eft-specter-emulation[.]vmp[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

eft-specter-emulation.vmp.dll
Size

18.1MB
MD5

e5f915019b7f1977675763db60ddcddf
SHA1

a676a0d6bf7f10cc5e7ce4d62882c36a966a6bfb
SHA256

f28a18188fbca5b0104d58f74c73dfe88bfbf16e9e1cd4c83e72ab1a573a17dd
SHA512

c5bf5ac52be6c253dc912bd03d400914195e957eb7c9ae545f1b090e2d061cd6a5ac18a4cf5144ca13dc8a83ed26e0e9a87b7fd7bccb758540b90c062cbb495c
SSDEEP

393216:GUkHOiD3i0bJYjm0xEpSDwNemiszOY0IqIuffHMSxO1tAbKG:GUkuiD3xbX0Op1NemixfvI6sSS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eft-specter-emulation.vmp.dll

Files

eft-specter-emulation.vmp.dll
.dll windows:6 windows x64 arch:x64

9643acf1438eb0f9ea1b9b483b516add

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CallWindowProcA

advapi32

CryptReleaseContext

shell32

ShellExecuteA

msvcp140

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

msvcp140_codecvt_ids

?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A

ntdll

RtlVirtualUnwind

imm32

ImmSetCandidateWindow

d3dcompiler_43

D3DCompile

normaliz

IdnToAscii

wldap32

ord22

crypt32

PFXImportCertStore

ws2_32

closesocket

shlwapi

PathFindFileNameW

rpcrt4

UuidToStringA

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception

api-ms-win-crt-stdio-l1-1-0

fputc

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-runtime-l1-1-0

system

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_ldsign

api-ms-win-crt-string-l1-1-0

isupper

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

dont_crack_me_oooh_uwu

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 870KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 749KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.6=|
Size: - Virtual size: 11.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

./UL
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.k)E
Size: 18.1MB - Virtual size: 18.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9643acf1438eb0f9ea1b9b483b516add

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcp140

msvcp140_codecvt_ids

ntdll

imm32

d3dcompiler_43

normaliz

wldap32

crypt32

ws2_32

shlwapi

rpcrt4

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 1.3MB

.rdata Size: - Virtual size: 870KB

.data Size: - Virtual size: 749KB

.pdata Size: - Virtual size: 47KB

.6=| Size: - Virtual size: 11.2MB

./UL Size: 5KB - Virtual size: 5KB

.k)E Size: 18.1MB - Virtual size: 18.1MB

.reloc Size: 512B - Virtual size: 284B

.text
Size: - Virtual size: 1.3MB

.rdata
Size: - Virtual size: 870KB

.data
Size: - Virtual size: 749KB

.pdata
Size: - Virtual size: 47KB

.6=|
Size: - Virtual size: 11.2MB

./UL
Size: 5KB - Virtual size: 5KB

.k)E
Size: 18.1MB - Virtual size: 18.1MB

.reloc
Size: 512B - Virtual size: 284B