NoThreatDetected-7546603e68cf7eab8294a558972a40009528e0a70f13fa7563edaab2df22e507N

Sharing

Copy URL

Twitter E-mail

General

Target

NoThreatDetected-7546603e68cf7eab8294a558972a40009528e0a70f13fa7563edaab2df22e507N
Size

703KB
MD5

72e32a5d7deac85377d94b9a187334d0
SHA1

2f274fb6d10f42ce94bd25bebf6f9731976f35f0
SHA256

7546603e68cf7eab8294a558972a40009528e0a70f13fa7563edaab2df22e507
SHA512

eee4d6aced085dc63b64acf935cbcc29b3e952c6ed8f89a0f2de45bfc9b00aa716faff4b110b96745e2d1b677e04c74357de2fcec0bea9f86433ea323c4c8518
SSDEEP

6144:q9C/ZgzOK+E6rZ4qr+/Iml0eTn5APeFZ6lxz0hDlWHpOCYR:jhwOK+FZH+/I/cn5Ue3MxDXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NoThreatDetected-7546603e68cf7eab8294a558972a40009528e0a70f13fa7563edaab2df22e507N

Files

NoThreatDetected-7546603e68cf7eab8294a558972a40009528e0a70f13fa7563edaab2df22e507N
.dll windows:6 windows x86 arch:x86

433ee8e29549c4bf2e3d8bd7d77e5c35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

htonl

kernel32

WriteProcessMemory
GetModuleFileNameW
GetProcAddress
LoadLibraryA
LoadLibraryW
K32EnumProcessModules
K32GetModuleFileNameExW
VirtualProtect
ExitProcess
CreateFileA
CreateFileW
CreateProcessW
GetModuleHandleW
IsDebuggerPresent
CloseHandle
SetUnhandledExceptionFilter
Sleep
GetCurrentProcessId
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
VirtualAlloc
OpenFileMappingW
ReadProcessMemory
UnmapViewOfFile
GetModuleHandleA
SetProcessDEPPolicy
GetPrivateProfileStringW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateProcessA
ReadFile
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeA
GetTempPathW
WaitForSingleObject
CreatePipe
SetHandleInformation
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
VirtualProtectEx
VirtualAllocEx
ResumeThread
SuspendThread
HeapCreate
InitializeCriticalSection
MoveFileExW
MapViewOfFile
GetLastError
SetFilePointer
SetEndOfFile
GetFileSize
GetFileAttributesW
IsProcessorFeaturePresent
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetCommandLineA
HeapAlloc
RaiseException
HeapDestroy
HeapFree
UnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
CreateSemaphoreW
GetCurrentThread
DeleteCriticalSection
FatalAppExitA
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
OutputDebugStringW
GetStringTypeW
HeapSize
VirtualFree
CreateThread
DeleteFileW

user32

RegisterClassExA
MessageBoxA
RegisterClassA
wsprintfW
MessageBoxW
LoadStringA
CreateWindowExA

gdi32

EnumFontFamiliesExW

advapi32

RegOpenKeyExW
RegOpenKeyExA

imagehlp

MakeSureDirectoryPathExists

imm32

ImmAssociateContext

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

M0
M1
M10
M11
M12
M13
M14
M15
M2
M3
M4
M5
M6
M7
M8
M9
M_S0
M_S1
MaiDMFunc
MaiSfDummyEp
MmkeSureDirectoryPathExists
_MmmAssociateContext@8

Sections

.text
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 339KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

433ee8e29549c4bf2e3d8bd7d77e5c35

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

advapi32

imagehlp

imm32

version

Exports

Exports

Sections

.text Size: 293KB - Virtual size: 293KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 339KB - Virtual size: 736KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 293KB - Virtual size: 293KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 339KB - Virtual size: 736KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 17KB - Virtual size: 17KB