a5cfd7e5b7b5ce9e0b4f1cf03cd3cab0N

Sharing

Copy URL Twitter E-mail

General

Target

a5cfd7e5b7b5ce9e0b4f1cf03cd3cab0N
Size

5KB
MD5

a5cfd7e5b7b5ce9e0b4f1cf03cd3cab0
SHA1

62f4ff50914ed72f2afe048fa2e9e2e33c59b059
SHA256

6e1ea6264aed4fccb8474f4202538250236b95f8d0d65b1800459ccbdcc80d88
SHA512

8dfb669f273a5e3d727652b3a780b04b7bf186457fa025a82bc512e2851da498cb7a192c18801eb0549a0cd01cf9ce2dbee39a07a00c16ae6622441b5a771adc
SSDEEP

96:0+tdfgT6FN3GkGaNKRCSdotQIz/Ahj1hQKdGtCRn:NgT6FNYRCSdotQIz/Ahj1hQKdGtCRn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5cfd7e5b7b5ce9e0b4f1cf03cd3cab0N

Files

a5cfd7e5b7b5ce9e0b4f1cf03cd3cab0N
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BoxedAppSDK_AddHandler
BoxedAppSDK_Alloc
BoxedAppSDK_AttachToProcess
BoxedAppSDK_CreateProcessFromMemoryA
BoxedAppSDK_CreateProcessFromMemoryW
BoxedAppSDK_CreateVirtualFileA
BoxedAppSDK_CreateVirtualFileBasedOnBufferA
BoxedAppSDK_CreateVirtualFileBasedOnBufferW
BoxedAppSDK_CreateVirtualFileBasedOnIStreamA
BoxedAppSDK_CreateVirtualFileBasedOnIStreamW
BoxedAppSDK_CreateVirtualFileW
BoxedAppSDK_CreateVirtualRegKeyA
BoxedAppSDK_CreateVirtualRegKeyW
BoxedAppSDK_DeleteFileFromVirtualFileSystemA
BoxedAppSDK_DeleteFileFromVirtualFileSystemW
BoxedAppSDK_DetachFromProcess
BoxedAppSDK_EnableDebugLog
BoxedAppSDK_EnableHook
BoxedAppSDK_EnableOption
BoxedAppSDK_ExecuteDotNetApplicationA
BoxedAppSDK_ExecuteDotNetApplicationW
BoxedAppSDK_Exit
BoxedAppSDK_Free
BoxedAppSDK_GetInternalValue
BoxedAppSDK_GetOriginalFunction
BoxedAppSDK_HookFunction
BoxedAppSDK_Init
BoxedAppSDK_IsOptionEnabled
BoxedAppSDK_RegisterCOMLibraryInVirtualRegistryA
BoxedAppSDK_RegisterCOMLibraryInVirtualRegistryW
BoxedAppSDK_RemoteAgent_AgentDllPath
BoxedAppSDK_RemoteAgent_Context
BoxedAppSDK_RemoteAgent_CreateProcessFlags
BoxedAppSDK_RemoteAgent_DetachThreadProc
BoxedAppSDK_RemoteAgent_EventInitCompleted
BoxedAppSDK_RemoteAgent_Init
BoxedAppSDK_RemoteAgent_MainAppImagePath
BoxedAppSDK_RemoteAgent_MainAppProcessHandle
BoxedAppSDK_RemoteAgent_NewImagePath
BoxedAppSDK_RemoteAgent_ThreadProc
BoxedAppSDK_RemoteAgent_ThreadToResumeHandle
BoxedAppSDK_RemoteAgent_bReplaceImage
BoxedAppSDK_RemoteAgent_hReadPipe__ToMainApp
BoxedAppSDK_RemoteAgent_hReadPipe__ToRemoteApp
BoxedAppSDK_RemoteAgent_hRemoteAgentDLL
BoxedAppSDK_RemoteAgent_hWritePipe__ToMainApp
BoxedAppSDK_RemoteAgent_hWritePipe__ToRemoteApp
BoxedAppSDK_RemoteAgent_pImageBase
BoxedAppSDK_RemoteProcess_EnableOption
BoxedAppSDK_RemoteProcess_IsOptionEnabled
BoxedAppSDK_RemoveHandler
BoxedAppSDK_SetContext
BoxedAppSDK_SetLogFileA
BoxedAppSDK_SetLogFileW
BoxedAppSDK_SetParam0
BoxedAppSDK_UnhookFunction
BoxedAppSDK_WriteLogA
BoxedAppSDK_WriteLogW

Sections

.text
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 512B - Virtual size: 1B

.rdata Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 8B

.text
Size: 512B - Virtual size: 1B

.rdata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 8B