ed0ee8f78660e83ac93acf09a9300f594d3f3dcf11e14baef29d704dae004d16

Sharing

Copy URL Twitter E-mail

General

Target

ed0ee8f78660e83ac93acf09a9300f594d3f3dcf11e14baef29d704dae004d16
Size

49KB
MD5

4cf877b3d816795ec0b99e8a97190347
SHA1

68e91a37f00b66e4b1d81ed581b71c1d463b0575
SHA256

ed0ee8f78660e83ac93acf09a9300f594d3f3dcf11e14baef29d704dae004d16
SHA512

be556669d2168ea95acec02068fe570341a4c72c36ab86bba7b509f2526e9ce48b79f0944a2417b4988d1dee84316f9244fba3858314bcd360edc78a40f9155d
SSDEEP

768:k3XpLl/aCR596QZTV1m9W5nSKLp6SW5/EMXNrcSHjSpF:0XpoCoQZTV1m0nSK675/EMXNTHjSpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed0ee8f78660e83ac93acf09a9300f594d3f3dcf11e14baef29d704dae004d16

Files

ed0ee8f78660e83ac93acf09a9300f594d3f3dcf11e14baef29d704dae004d16
.dll windows:4 windows x86 arch:x86

d53ed5125d4a93103a85b177341b5082

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcr90

__dllonexit
_amsg_exit
_decode_pointer
_encode_pointer
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
strlen
strncmp
vfprintf

python27

PyCFunction_Type
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_IsValid
PyCapsule_New
PyCode_New
PyDict_GetItem
PyDict_GetItemString
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_Size
PyErr_Format
PyErr_Occurred
PyErr_PrintEx
PyErr_SetString
PyErr_WarnEx
PyErr_WriteUnraisable
PyExc_ImportError
PyExc_NameError
PyExc_OverflowError
PyExc_RuntimeError
PyExc_SystemError
PyExc_TypeError
PyExc_ValueError
PyExc_ZeroDivisionError
PyFloat_AsDouble
PyFloat_FromDouble
PyFloat_Type
PyFrame_New
PyGILState_Ensure
PyGILState_Release
PyImport_AddModule
PyImport_Import
PyInt_FromLong
PyList_New
PyLong_AsLong
PyLong_AsUnsignedLong
PyMem_Malloc
PyMem_Realloc
PyMethod_Type
PyModule_GetDict
PyModule_GetName
PyNumber_Int
PyNumber_Long
PyOS_snprintf
PyObject_Call
PyObject_CallFunctionObjArgs
PyObject_GC_Track
PyObject_GC_UnTrack
PyObject_GetAttr
PyObject_GetAttrString
PyObject_GetItem
PyObject_IsTrue
PyObject_RichCompare
PyObject_SetAttr
PyObject_SetAttrString
PyString_AsString
PyString_FromFormat
PyString_FromString
PyString_FromStringAndSize
PyString_InternFromString
PyString_Type
PyTraceBack_Here
PyTuple_New
PyType_Ready
PyUnicodeUCS2_Compare
PyUnicodeUCS2_DecodeUTF8
Py_GetVersion
Py_InitModule4
_PyString_Eq
_PyThreadState_Current
_Py_CheckRecursionLimit
_Py_CheckRecursiveCall
_Py_NoneStruct
_Py_TrueStruct
_Py_ZeroStruct

Exports

Exports

initglenviron_limited

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d53ed5125d4a93103a85b177341b5082

Headers

File Characteristics

Imports

kernel32

msvcr90

python27

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 1KB

.edata Size: 512B - Virtual size: 94B

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 676B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 94B

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 676B

.reloc
Size: 3KB - Virtual size: 2KB