b312845973753a01ba6d1afc29aab756a2fa60e16d4cb8262e5ae18f52976d2f

Sharing

Copy URL Twitter E-mail

General

Target

b312845973753a01ba6d1afc29aab756a2fa60e16d4cb8262e5ae18f52976d2f
Size

58KB
MD5

9574317d4854e349d91f909db1c43789
SHA1

2e0c1047ad72926f6d29cecd5f3065c458605efe
SHA256

b312845973753a01ba6d1afc29aab756a2fa60e16d4cb8262e5ae18f52976d2f
SHA512

7087198a308e1d43cf6c562504f719d3e48cd81709f93fe8290ca0fca46f6310291aa947e730a912bb29fa0112cfb5adb212f0f172186a0954ae65cca6bcc2c6
SSDEEP

1536:3fM8R8AM1L5LJPMpVy7B8bBLtDDCRYk8qw:3k8R8AM1tLJPwxDCKk8qw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b312845973753a01ba6d1afc29aab756a2fa60e16d4cb8262e5ae18f52976d2f

Files

b312845973753a01ba6d1afc29aab756a2fa60e16d4cb8262e5ae18f52976d2f
.dll windows:6 windows x86 arch:x86

ec9fadd761d1455ae7fd82d1fa6140fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\hgwork\spike10\Win32\Release\import\nativeadc.pdb

Imports

mfc140u

ord265
ord310
ord1530
ord1533
ord4743
ord8759
ord266
ord300
ord316
ord12560
ord1513
ord5885
ord5111
ord12559
ord5109
ord12921
ord8757
ord286
ord8360
ord8719
ord12884
ord12762
ord3846
ord1692
ord1689
ord8182
ord1046
ord6967
ord5921
ord285
ord3009
ord280
ord5884
ord1523
ord2304
ord2477
ord4815
ord1045
ord296
ord1511

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringW
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
CloseHandle
GetFileSizeEx
GetLastError
SetFilePointerEx
ReadFile
GetFinalPathNameByHandleW
GetFileTime
FileTimeToSystemTime
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleHandleW
InitializeCriticalSectionAndSpinCount

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?uncaught_exceptions@std@@YAHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

vcruntime140

memmove
__CxxFrameHandler3
__std_terminate
memcpy
memchr
_CxxThrowException
__std_exception_copy
_except_handler4_common
memset
_purecall
__std_exception_destroy
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_crt_atexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_cexit
_initterm
_initterm_e

api-ms-win-crt-string-l1-1-0

strcpy_s
strncpy_s
_stricmp

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32

api-ms-win-crt-time-l1-1-0

_localtime64_s
strftime
_wctime64_s
_time64

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-math-l1-1-0

_CIfmod
floor

Exports

Exports

FCCloseSource
FCGetChanData
FCGetChanInfo
FCGetFileInfo
FCGetFileTypes
FCGetTypeStrings
FCGetVersion
FCOpenSource

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec9fadd761d1455ae7fd82d1fa6140fb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc140u

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB