lxpztukzmpci[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

lxpztukzmpci.dll
Size

546KB
MD5

16953377c0ddd20f70ade252c0a8c41f
SHA1

9fc63c9ccbe780b978a18fa81de243c3e2a8e71b
SHA256

13ccffd00e2fa89167e29a8d382d8c417e198ffce8684df23e4a8a91fdc0f23e
SHA512

6540ee1569aad90a55cf95c0900361755c7a29f21b707da375b09a215f0d7fceac9326ae90e50af7e0b299c47e08bc75912b19caaf6e5aa7177c4008502d440a
SSDEEP

6144:WkjPk0anq7v9Ht4Wg8g3nMH6qsNE5OHFiSc2i8k7cTG51LoyEcXixuk0LUTcneoq:WhHqBN4B8g3HqgHFifF8kV5o5uksTl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lxpztukzmpci.dll

Files

lxpztukzmpci.dll
.exe windows:4 windows x64 arch:x64

33495b4092e6868c65f9b50b903816a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
realloc
strlen
strncmp
vfprintf

Exports

Exports

poll

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 501KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33495b4092e6868c65f9b50b903816a4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 144B

.rdata Size: 1KB - Virtual size: 1KB

.eh_fram Size: 512B - Virtual size: 4B

.pdata Size: 1024B - Virtual size: 864B

.xdata Size: 1024B - Virtual size: 740B

.bss Size: - Virtual size: 8KB

.edata Size: 512B - Virtual size: 72B

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 501KB - Virtual size: 500KB

.reloc Size: 512B - Virtual size: 96B

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 144B

.rdata
Size: 1KB - Virtual size: 1KB

.eh_fram
Size: 512B - Virtual size: 4B

.pdata
Size: 1024B - Virtual size: 864B

.xdata
Size: 1024B - Virtual size: 740B

.bss
Size: - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 72B

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 501KB - Virtual size: 500KB

.reloc
Size: 512B - Virtual size: 96B