821127c2e0316864756f66e9593d0336a604d373355fed391a0baa05a1bc61db

Sharing

Copy URL Twitter E-mail

General

Target

821127c2e0316864756f66e9593d0336a604d373355fed391a0baa05a1bc61db
Size

1017KB
MD5

dbf60453484ee9722a10e52f57911cc7
SHA1

34fcbeacc5262f989bb026042a770d051ea60ce9
SHA256

821127c2e0316864756f66e9593d0336a604d373355fed391a0baa05a1bc61db
SHA512

e4d926f2744644fcb626ac8ff14ccbfaa7c6eaa04de1cda869a4c414686ceef8247829dd9d9a0594f2d915c30d82793e3cc39093f62fdbba4b1a969c68a14f18
SSDEEP

24576:S6ToBCX1eG7UdFthK+z4/oUlJ2HkaHZ7INeE:S6og1eG7Ud3hK+z4/hv2HkaHrE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
821127c2e0316864756f66e9593d0336a604d373355fed391a0baa05a1bc61db

Files

821127c2e0316864756f66e9593d0336a604d373355fed391a0baa05a1bc61db
.dll windows:6 windows x86 arch:x86

f994b2efd4de2c0fe04ff97618eb01a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSACleanup
freeaddrinfo
getaddrinfo
WSAStringToAddressW
WSAAddressToStringW
WSASocketW
WSASend
WSARecv
WSAIoctl
WSAGetLastError
WSASetLastError
setsockopt
select
ntohl
listen
htons
htonl
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
accept
__WSAFDIsSet
WSAStartup

iphlpapi

GetAdaptersAddresses

kernel32

SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
CreateFileW
OutputDebugStringW
HeapSize
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
GetFileAttributesExW
GetExitCodeProcess
EnumSystemLocalesW
GetUserDefaultLCID
FindClose
GetStdHandle
WriteFile
PostQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
LocalFree
FormatMessageA
FormatMessageW
GetDynamicTimeZoneInformation
WideCharToMultiByte
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
ReadFile
CloseHandle
CreatePipe
Sleep
CreateProcessW
GetStartupInfoW
GetModuleFileNameA
MultiByteToWideChar
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetLastError
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
CancelIoEx
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
WaitForSingleObject
SleepEx
CreateEventW
SetWaitableTimer
WaitForMultipleObjects
CreateWaitableTimerW
QueueUserAPC
TerminateThread
GetSystemTimeAsFileTime
IsValidLocale
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
RaiseException
SetEndOfFile
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
LCMapStringEx
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
IsDebuggerPresent
InitializeSListHead
RtlUnwind
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetFileType
GetModuleFileNameW
WriteConsoleW
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW

Exports

Exports

_earn_sdk_set_appKey@4
_earn_sdk_start@0
_earn_sdk_stop@0

Sections

.text
Size: 821KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f994b2efd4de2c0fe04ff97618eb01a6

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

iphlpapi

kernel32

Exports

Exports

Sections

.text Size: 821KB - Virtual size: 820KB

.rdata Size: 141KB - Virtual size: 141KB

.data Size: 22KB - Virtual size: 26KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 31KB - Virtual size: 30KB

.text
Size: 821KB - Virtual size: 820KB

.rdata
Size: 141KB - Virtual size: 141KB

.data
Size: 22KB - Virtual size: 26KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 31KB - Virtual size: 30KB