b1279e7e6c69da8e00f16dc6d0d1f74a56cb2aba7e5a03b89195a7b5e9e2a5af

Sharing

Copy URL

Twitter E-mail

General

Target

b1279e7e6c69da8e00f16dc6d0d1f74a56cb2aba7e5a03b89195a7b5e9e2a5af
Size

152KB
MD5

3739306eb5e9f5569c8b8dcfcede90d4
SHA1

79a7bfa04932668eb32b754337c26c12fd92ef8b
SHA256

b1279e7e6c69da8e00f16dc6d0d1f74a56cb2aba7e5a03b89195a7b5e9e2a5af
SHA512

c72f19f5587583551f8f2fa59f64dbb3a67c80c6f8a0a53f1d7403187f06ad7262155738bb46b899a94d1e0a6632fcfe19294fc4105d1fe863a16f4ab35d19ff
SSDEEP

3072:w2hVAOpRF2piAOmeecygAOeCYPrShiAgB:FhVbpRopibmepygbeCuSh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1279e7e6c69da8e00f16dc6d0d1f74a56cb2aba7e5a03b89195a7b5e9e2a5af

Files

b1279e7e6c69da8e00f16dc6d0d1f74a56cb2aba7e5a03b89195a7b5e9e2a5af
.dll windows:5 windows x64 arch:x64

c525d34cbfd4e5d5e9d023fa0105f66b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\juergen\Desktop\64\msvc.AMD64.pdb\altcmpsc.pdb

Imports

hengine

s370_program_interrupt
s390_program_interrupt
z900_program_interrupt
s370_store_int_timer

hsys

sysblk

hutil

logmsg

msvcr100

__C_specific_handler
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
memcmp
__crt_debugger_hook
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
strrchr
_snprintf_s
memcpy
memset
__CppXcptFilter
_onexit

kernel32

UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
Sleep
DecodePointer
EncodePointer
GetCurrentProcess

Exports

Exports

hdl_depc
hdl_dins

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c525d34cbfd4e5d5e9d023fa0105f66b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

hengine

hsys

hutil

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 125KB - Virtual size: 125KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 9KB

.pdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 125KB - Virtual size: 125KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 9KB

.pdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB