25a0350972034c6a37a2ea188a68ace426f9a7c37fc9751057cad1a657b99254

Sharing

Copy URL Twitter E-mail

General

Target

25a0350972034c6a37a2ea188a68ace426f9a7c37fc9751057cad1a657b99254
Size

144KB
MD5

a021867ac7824a52bf192efb12dcda6e
SHA1

55562b0a04ca8cfe21a7ef049ff5b665bd6ba3c8
SHA256

25a0350972034c6a37a2ea188a68ace426f9a7c37fc9751057cad1a657b99254
SHA512

1fc0651b90775c042cf4fe0a504b427965a4405a2f61dc749ad8e5e8cdba9532e5bc7207f9e7ce61a9d47ed1fba9d846de560378c4c2d8060fae057e0b685d7f
SSDEEP

3072:arLEXqdOQolCi13gevpP8HAWJBKGXsE7VO45678FPQi+f+dMFF:JXmi13g28lBtb7VO45678FPQi+f+dMX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25a0350972034c6a37a2ea188a68ace426f9a7c37fc9751057cad1a657b99254

Files

25a0350972034c6a37a2ea188a68ace426f9a7c37fc9751057cad1a657b99254
.dll windows:6 windows x64 arch:x64

007dcb139b8e4485f42dc4ad9bf85c1f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

flutter_windows

FlutterDesktopPluginRegistrarGetView
FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable
FlutterDesktopTextureRegistrarUnregisterExternalTexture
FlutterDesktopTextureRegistrarRegisterExternalTexture
FlutterDesktopMessengerUnlock
FlutterDesktopMessengerLock
FlutterDesktopMessengerIsAvailable
FlutterDesktopMessengerRelease
FlutterDesktopMessengerAddRef
FlutterDesktopMessengerSetCallback
FlutterDesktopMessengerSendResponse
FlutterDesktopPluginRegistrarGetMessenger
FlutterDesktopRegistrarGetTextureRegistrar
FlutterDesktopMessengerSend
FlutterDesktopMessengerSendWithReply
FlutterDesktopPluginRegistrarSetDestructionHandler

shell32

ShellExecuteW

msvcp140

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xbad_function_call@std@@YAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
_Thrd_yield
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?_Xlength_error@std@@YAXPEBD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

vcruntime140

__std_terminate
memcpy
_CxxThrowException
memcmp
memmove
memset
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__std_type_info_compare

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_crt_atexit
_cexit
_register_onexit_function
_invalid_parameter_noinfo
abort
_invoke_watson
_errno

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-string-l1-1-0

iswspace

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
TrySubmitThreadpoolCallback
InterlockedPushEntrySList
GetLastError
FormatMessageW
GetProcessHeap
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
FreeLibrary
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
LoadLibraryW

ole32

CoCreateFreeThreadedMarshaler
CoGetObjectContext
CoGetApartmentType

oleaut32

SysAllocString
SysFreeString
SysStringLen
GetErrorInfo
SetErrorInfo

Exports

Exports

GeolocatorWindowsRegisterWithRegistrar

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

007dcb139b8e4485f42dc4ad9bf85c1f

Headers

DLL Characteristics

File Characteristics

Imports

flutter_windows

shell32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 14KB - Virtual size: 16KB

.pdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 696B

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 14KB - Virtual size: 16KB

.pdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 696B