9d341a003a56034d8156d3bb6439a0be486f41c0c3656fd2c4f80ba2d56e6523

Sharing

Copy URL Twitter E-mail

General

Target

9d341a003a56034d8156d3bb6439a0be486f41c0c3656fd2c4f80ba2d56e6523
Size

392KB
MD5

2eae844cd28673b36086fd56b77530b9
SHA1

595de6fefba0a9dcf206435c8c2e83a385d406b8
SHA256

9d341a003a56034d8156d3bb6439a0be486f41c0c3656fd2c4f80ba2d56e6523
SHA512

aca19793929e668f01d040e7c8cfb90e0b0d6d27bffb10a105821af4c494c006768f2b51a05b58876eacc56299c03edc307c26e537d8d47bbb4b2fc34315e9fe
SSDEEP

1536:WkhSTTmThKuJ++RHkEED/egbe8lVM0jNsF4kyjEosY:WkhGEJxEqolVM3mEos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d341a003a56034d8156d3bb6439a0be486f41c0c3656fd2c4f80ba2d56e6523

Files

9d341a003a56034d8156d3bb6439a0be486f41c0c3656fd2c4f80ba2d56e6523
.dll windows:5 windows x86 arch:x86

d61dfe99bd46e43adc3ec42f381d817d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
CreateFileA
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
OpenProcess
GetCurrentProcessId
GetWindowsDirectoryA
WriteFile
MultiByteToWideChar
ReadFile
WaitForSingleObject
CreateProcessA
WideCharToMultiByte
DeleteFileA
GetSystemDirectoryA
GetVersionExA
GetOEMCP
GetFileSize
CloseHandle
VirtualAlloc
CreateFileW
GetStringTypeW
LCMapStringW
GetProcessHeap
SetEndOfFile
WriteConsoleW
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetACP
GetCPInfo
GetModuleFileNameW
HeapSize
VirtualFree
ExitThread
GetCurrentThreadId
CreateThread
GetFileAttributesA
DecodePointer
GetCommandLineA
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
RaiseException
InitializeCriticalSectionAndSpinCount
RtlUnwind
IsProcessorFeaturePresent
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
DeleteCriticalSection
SetFilePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
ExitProcess
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers

user32

CharLowerA

advapi32

GetUserNameA

wininet

HttpOpenRequestA
InternetReadFile
HttpSendRequestA
InternetCloseHandle
InternetQueryOptionA
HttpAddRequestHeadersA
InternetOpenA
InternetConnectA

psapi

EnumProcessModules
GetModuleBaseNameA

ws2_32

WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup

Exports

Exports

myfuc

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d61dfe99bd46e43adc3ec42f381d817d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

wininet

psapi

ws2_32

Exports

Exports

Sections

.text Size: 47KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 21KB

.reloc Size: 5KB - Virtual size: 5KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 47KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 21KB

.reloc
Size: 5KB - Virtual size: 5KB

.shell
Size: 320KB - Virtual size: 320KB