93a2c5900f4e6b0a34bf0ea56a756f486e40c35de3ee17cbab7ba756868fd095

Sharing

Copy URL Twitter E-mail

General

Target

93a2c5900f4e6b0a34bf0ea56a756f486e40c35de3ee17cbab7ba756868fd095
Size

290KB
MD5

8dc062a0ed6b5abf0e83b803af0269e8
SHA1

ca396c2a42bc2956a952c89f5528615269a2061e
SHA256

93a2c5900f4e6b0a34bf0ea56a756f486e40c35de3ee17cbab7ba756868fd095
SHA512

a23264b2d502b931b11666c128b86a59189bbcb846d506d786dee193efc1f7d5aa894abf827a2e8057d57ddd7bc233290b6e1af201cee5df861195ee327daebc
SSDEEP

3072:sst7iW2nMQKekO0k7Jy64nfrHdP4pNSGfU3:Dt7GNSGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93a2c5900f4e6b0a34bf0ea56a756f486e40c35de3ee17cbab7ba756868fd095

Files

93a2c5900f4e6b0a34bf0ea56a756f486e40c35de3ee17cbab7ba756868fd095
.dll windows:6 windows x86 arch:x86

0817158c1457febcc172402cb9e6db53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\NB\Desktop\Dll1\Release\libexpat.pdb

Imports

ws2_32

closesocket
inet_addr
connect
inet_ntoa
recv
send
socket
gethostbyname
WSAStartup
WSACleanup
htons

kernel32

IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
CreateFileA
GetFileSize
ReadFile
SetFilePointer
CloseHandle
Sleep
VirtualAlloc
VirtualFree
UnhandledExceptionFilter

vcruntime140

__std_type_info_destroy_list
memset
strstr
strrchr
_except_handler4_common

api-ms-win-crt-string-l1-1-0

isalpha

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
fwrite
fopen
fclose
__stdio_common_vsscanf

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table

Exports

Exports

XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data
.rdata
.reloc
.rsrc/1033/DIALOG/105
.rsrc/1033/DIALOG/111
.rsrc/1033/GROUP_ICON/103
.rsrc/1033/ICON/1.ico
.rsrc/1033/MANIFEST/1
.xml
.rsrc/1033/version.txt
.rsrc/2052/version.txt
.text

Sharing

General

Malware Config

Signatures

Files

0817158c1457febcc172402cb9e6db53

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 268KB - Virtual size: 268KB

.reloc Size: 512B - Virtual size: 460B

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 268KB - Virtual size: 268KB

.reloc
Size: 512B - Virtual size: 460B