1198f97a147994f91dbcd993ab2144d9abf1aa739a41b6fb867d9e42793b0a32N

Sharing

Copy URL

Twitter E-mail

General

Target

1198f97a147994f91dbcd993ab2144d9abf1aa739a41b6fb867d9e42793b0a32N
Size

49KB
MD5

f9d6a6b8fd55cd0b20ad9549214d3db0
SHA1

dc9b2d531dce3314739130340e16446f19c2a66e
SHA256

1198f97a147994f91dbcd993ab2144d9abf1aa739a41b6fb867d9e42793b0a32
SHA512

68da426b27ee379c0187fdfd7e705385d4da12bdd9bcb07ac9596fda4b553d47c14bcc6e8ed9f350f4d58cf1a2ad62e95e0d8edfe2450522cd03a3d5a15e4671
SSDEEP

768:3B7X+oIRRs9sg35WB2rZ+sRlFcuV4hZU2YkkfCR0EDCn4rGh0gOjttuTC:R7X+oIRRIWB29+uTQqkK4ruOjtUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1198f97a147994f91dbcd993ab2144d9abf1aa739a41b6fb867d9e42793b0a32N

Files

1198f97a147994f91dbcd993ab2144d9abf1aa739a41b6fb867d9e42793b0a32N
.dll regsvr32 windows:5 windows x86 arch:x86

ede8a8d657cdc67879b390b6f792706c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\User\Desktop\Project\zlib1\Release\zlib1.pdb

Imports

kernel32

GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetCurrentThreadId
DecodePointer
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

DllRegisterServer
GetExportInterface
MsiInstallProductW
MsiSetInternalUI
cef_api_hash
cef_time_now

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ede8a8d657cdc67879b390b6f792706c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 5KB - Virtual size: 4KB