337c36db890f1913857d4800defb7d0c21c7db8fa0dba701fa8508f47d31aab9

Sharing

Copy URL Twitter E-mail

General

Target

337c36db890f1913857d4800defb7d0c21c7db8fa0dba701fa8508f47d31aab9
Size

88KB
MD5

22da6478ef8fdfad7b5a8616cd05d158
SHA1

ada0d556da0a9ff819499f1b3e2ce1a61e9987c7
SHA256

337c36db890f1913857d4800defb7d0c21c7db8fa0dba701fa8508f47d31aab9
SHA512

a67574d589c6e05bdb2115d7a36f4ad7d566dd70f79d2c015f9f951c4a22ea880a8fd88cb5c452915cf7cc3afe448ddc1af626cc21db8f2a830df8f3a8e926fc
SSDEEP

1536:8F0e5GXdkotgv3WReEbRXTMUoTgjxw71omN2pt7:8F0eL34RvzVw71omYpt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
337c36db890f1913857d4800defb7d0c21c7db8fa0dba701fa8508f47d31aab9

Files

337c36db890f1913857d4800defb7d0c21c7db8fa0dba701fa8508f47d31aab9
.dll windows:4 windows x86 arch:x86

b3dff99769245c6ce85f102be1fcb878

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetProcAddress
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
InitializeCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
DeleteCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
SetFilePointer
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

IM_AllocResource
IM_DoHistogramProcess
IM_DoIfrProcess
IM_FreeResource
IM_GetAGCStatus
IM_GetBufferColorRuler
IM_GetGainRange
IM_GetHistogramGain
IM_GetHistogramLevel
IM_GetHistogramMaxGray
IM_GetHistogramMinGray
IM_GetHistogramTblData
IM_GetHistogramTblLength
IM_GetImageResolution
IM_GetLevelRange
IM_GetMaxContrastCtrl
IM_GetVersion
IM_Init
IM_SetAGCStatus
IM_SetDataFormat
IM_SetDataWidth
IM_SetEnhanceMode
IM_SetFilterMode
IM_SetFusionMode
IM_SetFusionThreshold
IM_SetHistogramComboModeGain
IM_SetHistogramComboModeLevel
IM_SetHistogramGain
IM_SetHistogramLevel
IM_SetHistogramMaxGray
IM_SetHistogramMinGray
IM_SetImageFlipMode
IM_SetImageResolution
IM_SetMaxContrastCtrl
IM_SetVisualImage
IM_SwapColorRulerBuffer
_IM_SetBendiLimmit@8
_IM_SetColorRulerMode@8
_IM_SetF5ColorRulerParameter@20
_IM_SetUNCompensateMode@8
_IM_UNCCompensateSetColumnThreshold@8

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3dff99769245c6ce85f102be1fcb878

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 864B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 864B

.reloc
Size: 8KB - Virtual size: 4KB