DLLLoader64_F2D4[.]zip

General

Target

DLLLoader64_F2D4.zip
Size

16KB
MD5

f6fa2d90cbea4cb9c6d4943192e1dde0
SHA1

484116a3e80ff22fe62322f00e78fe6f5e4a076a
SHA256

cb76246d87e97dd3e1105132b9eb76dc8d41259d60c6b025e1e0cafeadefaa98
SHA512

2488bf07792683ec55298aa96bd40db80d8a02e4c9096cd339b3c81314ccb022abcd19e7cbf7c41025b69c07d0309a3e1d189a9d7c4991bc7a6910d025775e04
SSDEEP

384:KCWx4MMyfMNj6ZBRUBKVhb+N3EWVq/k3TDPcyNI3RPbF1ZsIP4WBTcw:K5x7MkLKKX+NUWg/k3EykpbF/4scw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DLLLoader64_F2D4.exe

Files

DLLLoader64_F2D4.zip
.zip

Password: 123456@!
DLLLoader64_F2D4.exe
.exe windows:5 windows x64 arch:x64

Password: 123456@!

31ecb936195c01904467b93282bd4f6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LoadLibraryW
CloseHandle
UnmapViewOfFile
lstrcpyW
MapViewOfFile
OpenFileMappingW
GetCurrentProcessId
MultiByteToWideChar
LCMapStringW
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
GetLastError
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapAlloc
HeapReAlloc
GetStringTypeW

user32

wsprintfW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123456@!

Password: 123456@!

31ecb936195c01904467b93282bd4f6a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 9KB

.pdata Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 436B

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 9KB

.pdata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 436B