLSH
TQFLSHdll
TRNPRP
TRNPRPdll
TSFL1
TSFL2
TSFLSH
TSFLSHdll
VIRB
VIRBdll
VIRC
VIRCdll
WMOL
WMOLdll
XMASS
XMASSdll
XMOLE
XMOLEdll

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.4MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e79b044c52905dffb19e1aba6c076b7a

Headers

DLL Characteristics

File Characteristics

Imports

libifcoremd

libifportmd

libmmd

msvcr100

svml_dispmd

kernel32

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 183KB - Virtual size: 183KB

.data Size: 2.4MB - Virtual size: 10.3MB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 148KB - Virtual size: 147KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 183KB - Virtual size: 183KB

.data
Size: 2.4MB - Virtual size: 10.3MB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 148KB - Virtual size: 147KB