101eeb43a20d61d1bbcbe5c3538e8f7604b53401c04eedb0f8e7a166a746c9c1N

Sharing

Copy URL Twitter E-mail

General

Target

101eeb43a20d61d1bbcbe5c3538e8f7604b53401c04eedb0f8e7a166a746c9c1N
Size

96KB
MD5

6548808236a44f46b491737d18f5f1a0
SHA1

adfa6413af7bee13ab97173f88361ff3fd1ea146
SHA256

101eeb43a20d61d1bbcbe5c3538e8f7604b53401c04eedb0f8e7a166a746c9c1
SHA512

1d44bcd6b4d9281ca5682b3186f99afff72177cd8f2a7501b8abe938342bd86687e4ef64d5a8c7e733cc5f056e370843b22a8b2c145840f83748f96216dbf38f
SSDEEP

1536:Kcu/ueU4ghF7Gm2FJQKbeBqJ4GF4XCjXgi3Pyjz9PkAxJPtIgP:3QI4ghF7Gm2FJVeqmi4XCjXg4PY9Pvxj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
101eeb43a20d61d1bbcbe5c3538e8f7604b53401c04eedb0f8e7a166a746c9c1N

Files

101eeb43a20d61d1bbcbe5c3538e8f7604b53401c04eedb0f8e7a166a746c9c1N
.dll windows:6 windows x64 arch:x64

91248d22a345ccb30010274d59f0b1f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

IsDebuggerPresent
FreeLibrary
GetProcAddress
GetLastError
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentProcess
GetCurrentProcessId
SwitchToThread
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
VerSetConditionMask
GetFileAttributesW
GetFullPathNameW
SetLastError
GetSystemDirectoryW
LoadLibraryExW
LocalAlloc
LocalFree
VerifyVersionInfoW
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memcpy
memset
wcsrchr
wcsstr

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm
_initterm_e
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

isalpha
isdigit
_wcsicmp
_wcsnicmp
_wcsupr

Exports

Exports

?c10_cuda_test@impl@cuda@c10@@YAHXZ
NvOptimusEnablementCuda

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91248d22a345ccb30010274d59f0b1f3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 43KB - Virtual size: 43KB

.data Size: 512B - Virtual size: 7KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 43KB - Virtual size: 43KB

.data
Size: 512B - Virtual size: 7KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1KB - Virtual size: 1KB