61e321f7e5e8235d168ad97bdea3f5953794c678bf43750339ef459fcf5e5e39

Sharing

Copy URL Twitter E-mail

General

Target

61e321f7e5e8235d168ad97bdea3f5953794c678bf43750339ef459fcf5e5e39
Size

384KB
MD5

1486935933a627002be05147a13584c2
SHA1

b0f1eeb49b5acdc9b304918daccf7324bbb88f20
SHA256

61e321f7e5e8235d168ad97bdea3f5953794c678bf43750339ef459fcf5e5e39
SHA512

b703f44c0b7c41e5188795dd49975148583aa457575284d92f86926ae4b5367d50361ccd75b1a5a8b380d9f35a434360d8f7ba5b3b06d044ef36c4a5c5528908
SSDEEP

3072:rKrnv8HwpHOgsfZB8/f4LorZAzYBG5q4GxNwvyIA0A9N99YGD90tbl6///iPuKpc:O7vFf0segwvFMwGD90tbFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61e321f7e5e8235d168ad97bdea3f5953794c678bf43750339ef459fcf5e5e39

Files

61e321f7e5e8235d168ad97bdea3f5953794c678bf43750339ef459fcf5e5e39
.dll windows:5 windows x64 arch:x64

e4baad082e36594d9c66bcca79b87596

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libmx

mxGetM
mxGetN
mxGetPr
mxCreateDoubleMatrix_730
mxIsNumeric
mxIsComplex
mxIsSparse
mxIsEmpty
mxGetNumberOfElements
mxGetData
mxIsFinite
mxGetClassID
mxCalloc
mxCreateString
mxGetString_730
mxIsChar
mxArrayToString
mxDestroyArray

libmex

mexErrMsgTxt
mexCallMATLABWithObject

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
DecodePointer
EncodePointer
LoadLibraryA
FreeLibrary
GetProcAddress

msvcr100

__crt_debugger_hook
__dllonexit
_lock
_onexit
__clean_type_info_names_internal
_unlock
vsprintf
malloc
fclose
fread
rewind
ftell
fseek
fopen
free
memcpy
memset
sprintf
_malloc_crt
_initterm
_initterm_e
_encoded_null
_amsg_exit
__C_specific_handler
__CppXcptFilter

Exports

Exports

mexFunction

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 202KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4baad082e36594d9c66bcca79b87596

Headers

DLL Characteristics

File Characteristics

Imports

libmx

libmex

kernel32

msvcr100

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 125KB - Virtual size: 125KB

.data Size: 202KB - Virtual size: 208KB

.pdata Size: 1024B - Virtual size: 624B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 42KB - Virtual size: 42KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 125KB - Virtual size: 125KB

.data
Size: 202KB - Virtual size: 208KB

.pdata
Size: 1024B - Virtual size: 624B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 42KB - Virtual size: 42KB