cd1c054429cd2a2dafe9b87ab12ac7df5bf67e3c0ef6b8e611f6aa70298e5d2a

Sharing

Copy URL

Twitter E-mail

General

Target

cd1c054429cd2a2dafe9b87ab12ac7df5bf67e3c0ef6b8e611f6aa70298e5d2a
Size

440KB
MD5

5816e5fac86d50b17b624bdeb037cd38
SHA1

2d98871f565338d9ad435572fcd564dd2e0b5da1
SHA256

cd1c054429cd2a2dafe9b87ab12ac7df5bf67e3c0ef6b8e611f6aa70298e5d2a
SHA512

a9e75f2e764522aabce3995d634ba8c8df75d3f772e635c99b513436fab60b51402f665647724d9aa620acba2cdceda12e4d6a4102af9c953efa836883a70929
SSDEEP

6144:oNhD7hfOxUPdPUPIu2Gps76IIQDYfl2IPkN6yzIeX6Szu8v97YLRU5SXvaU1njlh:oDhPGyXIQDYfw6bQgRSStnjofxU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd1c054429cd2a2dafe9b87ab12ac7df5bf67e3c0ef6b8e611f6aa70298e5d2a

Files

cd1c054429cd2a2dafe9b87ab12ac7df5bf67e3c0ef6b8e611f6aa70298e5d2a
.dll windows:4 windows x86 arch:x86

15e5091267270bb0ff1881dd0d26812d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

g:\项目管理\自主项目\网聚联盟\无进程\NetFilter\release\NetFilter.pdb

Imports

kernel32

MapViewOfFile
UnmapViewOfFile
CloseHandle
GetLastError
GetACP
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThread
OutputDebugStringA
GetModuleFileNameW
ResumeThread
GetModuleFileNameA
VirtualQuery
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
VirtualAllocEx
WriteProcessMemory
GetProcAddress
OpenFileMappingA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateFileA
WriteFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetThreadContext
GetThreadContext
FlushInstructionCache
InterlockedCompareExchange
GetTempPathA
GetPrivateProfileStringA
QueueUserAPC
GetPrivateProfileIntA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
FreeLibrary
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SuspendThread
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetSystemInfo
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
RtlUnwind
VirtualFree
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
Sleep
HeapSize
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA

user32

MessageBoxA
SetWindowsHookExA
CallNextHookEx
UnhookWindowsHookEx

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

wininet

InternetCrackUrlA

Exports

Exports

InstallHook
UninstallHook

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15e5091267270bb0ff1881dd0d26812d

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

wininet

Exports

Exports

Sections

.text Size: 288KB - Virtual size: 287KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 48KB - Virtual size: 53KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 288KB - Virtual size: 287KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 48KB - Virtual size: 53KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 28KB - Virtual size: 27KB