9d300007f6132892da7d4c3612dfdc0f7d137c1b007a4744c263a0a39a0d6088

Sharing

Copy URL Twitter E-mail

General

Target

9d300007f6132892da7d4c3612dfdc0f7d137c1b007a4744c263a0a39a0d6088
Size

254KB
MD5

f1d4332c6ee76acfc269bdd7038de82b
SHA1

7d588ec11172abeff1009958038ff9a231ce1592
SHA256

9d300007f6132892da7d4c3612dfdc0f7d137c1b007a4744c263a0a39a0d6088
SHA512

4aea0c4daeea90665932cb6cde73b46e8534348a2697634e6c34cdbd7b16fc66d0931adf1f3597e2c2cc58112c22b51e2dcce0e97e3a14088264b92e8ab8f26c
SSDEEP

6144:TRhdxyLnAMZjXiwbeGwNwRfVTSIAOW7q:9QsiXBS+pdEq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d300007f6132892da7d4c3612dfdc0f7d137c1b007a4744c263a0a39a0d6088

Files

9d300007f6132892da7d4c3612dfdc0f7d137c1b007a4744c263a0a39a0d6088
.dll windows:6 windows x86 arch:x86

a27b750d35a323746f24c2658c85c061

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\code\clean_master\webwrap\webwrap\Release\webwrap.pdb

Imports

kernel32

DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
FindResourceExW
GetModuleFileNameW
GetProcAddress
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
FlushFileBuffers
WriteConsoleW
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
FormatMessageW
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LocalFree
GetCurrentProcessId
GetCurrentThreadId
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexW
MultiByteToWideChar
CreateFileW
CloseHandle
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
DeleteFileW
GetFileType
SetFilePointerEx
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetTimeZoneInformation
ExitProcess
GetModuleHandleExW
GetStdHandle
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetEndOfFile
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA

user32

wsprintfW

shlwapi

PathRemoveFileSpecW
PathFileExistsW
StrStrIW

Sections

.text
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a27b750d35a323746f24c2658c85c061

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shlwapi

Sections

.text Size: 174KB - Virtual size: 174KB

.rdata Size: 63KB - Virtual size: 63KB

.data Size: 5KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 174KB - Virtual size: 174KB

.rdata
Size: 63KB - Virtual size: 63KB

.data
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 10KB - Virtual size: 9KB