0d650706c80ef8ed948974558e2aef10f3e3be1c4dbf8aa8c529017bb9be8f3a

General

Target

0d650706c80ef8ed948974558e2aef10f3e3be1c4dbf8aa8c529017bb9be8f3a
Size

2.5MB
MD5

9c25a37bcbc2ec0fe219504cf6c44e25
SHA1

5e417323e462df45af137dcb6aa31e6bcd136918
SHA256

0d650706c80ef8ed948974558e2aef10f3e3be1c4dbf8aa8c529017bb9be8f3a
SHA512

e60a0a4d8f51b77fc02b15658414abdbcf3b82a244695d2c864f0f73bf2b81fb858b35143d7d755628b01a3575fe65360309723427709578dc34b40a142b2c32
SSDEEP

49152:yF7ODUUg5YLLtAGA7jbUankzTQoDGkT7bKikem0tZBL:8O25YLLtHSAfzGkTWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d650706c80ef8ed948974558e2aef10f3e3be1c4dbf8aa8c529017bb9be8f3a

Files

0d650706c80ef8ed948974558e2aef10f3e3be1c4dbf8aa8c529017bb9be8f3a
.dll windows:5 windows x86 arch:x86

943ac3848bc9e117f397628b9ff3f72f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapReAlloc
FlushFileBuffers
SetCurrentDirectoryW
GetFileTime
GetModuleHandleA
GetModuleFileNameA
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
DeleteCriticalSection
Sleep
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
ExitProcess
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualFree
VirtualAlloc
WriteFile
LoadLibraryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA

setupapi

SetupScanFileQueueW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 700KB - Virtual size: 697KB

IMAGE_SCN_MEM_READ

.data
Size: 308KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

943ac3848bc9e117f397628b9ff3f72f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 700KB - Virtual size: 697KB

.data Size: 308KB - Virtual size: 316KB

.rsrc Size: 40KB - Virtual size: 38KB

.reloc Size: 52KB - Virtual size: 51KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 700KB - Virtual size: 697KB

.data
Size: 308KB - Virtual size: 316KB

.rsrc
Size: 40KB - Virtual size: 38KB

.reloc
Size: 52KB - Virtual size: 51KB