2e459e2e86cbbebe92d44126d8aa72b088e40cbc59a29538c3658acb66dbf62e

Sharing

Copy URL Twitter E-mail

General

Target

2e459e2e86cbbebe92d44126d8aa72b088e40cbc59a29538c3658acb66dbf62e
Size

104KB
MD5

bde84e2885749cb6b0fcc46c201dc58d
SHA1

b9b9b317227eace580cb12ef6bf819bfcc65c017
SHA256

2e459e2e86cbbebe92d44126d8aa72b088e40cbc59a29538c3658acb66dbf62e
SHA512

e0dd9c9483858afba80fb1175e3a0b7b2d06bdbac34e2272e10b4fe7ff5693ceb82c3e9d76785ff05de561ce1ab4033098b583b1d7b3d782b2d7edec53ce071c
SSDEEP

1536:MK30U2US8RBe9SHaC/tSmgHvqYHgd9JmRVPdGcDFhBwts8jcd/1AtUSQe:MKHR+SVt50yi8DuIY/1AtUk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e459e2e86cbbebe92d44126d8aa72b088e40cbc59a29538c3658acb66dbf62e

Files

2e459e2e86cbbebe92d44126d8aa72b088e40cbc59a29538c3658acb66dbf62e
.dll windows:5 windows x86 arch:x86

8f02a6650390e3de20cd8713f47ca2dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\builds\build-sourcemod-msvc12\windows-1.7\OUTPUT\extensions\topmenus\topmenus.ext\topmenus.ext.pdb

Imports

kernel32

EncodePointer
DecodePointer
IsProcessorFeaturePresent
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetCurrentThreadId
RaiseException
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
DeleteCriticalSection
GetFileType
GetStartupInfoW
SetLastError
HeapSize
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
CloseHandle
SetStdHandle
WriteConsoleW
CreateFileW

Exports

Exports

GetSMExtAPI

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f02a6650390e3de20cd8713f47ca2dd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 5KB - Virtual size: 4KB