76cd555e28e4ffd40a19694215634a9839275557051afcd4fc9385491f3feba2

Sharing

Copy URL Twitter E-mail

General

Target

76cd555e28e4ffd40a19694215634a9839275557051afcd4fc9385491f3feba2
Size

217KB
MD5

e15afb1cc6f898b68677e5f689304f67
SHA1

d3c78dbcb8871a61bfb82ed56143bd64e09e66b7
SHA256

76cd555e28e4ffd40a19694215634a9839275557051afcd4fc9385491f3feba2
SHA512

2cbdef1bd083b58fcac43856bdcb49017119677a4e0a7b74b549ae09791e3b2fbad9c1d0492c8c126f1a55b11a7952ebd18cfc65f6d0b590bd9cff60f86bf855
SSDEEP

3072:RyLPGtrIxOm01EHNzWf8ZTLGSCCC+3rffD/LNLHAkssgUsYUksYVNbjQDsIRhaLE:APGtrIkc18DLRO2ncY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76cd555e28e4ffd40a19694215634a9839275557051afcd4fc9385491f3feba2

Files

76cd555e28e4ffd40a19694215634a9839275557051afcd4fc9385491f3feba2
.dll windows:6 windows x86 arch:x86

d07eab9f72997bcac8b3d289647c9e79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryW
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
ReadFile
CloseHandle
Sleep
SetFilePointer
WriteFile
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
DisableThreadLibraryCalls
WriteConsoleW
SetStdHandle
OutputDebugStringW
LCMapStringW
SetFilePointerEx
RtlUnwind
EncodePointer
DecodePointer
MultiByteToWideChar
GetCommandLineA
GetCurrentThreadId
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
SetLastError
IsDebuggerPresent
IsProcessorFeaturePresent
HeapAlloc
RaiseException
HeapFree
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
LoadLibraryExW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers

user32

GetActiveWindow
MessageBoxW

ole32

StgCreateDocfile
CoCreateInstance
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString

winmm

timeGetTime

Exports

Exports

CreateFunction
InitializeModule

Sections

.text
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d07eab9f72997bcac8b3d289647c9e79

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

winmm

Exports

Exports

Sections

.text Size: 147KB - Virtual size: 147KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 7KB - Virtual size: 18KB

.rsrc Size: 1024B - Virtual size: 1008B

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 147KB - Virtual size: 147KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 7KB - Virtual size: 18KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 12KB - Virtual size: 12KB