ea147481291e7f971fd9f03a91fc0b4bf4330a8d42e74534c11b0aa08b0a3d41

Sharing

Copy URL Twitter E-mail

General

Target

ea147481291e7f971fd9f03a91fc0b4bf4330a8d42e74534c11b0aa08b0a3d41
Size

2.2MB
MD5

8ea42fbede2322ab8bc37b4dc3f2be82
SHA1

4b70373f52bf11b737c5739420721486d9c30c34
SHA256

ea147481291e7f971fd9f03a91fc0b4bf4330a8d42e74534c11b0aa08b0a3d41
SHA512

e30a97ef477de03d4e4be2cb38df898482f5896b747161966cad1a185fa656c979527dd0a1dc66c25d6caf421fab5b718aab26b22629ff1a612fecb69bde5c60
SSDEEP

49152:7r3/mpO5OQEUsWic4VcpGK15IwF6ib25JxLS6cz/Zwj:7r3+pO5OQEQ+A95IwF6ib25X7KZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea147481291e7f971fd9f03a91fc0b4bf4330a8d42e74534c11b0aa08b0a3d41

Files

ea147481291e7f971fd9f03a91fc0b4bf4330a8d42e74534c11b0aa08b0a3d41
.dll windows:5 windows x86 arch:x86

fe5cc2305198c1d4e3705af9d290f9a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsA

msvcrt

isupper

ole32

HMENU_UserUnmarshal
GetHGlobalFromILockBytes
OleSetContainedObject

setupapi

SetupDiSetSelectedDriverA

advapi32

GetCurrentHwProfileA

winscard

SCardEndTransaction

kernel32

ReadConsoleW
GetModuleFileNameA
CloseHandle
OutputDebugStringA
InterlockedPushEntrySList
GetSystemTimeAsFileTime
CopyFileW
SetPriorityClass
QueryPerformanceCounter

user32

CloseDesktop
SetMessageQueue

ntdsapi

DsReplicaFreeInfo

mprapi

MprConfigServerConnect

Sections

.text
Size: 496KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt1
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bI6k
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe5cc2305198c1d4e3705af9d290f9a5

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

msvcrt

ole32

setupapi

advapi32

winscard

kernel32

user32

ntdsapi

mprapi

Sections

.text Size: 496KB - Virtual size: 494KB

.crt1 Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 368KB - Virtual size: 365KB

.data Size: 32KB - Virtual size: 32KB

.qdata Size: 36KB - Virtual size: 33KB

bI6k Size: 108KB - Virtual size: 104KB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 16KB - Virtual size: 13KB

.text
Size: 496KB - Virtual size: 494KB

.crt1
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 368KB - Virtual size: 365KB

.data
Size: 32KB - Virtual size: 32KB

.qdata
Size: 36KB - Virtual size: 33KB

bI6k
Size: 108KB - Virtual size: 104KB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 16KB - Virtual size: 13KB