d9d66d1dd10b6b1dff3d47d8f7eeef20N

Sharing

Copy URL Twitter E-mail

General

Target

d9d66d1dd10b6b1dff3d47d8f7eeef20N
Size

159KB
MD5

d9d66d1dd10b6b1dff3d47d8f7eeef20
SHA1

d3bd7b1c1d0b68d09fbfa7a08ee474eb05367b8a
SHA256

374655eab5930816843023261752007ded0a6818724aa5d79bb59e26d97b42e0
SHA512

bc32b5da773df76e14a253abfe65dea7a95a6d0ba9edfc4f91da31d63490f763a7cffd5c6c505296c85b07d30b9c2107a02ce679478175b835cea4b07973f6d4
SSDEEP

1536:3O1Q5WKUD6nRI88888ssd2Mjz3dSA8yoZ6YXcpHMYKz99H4h10T1:9WKUOnC88888ssdv3daZ62gsYKpShy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9d66d1dd10b6b1dff3d47d8f7eeef20N

Files

d9d66d1dd10b6b1dff3d47d8f7eeef20N
.dll windows:4 windows x86 arch:x86

e2ad959136647ce26882b33a82cf118e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

DeleteObject

ltkrn90n

ord188
ord134
ord101
ord100
ord209
ord214
ord141
ord125
ord163
ord191
ord196
ord192
ord179
ord174
ord190
ord189

kernel32

HeapCreate
HeapDestroy
SetFilePointer
SetStdHandle
CloseHandle
FlushFileBuffers
LoadLibraryA
VirtualAlloc
HeapFree
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetModuleFileNameA
WideCharToMultiByte
WriteFile
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetCPInfo
GetACP
GetOEMCP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW

Exports

Exports

DllMain
L_LoadRawFax
L_LoadTiledFax
L_SaveRawFax
fltInfo
fltLoad
fltSave

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2ad959136647ce26882b33a82cf118e

Headers

File Characteristics

Imports

gdi32

ltkrn90n

kernel32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 29KB - Virtual size: 34KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.rmnet Size: 96KB - Virtual size: 96KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 29KB - Virtual size: 34KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.rmnet
Size: 96KB - Virtual size: 96KB