08ad6cb09ac6f7fd1cdae4b0c0aba2edaf01e8d9d2a36209f3a044ea3efb726a

Sharing

Copy URL

Twitter E-mail

General

Target

08ad6cb09ac6f7fd1cdae4b0c0aba2edaf01e8d9d2a36209f3a044ea3efb726a
Size

60KB
MD5

4ac25f35a4bc029d5b9a5d4ac5439219
SHA1

5847c2b8c8d7b734c81f007dfabd4e17299e1a94
SHA256

08ad6cb09ac6f7fd1cdae4b0c0aba2edaf01e8d9d2a36209f3a044ea3efb726a
SHA512

630068cea83addda2b076e78bf3f11db09a1dcce063285bb4ea923d53bd7ea8b9072c50cec1067abfe33509c175d40812eee79f802e202dc173979e6aa8cebc6
SSDEEP

768:q1v7Qv47t7XTJLuCk5VQAmvjxMJzzzP2wNKk:YXTJ1qiAhzvpK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ad6cb09ac6f7fd1cdae4b0c0aba2edaf01e8d9d2a36209f3a044ea3efb726a

Files

08ad6cb09ac6f7fd1cdae4b0c0aba2edaf01e8d9d2a36209f3a044ea3efb726a
.dll windows:4 windows x86 arch:x86

7546ff2574e47d28dfaf32226e89e92b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

tsreader_sourcehelper

ord5
ord34
ord32
ord35
ord4
ord33
ord28
ord3

kernel32

GetStartupInfoA
FlushFileBuffers
SetFilePointer
SetStdHandle
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
OutputDebugStringA
lstrcpyA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
ResumeThread
CreateThread
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
ReadFile
LCMapStringA
LCMapStringW

user32

MessageBoxA
wsprintfA

Exports

Exports

DllMain
TSReader_DeInit
TSReader_GetDescription
TSReader_GetSignalString
TSReader_GetSyncLossCount
TSReader_GetTunerString
TSReader_Init
TSReader_IsPIDActive
TSReader_PIDManagement
TSReader_ParseCommandLine
TSReader_SendDiSEqC
TSReader_SetChannel
TSReader_Start
TSReader_Stop
TSReader_Tune
TSReader_TuneDialog

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7546ff2574e47d28dfaf32226e89e92b

Headers

File Characteristics

Imports

tsreader_sourcehelper

kernel32

user32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 18KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 18KB

.reloc
Size: 4KB - Virtual size: 3KB