c168702519813d227a583d323ad0faa680746ea2a210658cfac993d2e466e86e

Sharing

Copy URL Twitter E-mail

General

Target

c168702519813d227a583d323ad0faa680746ea2a210658cfac993d2e466e86e
Size

40KB
MD5

7c42ec77dc817677514f05ed6555919a
SHA1

ed42dc58ed59200d2d9de15d686d916af53bbb72
SHA256

c168702519813d227a583d323ad0faa680746ea2a210658cfac993d2e466e86e
SHA512

8c56b8adf753a35804160de37289984c5d53826a560a77d7442cd88c6aa1be611198b7670d3a687b497b6cba1b3e1195242cc6722e3990f109efa28c5241837d
SSDEEP

384:IPZuiln8CQj49Z0lCVCN45HYVrHpftptrXRzeF+oAhm330/:aZuih8tj49v5YFJfZLBeJyC0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c168702519813d227a583d323ad0faa680746ea2a210658cfac993d2e466e86e

Files

c168702519813d227a583d323ad0faa680746ea2a210658cfac993d2e466e86e
.dll windows:4 windows x86 arch:x86

3696e3e7d8dbb642bf7183a0dcdc5e8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord342
ord823
ord1182
ord3663
ord798
ord533
ord825
ord800
ord1253
ord2764
ord537
ord1140
ord5440
ord6383
ord5450
ord6394
ord535
ord1168

msvcrt

_except_handler3
?terminate@@YAXXZ
free
_initterm
malloc
_adjust_fdiv
_CIacos
atoi
atof
_mbsrchr
__CxxFrameHandler

kernel32

GetModuleFileNameA

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z

Exports

Exports

??0JWCF2@@QAE@XZ
??1JWCF2@@UAE@XZ
??_7JWCF2@@6B@
?ArcToPolyLine@JWCF2@@QAEXABUtag_CF2_ARC@@AAUtag_CF2_POLYLINE@@@Z
?ClearDataArray@JWCF2@@AAEXXZ
?Init_Data@JWCF2@@AAEXXZ
?OpenFile@JWCF2@@QAEHPBD@Z
?Read_Arc@JWCF2@@QAEHVCString@@AAUtag_CF2_ARC@@@Z
?Read_LL@JWCF2@@QAEHVCString@@@Z
?Read_Line@JWCF2@@QAEHVCString@@AAUtag_CF2_POLYLINE@@@Z
?Read_Scale@JWCF2@@QAEHVCString@@@Z
?Read_Text@JWCF2@@QAEHVCString@@AAUtag_CF2_TEXT@@@Z
?Read_UI_UM@JWCF2@@QAEHVCString@@@Z
?Read_UR@JWCF2@@QAEHVCString@@@Z
?Rotate@JWCF2@@AAEXAAN0NNNNN@Z
?RotateAngle@JWCF2@@AAENNNNNNN@Z
?RotateAngle@JWCF2@@AAENNNNNNNH@Z

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3696e3e7d8dbb642bf7183a0dcdc5e8e

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

msvcp60

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 136B

.rsrc Size: 4KB - Virtual size: 928B

.reloc Size: 4KB - Virtual size: 668B

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 136B

.rsrc
Size: 4KB - Virtual size: 928B

.reloc
Size: 4KB - Virtual size: 668B