create
package
Static task
static1
1 signatures
General
-
Target
peparser.dll
-
Size
1.4MB
-
MD5
2b30f638c419b06a1ab2d2877259b641
-
SHA1
0f2621f218da90d9c618443bb18f3ad0b725a5ee
-
SHA256
915313ce47204159e31e8ff7a04f2af41f477819198b39554c4d68b39a5a1aca
-
SHA512
41246d91e376b7747b7433e76aae9d5d56978f50a6a611b488a4ab6017efc8407b9cbeb57f86d99a89297494e3c67005a680699fa1e8e277108c254dbff6f2be
-
SSDEEP
24576:rdD9rR8T9oiCLa+L8KnlBJ/9HMUJZATej2pA5X3XDyAOzblgpj6B:iZoi4am8Kl79HMUJGTQTy2pj
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource peparser.dll
Files
-
peparser.dll.dll windows:5 windows x64 arch:x64
27762af95a023029e8f642562166b137
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetFileSize
FreeLibrary
SetEvent
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLastError
CreateEventW
CloseHandle
GetWindowsDirectoryA
GetSystemDirectoryW
GetCurrentDirectoryW
MultiByteToWideChar
SystemTimeToFileTime
GetSystemTime
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TerminateThread
CreateThread
WaitForMultipleObjects
WaitForSingleObject
FormatMessageW
CompareFileTime
FileTimeToSystemTime
VerLanguageNameW
ReadFile
FlushFileBuffers
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
HeapReAlloc
GetLocaleInfoA
lstrlenA
WideCharToMultiByte
HeapFree
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
HeapAlloc
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
WriteFile
GetStdHandle
GetModuleFileNameA
GetTimeZoneInformation
Sleep
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
GetStringTypeA
GetStringTypeW
user32
SendMessageW
IsWindow
wsprintfW
PostMessageW
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
OleRun
oleaut32
VariantChangeType
VariantInit
VariantClear
SysStringLen
SysAllocString
SysAllocStringByteLen
SysFreeString
GetErrorInfo
Exports
Exports
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ