7d9114955023bef9f59408aa107282c0N

Sharing

Copy URL

Twitter E-mail

General

Target

7d9114955023bef9f59408aa107282c0N
Size

176KB
MD5

7d9114955023bef9f59408aa107282c0
SHA1

b9bd79a246ec5b86e01dd70deb1901eb52691fe1
SHA256

d3d4c763262f1799ed6488da4f11b1c33035ee03a43ae32463fe200a81d70b6b
SHA512

fc0d4c98822417a851f78cacbcf32b25527707898ce574f31a114ae791570b9cff6147478ae069bd2a34c63445e03ce1249a8c66b5c505c1081762f86ed83947
SSDEEP

3072:DkuFv+1jFURSOOAONTxyUMN4lmg1sHednTLPfUTuIzMCIlpJDa9:Dk+v+veSFrNT8V4sH0n/nGz8rJW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d9114955023bef9f59408aa107282c0N

Files

7d9114955023bef9f59408aa107282c0N
.dll windows:5 windows x86 arch:x86

d2e71574e041d342d08ebd0a80b4ac65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winspool.drv

AddPrinterA

version

GetFileVersionInfoSizeW

clusapi

ClusterRegSetValue

user32

LoadIconA
IsRectEmpty
GetFocus
SetScrollPos
MapVirtualKeyA

setupapi

CM_Get_Res_Des_Data_Ex

ole32

OleGetClipboard

winmm

GetDriverModuleHandle

kernel32

GetModuleHandleW
LoadLibraryW
CreateToolhelp32Snapshot
CreateMailslotA
DeactivateActCtx
GetModuleHandleA
FileTimeToDosDateTime

advapi32

InitiateSystemShutdownW
SetUserFileEncryptionKey
RegSaveKeyExA

gdi32

ResetDCA
AngleArc
BeginPath

oleaut32

VarI4FromR4

iphlpapi

GetNumberOfInterfaces

Sections

.rdata0
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.qdata
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt3
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 683B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2e71574e041d342d08ebd0a80b4ac65

Headers

DLL Characteristics

File Characteristics

Imports

winspool.drv

version

clusapi

user32

setupapi

ole32

winmm

kernel32

advapi32

gdi32

oleaut32

iphlpapi

Sections

.rdata0 Size: 20KB - Virtual size: 18KB

.Rdata Size: 84KB - Virtual size: 82KB

.qdata Size: 4KB - Virtual size: 5KB

.CRT Size: 12KB - Virtual size: 11KB

.crt3 Size: 28KB - Virtual size: 26KB

.rsrc Size: 20KB - Virtual size: 18KB

.reloc Size: 4KB - Virtual size: 683B

.rdata0
Size: 20KB - Virtual size: 18KB

.Rdata
Size: 84KB - Virtual size: 82KB

.qdata
Size: 4KB - Virtual size: 5KB

.CRT
Size: 12KB - Virtual size: 11KB

.crt3
Size: 28KB - Virtual size: 26KB

.rsrc
Size: 20KB - Virtual size: 18KB

.reloc
Size: 4KB - Virtual size: 683B