908f33bc5d6e162fa37226dda98f9e9d00af4a3f6ac7aa16985423426040556b

Sharing

Copy URL Twitter E-mail

General

Target

908f33bc5d6e162fa37226dda98f9e9d00af4a3f6ac7aa16985423426040556b
Size

216KB
MD5

18ec3495a9c659f94af081cfb4d1f212
SHA1

22b4b9e3bcc8c5ac3ecd52f11fd7ff817c3e8770
SHA256

908f33bc5d6e162fa37226dda98f9e9d00af4a3f6ac7aa16985423426040556b
SHA512

4c155b070fa6cc3b1d4f164a523a3aa3b168cf6aac35a1526c7f7d4b19171ce2893e53d5a1559efc269941f5ea36c7a419be305254438d4e8a04abe311053cbd
SSDEEP

3072:XzRk6ZvS0KTKAakQXMVRAgu5Mh+3ImL2lQBV+UdE+rECWp7hKiyQO:jC6o07AavXMVfu5cqBV+UdvrEFp7hKiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
908f33bc5d6e162fa37226dda98f9e9d00af4a3f6ac7aa16985423426040556b

Files

908f33bc5d6e162fa37226dda98f9e9d00af4a3f6ac7aa16985423426040556b
.dll windows:5 windows x86 arch:x86

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\workspace\WinToHDD\Output\Win32\Release\intl.pdb

Imports

kernel32

EnumResourceLanguagesW
GetThreadLocale
GetProcAddress
GetLastError
GetLocaleInfoA
GetACP
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
HeapReAlloc
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetCPInfo
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
SetHandleCount
GetStartupInfoA
RtlUnwind
CloseHandle
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
SetFilePointer
ReadFile
CreateFileA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetModuleHandleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_nl_expand_alias
_nl_msg_cat_cntr
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_fwprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_set_relocation_prefix
libintl_sprintf
libintl_swprintf
libintl_textdomain
libintl_version
libintl_vfprintf
libintl_vfwprintf
libintl_vprintf
libintl_vsprintf
libintl_vswprintf
libintl_vwprintf
libintl_wprintf
ngettext
textdomain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 6KB