3094d84d478e8ce1540fb8dfcc5f2cd553287e732218d9d376f62e2e39e91392

Sharing

Copy URL Twitter E-mail

General

Target

3094d84d478e8ce1540fb8dfcc5f2cd553287e732218d9d376f62e2e39e91392
Size

472KB
MD5

534deeab655cc0736bedfe6d4696e9a9
SHA1

da4c40e7a95083aa54f12cc0384a08f3b591ddaa
SHA256

3094d84d478e8ce1540fb8dfcc5f2cd553287e732218d9d376f62e2e39e91392
SHA512

5b71c8e94d804df613ac9c7fdfdc36954c23fdbe785f325ab7bb4a1baf491d593963d8c8ff4cc18777c36132f263698ce2a8598548b6e47228ebfd60cacaad7d
SSDEEP

12288:EDO/BkpzbOXL15A8ExEwMk6d10eBDw3t6twTRXFqMw5:PCp6L15AQVDw1TDqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3094d84d478e8ce1540fb8dfcc5f2cd553287e732218d9d376f62e2e39e91392

Files

3094d84d478e8ce1540fb8dfcc5f2cd553287e732218d9d376f62e2e39e91392
.dll windows:5 windows x86 arch:x86

90408e805bf1f49f0f992349b524e70d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileSizeEx
GetFileType
GetLargePageMinimum
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetNumaNodeProcessorMask
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
RtlUnwind
SetEndOfFile
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

Exports

Exports

AnsiToUnicode
AnsiToUtf8Bytes
AnsiToUtf8Str
UTF8ToUnicode
UnicodeToAnsi
UnicodeToUTF8
UnicodeToUTF8Bytes
Utf8ToAnsi
mimalloc_free
mimalloc_heap_delete
mimalloc_heap_destroy
mimalloc_heap_malloc
mimalloc_heap_new
mimalloc_heap_remalloc
mimalloc_heap_strndup
mimalloc_malloc
mimalloc_remalloc
mimalloc_strndup
yj_arr_equals_str
yj_arr_get
yj_arr_get_bool
yj_arr_get_double
yj_arr_get_int
yj_arr_get_int64
yj_arr_get_num_type
yj_arr_get_str
yj_arr_get_type
yj_arr_iter_init
yj_arr_iter_next
yj_doc_free
yj_doc_get_read_size
yj_doc_get_val_count
yj_equals_str
yj_equals_str_pointer
yj_equals_val_str
yj_equals_val_val
yj_get_bool
yj_get_bool_pointer
yj_get_double
yj_get_double_pointer
yj_get_int
yj_get_int64
yj_get_int64_pointer
yj_get_int_pointer
yj_get_num_type
yj_get_num_type_pointer
yj_get_obj
yj_get_obj_pointer
yj_get_size
yj_get_size_pointer
yj_get_str
yj_get_str_pointer
yj_get_struct_size
yj_get_type
yj_get_type_pointer
yj_get_val_bool
yj_get_val_double
yj_get_val_int
yj_get_val_int64
yj_get_val_json
yj_get_val_num_type
yj_get_val_size
yj_get_val_str
yj_get_val_strlen
yj_get_val_type
yj_mut_arr_clear
yj_mut_arr_equals_str
yj_mut_arr_get
yj_mut_arr_get_bool
yj_mut_arr_get_double
yj_mut_arr_get_int
yj_mut_arr_get_int64
yj_mut_arr_get_num_type
yj_mut_arr_get_str
yj_mut_arr_get_type
yj_mut_arr_iter_init
yj_mut_arr_iter_next
yj_mut_arr_remove_range
yj_mut_arr_rotate
yj_mut_arr_set_bool
yj_mut_arr_set_duoble
yj_mut_arr_set_im_obj_obj
yj_mut_arr_set_im_val
yj_mut_arr_set_int
yj_mut_arr_set_int64
yj_mut_arr_set_json
yj_mut_arr_set_mut_val
yj_mut_arr_set_narr
yj_mut_arr_set_nobj
yj_mut_arr_set_null
yj_mut_arr_set_str
yj_mut_doc_free
yj_mut_doc_get_json
yj_mut_equals_str
yj_mut_equals_str_pointer
yj_mut_equals_val_str
yj_mut_equals_val_val
yj_mut_get_bool
yj_mut_get_bool_pointer
yj_mut_get_double
yj_mut_get_double_pointer
yj_mut_get_int
yj_mut_get_int64
yj_mut_get_int64_pointer
yj_mut_get_int_pointer
yj_mut_get_malloc_count
yj_mut_get_num_type
yj_mut_get_num_type_pointer
yj_mut_get_obj
yj_mut_get_obj_pointer
yj_mut_get_size
yj_mut_get_size_pointer
yj_mut_get_str
yj_mut_get_str_pointer
yj_mut_get_type
yj_mut_get_type_pointer
yj_mut_get_val_bool
yj_mut_get_val_double
yj_mut_get_val_int
yj_mut_get_val_int64
yj_mut_get_val_json
yj_mut_get_val_num_type
yj_mut_get_val_size
yj_mut_get_val_str
yj_mut_get_val_strlen
yj_mut_get_val_type
yj_mut_new
yj_mut_obj_clear
yj_mut_obj_get
yj_mut_obj_get_key
yj_mut_obj_iter_get
yj_mut_obj_iter_init
yj_mut_obj_iter_next
yj_mut_obj_remove
yj_mut_obj_rotate
yj_mut_obj_set_bool
yj_mut_obj_set_duoble
yj_mut_obj_set_im_obj_obj
yj_mut_obj_set_im_val
yj_mut_obj_set_int
yj_mut_obj_set_int64
yj_mut_obj_set_json
yj_mut_obj_set_mut_val
yj_mut_obj_set_narr
yj_mut_obj_set_nobj
yj_mut_obj_set_null
yj_mut_obj_set_str
yj_mut_parse_file
yj_mut_parse_str
yj_mut_pointer_get_bool_config
yj_mut_pointer_get_duoble_config
yj_mut_pointer_get_int64_config
yj_mut_pointer_get_int_config
yj_mut_pointer_get_str_config
yj_mut_pointer_remove
yj_mut_pointer_set_bool
yj_mut_pointer_set_duoble
yj_mut_pointer_set_im_obj_obj
yj_mut_pointer_set_im_val
yj_mut_pointer_set_int
yj_mut_pointer_set_int64
yj_mut_pointer_set_json
yj_mut_pointer_set_mut_val
yj_mut_pointer_set_narr
yj_mut_pointer_set_nobj
yj_mut_pointer_set_null
yj_mut_pointer_set_str
yj_mut_pointer_swap_val
yj_mut_set_val_bool
yj_mut_set_val_duoble
yj_mut_set_val_im_obj_obj
yj_mut_set_val_im_val
yj_mut_set_val_int
yj_mut_set_val_int64
yj_mut_set_val_json
yj_mut_set_val_mut_val
yj_mut_set_val_narr
yj_mut_set_val_nobj
yj_mut_set_val_null
yj_mut_set_val_str
yj_mut_swap_val
yj_mut_val_new
yj_obj_get
yj_obj_get_key
yj_obj_iter_get
yj_obj_iter_init
yj_obj_iter_next
yj_parse_file
yj_parse_str
yj_read_err_get
yj_val_mut_new
zlib_compress
zlib_compress_size
zlib_uncompress
zlib_uncompress_deflate

Sections

.text
Size: 366KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90408e805bf1f49f0f992349b524e70d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 366KB - Virtual size: 366KB

.rdata Size: 81KB - Virtual size: 80KB

.data Size: 7KB - Virtual size: 44KB

.00cfg Size: 512B - Virtual size: 8B

.tls Size: 512B - Virtual size: 10B

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 366KB - Virtual size: 366KB

.rdata
Size: 81KB - Virtual size: 80KB

.data
Size: 7KB - Virtual size: 44KB

.00cfg
Size: 512B - Virtual size: 8B

.tls
Size: 512B - Virtual size: 10B

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 14KB - Virtual size: 13KB