4e6de5506991096063a87153365beb16636b4ccc21069c2c27be6a3500377b64

Sharing

Copy URL Twitter E-mail

General

Target

4e6de5506991096063a87153365beb16636b4ccc21069c2c27be6a3500377b64
Size

6.5MB
MD5

3bf46bb7b240a879e7a2ed1b481985ea
SHA1

209192d753a380f5cb37f9a22f5f83d4b616bc74
SHA256

4e6de5506991096063a87153365beb16636b4ccc21069c2c27be6a3500377b64
SHA512

5082a72cce9303867adaa540d0be95b62f774ea59bbbaab284ef4c7ab9cf96d7cfa9a09ee1510d8d01354297a9840f827c02653627f687fd26ce931d95b53558
SSDEEP

98304:g2YC2aVXZA8SK2BsLsgbpy3p6PekFM/1rv76XU2Qj38w0RTsdBD8fZNQyQ62K265:gqV+K2Bx/Nf6XUsJTk4mvzdnyHCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e6de5506991096063a87153365beb16636b4ccc21069c2c27be6a3500377b64

Files

4e6de5506991096063a87153365beb16636b4ccc21069c2c27be6a3500377b64
.dll windows:6 windows x86 arch:x86

f326698a8023d5d395d5f146b6157c27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
TlsAlloc
GetCurrentProcessId
OpenFileMappingA
CreateFileW
ReadConsoleW
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
IsValidCodePage
GetStdHandle
GetOEMCP
IsDebuggerPresent
GetProcessHeap
HeapSize
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsGetValue
TerminateProcess
SetLastError
RaiseException
GetACP
Beep
IsValidLocale
WideCharToMultiByte
GetTickCount
GetModuleHandleExW
SetEnvironmentVariableW
SetDllDirectoryW
LoadLibraryExW
UnmapViewOfFile
MapViewOfFile
CloseHandle
FindClose
EnterCriticalSection
FlushFileBuffers
GetTimeZoneInformation
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
TlsSetValue
ExpandEnvironmentStringsA
WaitForSingleObjectEx
SetHandleInformation
GetFileType
GetCurrentProcess
Sleep
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
HeapFree
GetCommandLineA
GetCurrentThreadId
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

CopyRect
ClientToScreen
MapDialogRect
PostQuitMessage
IsIconic
MsgWaitForMultipleObjects
IsZoomed
LoadIconA
GetClientRect
SetFocus
DrawEdge
GetDoubleClickTime
DrawFocusRect
GetKeyboardState
CheckMenuRadioItem
GetScrollInfo
InvalidateRect
SystemParametersInfoW
PeekMessageA
EnableMenuItem
SetClassLongA
ScrollWindow
DestroyCaret
IsDlgButtonChecked
RemoveMenu
CheckRadioButton
BeginDeferWindowPos
SetWindowTextA
EndPaint
HideCaret
KillTimer
LoadStringA
WaitMessage
GetDC
SetWindowsHookExA
GetDesktopWindow
EnableScrollBar
ReleaseCapture
TranslateMDISysAccel

gdi32

SetWindowOrgEx
EndPage
BitBlt
Arc
MaskBlt
GetRegionData
GetCharABCWidthsW
GetNearestPaletteIndex
CreateRectRgn
CreatePatternBrush
GetClipBox
IntersectClipRect
CreateSolidBrush
PolyPolygon
DeleteObject
Ellipse
ExtTextOutA
CreateEnhMetaFileW
RestoreDC
UpdateColors
SetROP2

advapi32

SetSecurityDescriptorDacl
RegCloseKey

ole32

CoTaskMemFree

Sections

.text
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f326698a8023d5d395d5f146b6157c27

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 542KB - Virtual size: 542KB

.data Size: 5.9MB - Virtual size: 5.9MB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 542KB - Virtual size: 542KB

.data
Size: 5.9MB - Virtual size: 5.9MB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 12KB - Virtual size: 12KB