d28ffa9ea3eb0b494da3bc4f653ae299ea1448210f2d1c45f4d16725f6de8ef2

Sharing

Copy URL Twitter E-mail

General

Target

d28ffa9ea3eb0b494da3bc4f653ae299ea1448210f2d1c45f4d16725f6de8ef2
Size

216KB
MD5

71f3da4a5ea1d004837b84c80339572e
SHA1

7a4831b1554e58e865a96bf0dadb1ae7870b40fd
SHA256

d28ffa9ea3eb0b494da3bc4f653ae299ea1448210f2d1c45f4d16725f6de8ef2
SHA512

6e5c38fd8e1b1ed26a265b85e45d318b6152551cc8d07e6be31656ee9353b8949f2404cb1fa96c1b37c409a202359811d81f970eb76c90b3e6a743f2923f9c66
SSDEEP

6144:jC6o0JAavXMVfTO1cqBV+UdvrEFp7hKJI:jXoMvMVfS13BjvrEH7wI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d28ffa9ea3eb0b494da3bc4f653ae299ea1448210f2d1c45f4d16725f6de8ef2

Files

d28ffa9ea3eb0b494da3bc4f653ae299ea1448210f2d1c45f4d16725f6de8ef2
.dll windows:5 windows x86 arch:x86

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\WinToHDD\Output\Win32\Release\intl.pdb

Imports

kernel32

EnumResourceLanguagesW
GetThreadLocale
GetProcAddress
GetLastError
GetLocaleInfoA
GetACP
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
HeapReAlloc
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetCPInfo
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
SetHandleCount
GetStartupInfoA
RtlUnwind
CloseHandle
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
SetFilePointer
ReadFile
CreateFileA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetModuleHandleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_nl_expand_alias
_nl_msg_cat_cntr
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_fwprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_set_relocation_prefix
libintl_sprintf
libintl_swprintf
libintl_textdomain
libintl_version
libintl_vfprintf
libintl_vfwprintf
libintl_vprintf
libintl_vsprintf
libintl_vswprintf
libintl_vwprintf
libintl_wprintf
ngettext
textdomain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 6KB