67057c782451d0aeeb3054a8afab588fce3df68b5586f52f26fd1f23b71babe2

General

Target

67057c782451d0aeeb3054a8afab588fce3df68b5586f52f26fd1f23b71babe2
Size

470KB
MD5

933e381e7d74c8ae503428044ff4653b
SHA1

5140907eb9a2dc76f1f58c814375207fccb1dd4a
SHA256

67057c782451d0aeeb3054a8afab588fce3df68b5586f52f26fd1f23b71babe2
SHA512

559fc464079f3b5b5cc48b99adc2b1651f4ed018cfe860dd64bd48cc9b3f245c35945915f5d018053cb76fb8132b146bc4e3154a463bfb14294ec54034aedebf
SSDEEP

3072:A40GK1sg27a9eTIIIsVqy9gDyRbS06PFPnDHYCmoIiihpohbIsXBJx2cqnxCmT:ewTIIIsRyquPDLihpoBxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67057c782451d0aeeb3054a8afab588fce3df68b5586f52f26fd1f23b71babe2

Files

67057c782451d0aeeb3054a8afab588fce3df68b5586f52f26fd1f23b71babe2
.dll windows:4 windows x86 arch:x86

a2a8f9e8b968d4be125b0df9173db054

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStdHandle
LocalFree
GlobalAlloc
GlobalFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
LocalAlloc
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
LoadLibraryA

Exports

Exports

AllocInstanceData
Compress
CompressBegin
CompressEnd
CompressFramesInfo
DllMain
FreeInstanceData
SetScalability

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2a8f9e8b968d4be125b0df9173db054

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 254KB - Virtual size: 254KB

.data Size: 13KB - Virtual size: 18KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 142KB - Virtual size: 142KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 254KB - Virtual size: 254KB

.data
Size: 13KB - Virtual size: 18KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 142KB - Virtual size: 142KB