80929e9288775a090c7758e38f279104eb358f6b2667188d85f9c92d6b9f5353

Sharing

Copy URL Twitter E-mail

General

Target

80929e9288775a090c7758e38f279104eb358f6b2667188d85f9c92d6b9f5353
Size

1.1MB
MD5

84857aba2d3e4e503ebd0ec6b8c60521
SHA1

808710c59519ee425ed4c6061842f278f64134b4
SHA256

80929e9288775a090c7758e38f279104eb358f6b2667188d85f9c92d6b9f5353
SHA512

e2bb9ecaaec967c41860d63d9d7f8be5c2e4a937093ca6537cd9ba9eb843e5b6c565031eae45a7abe536618b5a19b1cd0367582ede7036830c58aefd2d5870dc
SSDEEP

12288:J2fEFk2cJXsll0qZ33fxBrFDrkt2/PihV27BDP2+f0P:JFk2cJXsll0qZ33ZBrRqtoBi+fi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80929e9288775a090c7758e38f279104eb358f6b2667188d85f9c92d6b9f5353

Files

80929e9288775a090c7758e38f279104eb358f6b2667188d85f9c92d6b9f5353
.dll windows:6 windows x64 arch:x64

c9056d9bf6ff813965e1c004c4623713

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetLastError
OutputDebugStringA
SetLastError
GetModuleHandleExA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
FreeLibrary
HeapAlloc
GetProcessHeap
GetNativeSystemInfo
VirtualProtect
IsBadReadPtr
HeapFree
HeapReAlloc
CloseHandle
ReadFile
GetFileSize
CreateFileA
TerminateThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection

user32

wsprintfA

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z

ws2_32

socket

libssl-3-x64

SSL_set_fd

libcrypto-3-x64

ERR_print_errors_fp

vcruntime140

memchr

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_initterm_e

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

free

iphlpapi

GetAdaptersInfo

Exports

Exports

AllocDouble2D
AllocFloat2D
FreeDouble2D
FreeFloat2D
HTTPS_2_1
PgtComArrayBool_Create
PgtComArrayBool_Free
PgtComArrayByte_Create
PgtComArrayByte_Create1
PgtComArrayByte_Free
PgtComArrayDouble_Create
PgtComArrayDouble_Free
PgtComArrayFloat_Create
PgtComArrayFloat_Free
PgtComArrayInt_Create
PgtComArrayInt_Free
PgtComArrayShort_Create
PgtComArrayShort_Free
PgtDateJm
PgtJmAdmin
PgtgetJmDateNumber

Sections

.text
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bitan
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c9056d9bf6ff813965e1c004c4623713

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

ws2_32

libssl-3-x64

libcrypto-3-x64

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

iphlpapi

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 44KB

.rdata Size: 13KB - Virtual size: 16KB

.data Size: 512B - Virtual size: 4KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.bitan Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 43KB - Virtual size: 44KB

.rdata
Size: 13KB - Virtual size: 16KB

.data
Size: 512B - Virtual size: 4KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB

.bitan
Size: 1.1MB - Virtual size: 1.1MB