68db2ce93ee2bd48c67492c0ac4860c5e85fa570b4422cf3605a3535054a44c5

General

Target

68db2ce93ee2bd48c67492c0ac4860c5e85fa570b4422cf3605a3535054a44c5
Size

351KB
MD5

42589dcdf647bbcf5ecfad4629110149
SHA1

53758650c1b1ac25e587bc245602a4e52f5ab5dd
SHA256

68db2ce93ee2bd48c67492c0ac4860c5e85fa570b4422cf3605a3535054a44c5
SHA512

bbe84f637ae0147615e1159388fc8c1bd12a2cf26371128acf5778d6728b075df1a249e9c6a9dc33e2912af9f3814534217bcd49c19740388bc0615ebc565735
SSDEEP

6144:rV1PefPT49Xk1jDFEC9RH5SeQZD3RSRXehPfzgJTO+pmI8Q3KSylyT+xutaAOlJF:rVJefcK1jDFvj5SeeRsuhP7gJT3pH8Iw

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/670fdabce8da0d580e275887f52f89e8666ec16704278ec682b15beded81726a

68db2ce93ee2bd48c67492c0ac4860c5e85fa570b4422cf3605a3535054a44c5
.zip

Password: infected
670fdabce8da0d580e275887f52f89e8666ec16704278ec682b15beded81726a
.dll windows:6 windows x86 arch:x86

0287a7604016003972a047b182e6c22a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForMultipleObjects
LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
CreateFileA
WideCharToMultiByte
GetLastError
Sleep
EnterCriticalSection
InitializeCriticalSection
GetProcAddress
LoadLibraryA

Exports

Exports

AloperNoteW

Sections

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 430KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ