1727e6302d06f916aa0878ee151731a0511c1d526e418e0d43d98398b9f6b314

Sharing

Copy URL Twitter E-mail

General

Target

1727e6302d06f916aa0878ee151731a0511c1d526e418e0d43d98398b9f6b314
Size

45KB
MD5

cdde5cc00423e9e726686f4b131479a6
SHA1

1d63a368ba0b7edc13b81d964fddb943ccd0b35a
SHA256

1727e6302d06f916aa0878ee151731a0511c1d526e418e0d43d98398b9f6b314
SHA512

aec85d949cfab1fbe5a6d4a8ec6cdbe8450e358c3d26dba8864d2cee26aae7c6731124422b4cb68e19236b8ebaa5110592ff846de41adbee47230c2a2283874c
SSDEEP

768:+u0pRIQXNeqClmwxdz+v3qVW5G6Z8RPiNhChGeZftBXBFbIBLJapaqH:+vEq8P+vqYFZ8RPiXCTftBXBFbIBLJan

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1727e6302d06f916aa0878ee151731a0511c1d526e418e0d43d98398b9f6b314

Files

1727e6302d06f916aa0878ee151731a0511c1d526e418e0d43d98398b9f6b314
.dll windows:6 windows x86 arch:x86

147e9fcd11e19e6b022ed3d935165cb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-crt-heap-l1-1-0

free
realloc
calloc
malloc

api-ms-win-crt-runtime-l1-1-0

_getpid
_errno
strerror_s
abort
strerror
_wassert

api-ms-win-crt-stdio-l1-1-0

_open
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
strcspn
strlen
isdigit
strncpy
strcpy
_strdup
strcat

ws2_32

getaddrinfo
freeaddrinfo
getnameinfo
ntohl
htonl

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-filesystem-l1-1-0

_findclose
_stat32
_findnext32
_findfirst32

vcruntime140

memmove
memcmp
strchr
memcpy
strrchr

Exports

Exports

k5_base64_decode
k5_base64_encode
k5_bcmp
k5_buf_add
k5_buf_add_fmt
k5_buf_add_len
k5_buf_add_vfmt
k5_buf_free
k5_buf_get_space
k5_buf_init_dynamic
k5_buf_init_dynamic_zap
k5_buf_init_fixed
k5_buf_status
k5_buf_truncate
k5_clear_error
k5_dir_filenames
k5_free_error
k5_free_filenames
k5_get_error
k5_getopt
k5_getopt_long
k5_hashtab_add
k5_hashtab_create
k5_hashtab_free
k5_hashtab_get
k5_hashtab_remove
k5_hex_decode
k5_hex_encode
k5_json_array_add
k5_json_array_create
k5_json_array_fmt
k5_json_array_get
k5_json_array_length
k5_json_array_set
k5_json_bool_create
k5_json_bool_value
k5_json_decode
k5_json_encode
k5_json_get_tid
k5_json_null_create
k5_json_null_create_val
k5_json_number_create
k5_json_number_value
k5_json_object_count
k5_json_object_create
k5_json_object_get
k5_json_object_iterate
k5_json_object_set
k5_json_release
k5_json_retain
k5_json_string_create
k5_json_string_create_base64
k5_json_string_create_len
k5_json_string_unbase64
k5_json_string_utf8
k5_once
k5_optarg
k5_opterr
k5_optind
k5_optopt
k5_os_mutex_destroy
k5_os_mutex_init
k5_os_mutex_lock
k5_os_mutex_unlock
k5_path_isabs
k5_path_join
k5_path_split
k5_set_error
k5_set_error_info_callout_fn
k5_strerror_r
k5_utf16le_to_utf8
k5_utf8_to_utf16le
k5_vset_error
krb5int_asprintf
krb5int_close_plugin
krb5int_close_plugin_dirs
krb5int_free_plugin_dir_data
krb5int_free_plugin_dir_func
krb5int_freeaddrinfo
krb5int_gai_strerror
krb5int_get_plugin_data
krb5int_get_plugin_dir_data
krb5int_get_plugin_dir_func
krb5int_get_plugin_func
krb5int_getaddrinfo
krb5int_getnameinfo
krb5int_getspecific
krb5int_gettimeofday
krb5int_gmt_mktime
krb5int_in6addr_any
krb5int_ipc_stream_data
krb5int_ipc_stream_free_string
krb5int_ipc_stream_new
krb5int_ipc_stream_read
krb5int_ipc_stream_read_int32
krb5int_ipc_stream_read_int64
krb5int_ipc_stream_read_string
krb5int_ipc_stream_read_uint32
krb5int_ipc_stream_release
krb5int_ipc_stream_size
krb5int_ipc_stream_write
krb5int_ipc_stream_write_int32
krb5int_ipc_stream_write_int64
krb5int_ipc_stream_write_string
krb5int_ipc_stream_write_uint32
krb5int_key_delete
krb5int_key_register
krb5int_mkstemp
krb5int_mutex_alloc
krb5int_mutex_free
krb5int_mutex_lock
krb5int_mutex_unlock
krb5int_open_plugin
krb5int_open_plugin_dirs
krb5int_pthread_loaded
krb5int_setspecific
krb5int_strlcat
krb5int_strlcpy
krb5int_ucs4_to_utf8
krb5int_utf8_lentab
krb5int_utf8_mintab
krb5int_utf8_next
krb5int_utf8_to_ucs4
krb5int_vasprintf
krb5int_zap

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

147e9fcd11e19e6b022ed3d935165cb2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

ws2_32

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

vcruntime140

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB