e1c1a7f365c3ff5b410d6086388f8c92c9c87133b090821f888177b80ad13987

Sharing

Copy URL

Twitter E-mail

General

Target

e1c1a7f365c3ff5b410d6086388f8c92c9c87133b090821f888177b80ad13987
Size

14.2MB
MD5

f95f20d2cb2e866ea4f34ae334239cd3
SHA1

dcb90e70e9e7866a73444e3ca0875fa05a545e12
SHA256

e1c1a7f365c3ff5b410d6086388f8c92c9c87133b090821f888177b80ad13987
SHA512

44709139f87cb2d367c6d495ff4621c653acac067a340c533f5078003c466edd0c71a20f2b8f65779cf53cbbd22dec54f214af7d42f49baf6cb0d0f41dcc6f58
SSDEEP

393216:fwhUaZJ8GB3iIvBrNIULjKmjjIxvGDjk1brIm:fuj8GB3NJuKDj8rI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1c1a7f365c3ff5b410d6086388f8c92c9c87133b090821f888177b80ad13987

Files

e1c1a7f365c3ff5b410d6086388f8c92c9c87133b090821f888177b80ad13987
.dll windows:6 windows x64 arch:x64

b38a83f5e843f498f6ea6af5d58d2d15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

SendMessageW

ws2_32

socket

netapi32

Netbios

ntdll

NtQueryInformationProcess

Sections

.text
Size: - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: - Virtual size: 981B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.\]1
Size: - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.-3l
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.F.T
Size: 14.2MB - Virtual size: 14.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b38a83f5e843f498f6ea6af5d58d2d15

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ws2_32

netapi32

ntdll

Sections

.text Size: - Virtual size: 776KB

.rdata Size: - Virtual size: 177KB

.data Size: - Virtual size: 17KB

.pdata Size: - Virtual size: 30KB

.msvcjmc Size: - Virtual size: 981B

_RDATA Size: - Virtual size: 348B

.\]1 Size: - Virtual size: 8.7MB

.-3l Size: 3KB - Virtual size: 2KB

.F.T Size: 14.2MB - Virtual size: 14.2MB

.reloc Size: 512B - Virtual size: 40B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 776KB

.rdata
Size: - Virtual size: 177KB

.data
Size: - Virtual size: 17KB

.pdata
Size: - Virtual size: 30KB

.msvcjmc
Size: - Virtual size: 981B

_RDATA
Size: - Virtual size: 348B

.\]1
Size: - Virtual size: 8.7MB

.-3l
Size: 3KB - Virtual size: 2KB

.F.T
Size: 14.2MB - Virtual size: 14.2MB

.reloc
Size: 512B - Virtual size: 40B

.rsrc
Size: 1KB - Virtual size: 1KB