3539fefd21e776ac952dc398e897ee94c44582fa12bbe5862e15d6d37e7e317eN

Sharing

Copy URL

Twitter E-mail

General

Target

3539fefd21e776ac952dc398e897ee94c44582fa12bbe5862e15d6d37e7e317eN
Size

209KB
MD5

23d81f7a65c31c442423667578484690
SHA1

d71a1f1054c24b72880ecd1aa4902eb88514b7d6
SHA256

3539fefd21e776ac952dc398e897ee94c44582fa12bbe5862e15d6d37e7e317e
SHA512

91067eef2440645bb375c06c0b724f709b73449a802b410b6be06f5742746de5e31b4a92a389a31a0a61f4013ecca24a587bf6a6006d8c91be9cd7b4f9ab9fb8
SSDEEP

6144:2Ss3aQmEdIIIIptmAwo2Im0h1NRBV+UdvrEFp7hKFE3:2SOn/Fgoh/rBjvrEH7sE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3539fefd21e776ac952dc398e897ee94c44582fa12bbe5862e15d6d37e7e317eN

Files

3539fefd21e776ac952dc398e897ee94c44582fa12bbe5862e15d6d37e7e317eN
.dll windows:5 windows x86 arch:x86

52e3e94f274360da08ff84426478ae06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetModuleFileNameA
GetLastError
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCurrentThreadId
GetCommandLineA
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFullPathNameA
GetCurrentDirectoryA
MultiByteToWideChar
ReadFile
SetFilePointer
CloseHandle
RtlUnwind
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
WriteFile
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreateFileA
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
HeapSize
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

RSC_ASYM_ComputeKeyAgreement
RSC_ASYM_GenParam
RSC_ASYM_KeyAgreementParam_Delete
RSC_ASYM_KeyAgreementParam_New
RSC_ASYM_Param_Decode
RSC_ASYM_Param_Delete
RSC_ASYM_Param_Encode
RSC_ASYM_Param_New
RSC_CM_ErrorString
RSC_CM_SelfTest
RSC_CM_StateFinal
RSC_CM_StateInfo
RSC_CM_StateInit
RSC_CM_Version
RSC_KEY_GenKeyPair
RSC_KEY_PriKey_Delete
RSC_KEY_PriKey_New
RSC_KEY_PrivKey_Decode
RSC_KEY_PrivKey_Encode
RSC_KEY_PubKey_Decode
RSC_KEY_PubKey_Delete
RSC_KEY_PubKey_Encode
RSC_KEY_PubKey_New

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52e3e94f274360da08ff84426478ae06

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 106KB - Virtual size: 105KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 5KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 106KB - Virtual size: 105KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB