4bb3bd3f95bfb9a2396d56f21bf3ffd47048e167b9f83f0765572d1be55b6ba0

Sharing

Copy URL Twitter E-mail

General

Target

4bb3bd3f95bfb9a2396d56f21bf3ffd47048e167b9f83f0765572d1be55b6ba0
Size

9.9MB
MD5

e28adaa2ff558a52641ad5902110399d
SHA1

f243703a1ce07bffaecbca146cdb484d1a808de4
SHA256

4bb3bd3f95bfb9a2396d56f21bf3ffd47048e167b9f83f0765572d1be55b6ba0
SHA512

860c2c934c3591bdf00849c14fb33355f25817b1156ee62c70b4ddc50441295890bfac8f0e65fa2d83efdc57999e17b81d3d453caf6c4a35a3d6522b6e599bc7
SSDEEP

196608:QF077/fW2TwB81voYWEzOhXjDuVVYKr8emciSKcYL+tGbVDv5:QF077X1wYdOFnuVRr8MiSKz+tGbhv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bb3bd3f95bfb9a2396d56f21bf3ffd47048e167b9f83f0765572d1be55b6ba0

Files

4bb3bd3f95bfb9a2396d56f21bf3ffd47048e167b9f83f0765572d1be55b6ba0
.dll windows:6 windows x64 arch:x64

d7d282fc6a28036b82d298c2486bb155

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

pthreadvc2

pthread_cond_signal

sscronet

Cronet_UrlRequestParams_Destroy

shlwapi

StrToIntA

ws2_32

__WSAFDIsSet

kernel32

ReadConsoleW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

EnumDisplaySettingsW
CharUpperBuffW

gdi32

CreateDCW

advapi32

RegQueryValueExA

ole32

CoCreateGuid

oleaut32

VariantClear

parfait

?WriteCategory@ParfaitRecorderBase@parfait@@QEAAAEAV12@PEBD@Z

winmm

waveInGetDevCapsA

iphlpapi

GetAdaptersAddresses

wininet

InternetReadFile

version

GetFileVersionInfoSizeA

winhttp

WinHttpConnect

Exports

Exports

CreateMSConfigByAppID
CreateMSConfigBySDKID
CreateMSManagerUtils
DestoryMSConfig
DestoryMSManager
DestoryMSManagerUtils
MSBridgeML
MSBridgeOV
cJSONUtils_AddPatchToArray
cJSONUtils_ApplyPatches
cJSONUtils_ApplyPatchesCaseSensitive
cJSONUtils_FindPointerFromObjectTo
cJSONUtils_GenerateMergePatch
cJSONUtils_GenerateMergePatchCaseSensitive
cJSONUtils_GeneratePatches
cJSONUtils_GeneratePatchesCaseSensitive
cJSONUtils_GetPointer
cJSONUtils_GetPointerCaseSensitive
cJSONUtils_MergePatch
cJSONUtils_MergePatchCaseSensitive
cJSONUtils_SortObject
cJSONUtils_SortObjectCaseSensitive
cJSON_AddArrayToObject
cJSON_AddBoolToObject
cJSON_AddFalseToObject
cJSON_AddItemReferenceToArray
cJSON_AddItemReferenceToObject
cJSON_AddItemToArray
cJSON_AddItemToObject
cJSON_AddItemToObjectCS
cJSON_AddNullToObject
cJSON_AddNumberToObject
cJSON_AddObjectToObject
cJSON_AddRawToObject
cJSON_AddStringToObject
cJSON_AddTrueToObject
cJSON_Compare
cJSON_CreateArray
cJSON_CreateArrayReference
cJSON_CreateBool
cJSON_CreateDoubleArray
cJSON_CreateFalse
cJSON_CreateFloatArray
cJSON_CreateIntArray
cJSON_CreateNull
cJSON_CreateNumber
cJSON_CreateObject
cJSON_CreateObjectReference
cJSON_CreateRaw
cJSON_CreateString
cJSON_CreateStringArray
cJSON_CreateStringReference
cJSON_CreateTrue
cJSON_Delete
cJSON_DeleteItemFromArray
cJSON_DeleteItemFromObject
cJSON_DeleteItemFromObjectCaseSensitive
cJSON_DetachItemFromArray
cJSON_DetachItemFromObject
cJSON_DetachItemFromObjectCaseSensitive
cJSON_DetachItemViaPointer
cJSON_Duplicate
cJSON_GetArrayItem
cJSON_GetArraySize
cJSON_GetErrorPtr
cJSON_GetNumberValue
cJSON_GetObjectItem
cJSON_GetObjectItemCaseSensitive
cJSON_GetStringValue
cJSON_HasObjectItem
cJSON_InitHooks
cJSON_InsertItemInArray
cJSON_IsArray
cJSON_IsBool
cJSON_IsFalse
cJSON_IsInvalid
cJSON_IsNull
cJSON_IsNumber
cJSON_IsObject
cJSON_IsRaw
cJSON_IsString
cJSON_IsTrue
cJSON_Minify
cJSON_Parse
cJSON_ParseWithLength
cJSON_ParseWithLengthOpts
cJSON_ParseWithOpts
cJSON_Print
cJSON_PrintBuffered
cJSON_PrintPreallocated
cJSON_PrintUnformatted
cJSON_ReplaceItemInArray
cJSON_ReplaceItemInObject
cJSON_ReplaceItemInObjectCaseSensitive
cJSON_ReplaceItemViaPointer
cJSON_SetNumberHelper
cJSON_SetValuestring
cJSON_Version
cJSON_free
cJSON_malloc

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdvmp0
Size: - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bdvmp1
Size: 9.9MB - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 873B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d7d282fc6a28036b82d298c2486bb155

Headers

DLL Characteristics

File Characteristics

Imports

pthreadvc2

sscronet

shlwapi

ws2_32

kernel32

user32

gdi32

advapi32

ole32

oleaut32

parfait

winmm

iphlpapi

wininet

version

winhttp

Exports

Exports

Sections

.text Size: - Virtual size: 1.1MB

.rdata Size: - Virtual size: 344KB

.data Size: - Virtual size: 45KB

.pdata Size: - Virtual size: 45KB

_RDATA Size: - Virtual size: 348B

.bdvmp0 Size: - Virtual size: 7.1MB

.bdvmp1 Size: 9.9MB - Virtual size: 9.9MB

.reloc Size: 512B - Virtual size: 232B

.rsrc Size: 1024B - Virtual size: 873B

.text
Size: - Virtual size: 1.1MB

.rdata
Size: - Virtual size: 344KB

.data
Size: - Virtual size: 45KB

.pdata
Size: - Virtual size: 45KB

_RDATA
Size: - Virtual size: 348B

.bdvmp0
Size: - Virtual size: 7.1MB

.bdvmp1
Size: 9.9MB - Virtual size: 9.9MB

.reloc
Size: 512B - Virtual size: 232B

.rsrc
Size: 1024B - Virtual size: 873B