778ccc7f6b305fec1835cfae9d68166d905fe02c74f513693742dc8cadfc0496

Sharing

Copy URL

Twitter E-mail

General

Target

778ccc7f6b305fec1835cfae9d68166d905fe02c74f513693742dc8cadfc0496
Size

994KB
MD5

a9eda6c1ece9e0df2490f12e8429394c
SHA1

a554e4e35f2648971d53907d6cf3d2f523b2c2c8
SHA256

778ccc7f6b305fec1835cfae9d68166d905fe02c74f513693742dc8cadfc0496
SHA512

99a06b1b69bb2747c5b791410de6194ccf65eddae44886d08f4cbd597cb09fcb94ae6775c96b3cb50c729545a198d3701c39ff3649706890236ae56b757b17e0
SSDEEP

24576:G34T1BIzEM/tREVJjTrrb2QE4PcGcLWkB/Wr7TXC4HBO8UC+wyV9s2Q9dEtx/8qX:vLX93HE6h+K5yL/+2Q9deT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
778ccc7f6b305fec1835cfae9d68166d905fe02c74f513693742dc8cadfc0496

Files

778ccc7f6b305fec1835cfae9d68166d905fe02c74f513693742dc8cadfc0496
.dll windows:6 windows x86 arch:x86

17b53e29051f5fa4ecd8fc5fc8f086b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

d3d9

Direct3DCreate9

kernel32

MultiByteToWideChar

user32

SetClipboardData

gdi32

GetDeviceCaps

shell32

ShellExecuteA

msvcp140

??1_Locinfo@std@@QAE@XZ

imm32

ImmReleaseContext

vcruntime140

__current_exception_context

api-ms-win-crt-runtime-l1-1-0

terminate

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

api-ms-win-crt-string-l1-1-0

isspace

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

realloc

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-math-l1-1-0

_libm_sse2_cos_precise

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

Exports

Exports

Direct3DCreate8

Sections

.text
Size: 228KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.KO2_0_P
Size: 757KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.KO2_0_P
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17b53e29051f5fa4ecd8fc5fc8f086b0

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

kernel32

user32

gdi32

shell32

msvcp140

imm32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

msvcrt

iphlpapi

psapi

advapi32

Exports

Exports

Sections

.text Size: 228KB - Virtual size: 468KB

.KO2_0_P Size: 757KB - Virtual size: 760KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 1024B - Virtual size: 4KB

.KO2_0_P Size: 4KB - Virtual size: 4KB

.text
Size: 228KB - Virtual size: 468KB

.KO2_0_P
Size: 757KB - Virtual size: 760KB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 4KB

.KO2_0_P
Size: 4KB - Virtual size: 4KB