04345d40ea5401cca0f9385bed9dae1b4744c1418f20f94c04f21ed4fb53c7d5

Sharing

Copy URL Twitter E-mail

General

Target

04345d40ea5401cca0f9385bed9dae1b4744c1418f20f94c04f21ed4fb53c7d5
Size

22KB
MD5

a28b3f5c3824ae1388a391c5e4e54754
SHA1

10b5d96cf89cd0aecf7640ced8cfa200b481f1d1
SHA256

04345d40ea5401cca0f9385bed9dae1b4744c1418f20f94c04f21ed4fb53c7d5
SHA512

93c00982ae819e1b835a87264995e3ee1c5c1ef854e4026d221b813b8f7f17be39773773e89596c0baf2a3e852e85ee7a2ed0eb78e026c6d8561377f034fa877
SSDEEP

384:O5r7wvkHyXN6f2bpBu1IA5yLmcNqaOyXV56kIGhr:O5vwvkSdjpBuSA5ygaOylgkI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04345d40ea5401cca0f9385bed9dae1b4744c1418f20f94c04f21ed4fb53c7d5

Files

04345d40ea5401cca0f9385bed9dae1b4744c1418f20f94c04f21ed4fb53c7d5
.dll windows:5 windows x86 arch:x86

ded81be9ecc35733ca6bfddda6e14d28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

vfprintf
vprintf
fclose
fopen
_unlock
__dllonexit
_encode_pointer
_lock
??0exception@std@@QAE@ABV01@@Z
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
_CxxThrowException
??2@YAPAXI@Z
_invalid_parameter_noinfo
fflush
printf
__iob_func
fprintf
memset
sprintf
__CxxFrameHandler3
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
_onexit

kernel32

GetCurrentThreadId
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
GetLocalTime

Exports

Exports

??0SiSLog@SiS@@AAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0SiSLog@SiS@@QAE@ABV01@@Z
??1SiSLog@SiS@@AAE@XZ
??4SiSLog@SiS@@QAEAAV01@ABV01@@Z
?appendLabelFile@SiSLog@SiS@@AAEXPADPBD@Z
?appendLabelFunction@SiSLog@SiS@@AAEXPADPBD@Z
?appendLabelLevel@SiSLog@SiS@@AAEXPADPBD@Z
?appendLabelLine@SiSLog@SiS@@AAEXPADH@Z
?appendLabelOwner@SiSLog@SiS@@AAEXPAD@Z
?appendLabelTag@SiSLog@SiS@@AAEXPADPBD@Z
?appendLabelThreadID@SiSLog@SiS@@AAEXPAD@Z
?appendLabelTimeStamp@SiSLog@SiS@@AAEXPAD@Z
?createInstanceMap@SiSLog@SiS@@CAAAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVSiSLog@SiS@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVSiSLog@SiS@@@std@@@2@@std@@XZ
?freeInstance@SiSLog@SiS@@SAXPAV12@@Z
?getCurrentThreadIDString@SiSLog@SiS@@AAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getCurrentTimeString@SiSLog@SiS@@AAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getInstance@SiSLog@SiS@@SAPAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getLogLabelStr@SiSLog@SiS@@AAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4LogLabel@12@@Z
?getOwnerSiS@SiSLog@SiS@@SAPAV12@XZ
?init@SiSLog@SiS@@AAEXXZ
?isLOG_D@SiSLog@SiS@@QAE_NXZ
?isLOG_E@SiSLog@SiS@@QAE_NXZ
?isLOG_I@SiSLog@SiS@@QAE_NXZ
?isLOG_W@SiSLog@SiS@@QAE_NXZ
?m_ownerSiS@SiSLog@SiS@@0PAV12@A
?m_pInstances@SiSLog@SiS@@0PAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVSiSLog@SiS@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVSiSLog@SiS@@@std@@@2@@std@@A
?printLog@SiSLog@SiS@@QAAXPBD000H0ZZ
?printLogFormat@SiSLog@SiS@@QAEXXZ
?releaseLogFile@SiSLog@SiS@@QAEXXZ
?setDebugVisible@SiSLog@SiS@@QAEX_N@Z
?setErrorVisible@SiSLog@SiS@@QAEX_N@Z
?setInfoVisible@SiSLog@SiS@@QAEX_N@Z
?setLogFile@SiSLog@SiS@@QAEXPBD@Z
?setLogFormat@SiSLog@SiS@@QAEXW4LogFormat@12@@Z
?setLogFormat@SiSLog@SiS@@QAEXW4LogLabel@12@0000000@Z
?setLogType@SiSLog@SiS@@QAEXH@Z
?setWarningVisible@SiSLog@SiS@@QAEX_N@Z

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ded81be9ecc35733ca6bfddda6e14d28

Headers

DLL Characteristics

File Characteristics

Imports

msvcp90

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB