8fdf0f7b062c2870942d3f04a9c3154463410916ff838f504a0557e4c68298db

General

Target

8fdf0f7b062c2870942d3f04a9c3154463410916ff838f504a0557e4c68298db
Size

13KB
MD5

5406891453516cc648e98e62d741b502
SHA1

02732b46dfbc023536b8b0e4520d3cd3ff83d637
SHA256

8fdf0f7b062c2870942d3f04a9c3154463410916ff838f504a0557e4c68298db
SHA512

6b5470d607a7da9a0ac28a73a5783fc3e0cf3026900a49acb6e22b2d9ca1dd6b264a086538e107f407d80195d5c4cbce2c269d04cb6a225855fbf69120f95568
SSDEEP

192:X14l3TOiqvFnVkNyQHJLLq+4bhdR6UjOet+elec7kwc70WiM94fe7ADdE:XGqvrGe+43hjACk+WV4fe7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fdf0f7b062c2870942d3f04a9c3154463410916ff838f504a0557e4c68298db

Files

8fdf0f7b062c2870942d3f04a9c3154463410916ff838f504a0557e4c68298db
.dll windows:6 windows x86 arch:x86

17ee8ba4f4b565806ab8688956d8ff41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

optimfrog

OptimFROG_getVersion
OptimFROG_seekable
OptimFROG_openExt
OptimFROG_destroyInstance
OptimFROG_createInstance
OptimFROG_read
OptimFROG_seekPoint
OptimFROG_getInfo

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
memset
_purecall
__std_exception_copy
__std_exception_destroy
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_initterm_e

Exports

Exports

kpi_CreateInstance

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17ee8ba4f4b565806ab8688956d8ff41

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

optimfrog

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 820B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 820B