4c7098f4e0032a7d69c6607a5f192dfb0756a9c20fc1661a33270b3d1d7073ae

General

Target

4c7098f4e0032a7d69c6607a5f192dfb0756a9c20fc1661a33270b3d1d7073ae
Size

44KB
MD5

5c24260b93e415d584b37ab00ba03a50
SHA1

538fabc9cfe07f5e19b4c33d99c26920efd08908
SHA256

4c7098f4e0032a7d69c6607a5f192dfb0756a9c20fc1661a33270b3d1d7073ae
SHA512

c31b7d2ad5284dea1e9c15325a322c213fbc0869ff5ec63ce31e61d80f7b303492f9e9681ea27eeb70610ad6945e6ab225463212a955ac342f89ddf3fbf06763
SSDEEP

384:On+KtjelqNWndR1r5Q1MALcioU1Likau1dTe5azcIZrhJ6dOjZ:On+Ktj0qYdR1NyMALBoU1VF1daMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7098f4e0032a7d69c6607a5f192dfb0756a9c20fc1661a33270b3d1d7073ae

Files

4c7098f4e0032a7d69c6607a5f192dfb0756a9c20fc1661a33270b3d1d7073ae
.dll windows:4 windows x86 arch:x86

f061e4a45de8e717e6f228591be651e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

x_funms

X_Receive_Exchange_List
X_Destroy_Sorted_Vector_List
X_Handle_Message
X_Vec_Get_as_Vchar
X_Put_To_Exchange_List
X_Clear_Exchange_List
X_Vec_Assign_from_Data_Structure
X_Vec_Assign_to_Data_Structure
X_Vec_Compare
X_Make_Automatic_Connection
X_Save_Remembered_Values
X_Function_End
X_Vec_Set_from_Vchar
X_Vec_Set_from_Double
X_Vec_Set_from_SysVar
X_Vec_Assign
X_Present_Panel
X_Reset_Function_Mode
X_Get_Text_String
X_Fatal_Error
X_Trace
X_Function_Start
X_Issue_Message_VChar_Ptrs
X_Vec_Null

x_pdfms

X_PDF_Execute_IO_Module
X_PDF_HeapListInsert
X_PDF_Execute_Function
XX_PDF_Allocate_Memory_Heap
X_PDF_HeapListRemove
XX_PDF_Free_Memory_Heap

x_bifms

X_BuiltIn_044
X_BuiltIn_003

msvcrt

memcpy
strcpy
free
_initterm
memset
_adjust_fdiv
strcmp
malloc
memcmp

kernel32

HeapDestroy
HeapCreate

Exports

Exports

COMP_Get_Module_Info
X_GetIdentificationPtr
X_Run_Function_DWDET1
X_Run_Process_DWDET1

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f061e4a45de8e717e6f228591be651e5

Headers

File Characteristics

Imports

x_funms

x_pdfms

x_bifms

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 12KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 850B

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 850B