29f0a972b1ef04d1727beb93e2ede9c15423f365b13f48ed33cc756a67206cc2

Sharing

Copy URL Twitter E-mail

General

Target

29f0a972b1ef04d1727beb93e2ede9c15423f365b13f48ed33cc756a67206cc2
Size

301KB
MD5

85024c05a39ced73968e93146d3b0b0b
SHA1

20f4ed9d2178d783421c8b4cb02cfafd4a1d083e
SHA256

29f0a972b1ef04d1727beb93e2ede9c15423f365b13f48ed33cc756a67206cc2
SHA512

890082bffa3050ea1514fc91e971532d4de63cebadfb51a2157a8fa3ff44c2e507943dbe3de1af9b256c10cd915773d9ff5b42af727dfd201a34b4ccea425962
SSDEEP

3072:JGMiSGyhqTuitukIi2XcBHZnri8hlllllvvvvvvtUmhJbS+iscd2935vEdNUO8Dk:AysTuitgi2XcBHZnri8NAVQ35QD1xI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29f0a972b1ef04d1727beb93e2ede9c15423f365b13f48ed33cc756a67206cc2

Files

29f0a972b1ef04d1727beb93e2ede9c15423f365b13f48ed33cc756a67206cc2
.dll windows:6 windows x86 arch:x86

c01e60a4877e2219839daf22ee47977d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\ws\shared\marecon\msl\merror\build\win32\Release_Win32_vc14.0\crashlogdll_win32.pdb

Imports

dbghelp

SymGetLineFromAddr64
SymSetOptions
SymCleanup
SymSetSearchPath
SymGetSearchPath
SymInitialize
StackWalk64
SymGetSymFromAddr64
SymGetModuleBase64
SymGetModuleInfo64
SymFunctionTableAccess64

errorlog

_MErrLog_Add
_MErrLog_Location

kernel32

TlsGetValue
CreateThread
WaitForSingleObjectEx
OutputDebugStringW
WriteConsoleW
DecodePointer
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
HeapReAlloc
HeapSize
SetStdHandle
GetStringTypeW
OutputDebugStringA
VirtualProtect
GetFullPathNameA
CloseHandle
SetUnhandledExceptionFilter
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcess
GetCurrentThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Module32First
Module32Next
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
CreateFileW
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
SetConsoleCtrlHandler

Exports

Exports

?CrashLogDLL_ExceptionStacktrace@@YAXPAU_EXCEPTION_POINTERS@@@Z
?InitCrashLogger@CrashLogDLL@@CAXXZ

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c01e60a4877e2219839daf22ee47977d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dbghelp

errorlog

kernel32

Exports

Exports

Sections

.text Size: 248KB - Virtual size: 247KB

.rdata Size: 39KB - Virtual size: 38KB

.data Size: 2KB - Virtual size: 8KB

.gfids Size: 1024B - Virtual size: 556B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 248KB - Virtual size: 247KB

.rdata
Size: 39KB - Virtual size: 38KB

.data
Size: 2KB - Virtual size: 8KB

.gfids
Size: 1024B - Virtual size: 556B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 9KB - Virtual size: 9KB