8680cb4b1a1ba75ae5b4e4b7af5b2e9d2bda932afe00c87f96921e808d26b52dN

Sharing

Copy URL Twitter E-mail

General

Target

8680cb4b1a1ba75ae5b4e4b7af5b2e9d2bda932afe00c87f96921e808d26b52dN
Size

1.6MB
MD5

fc373d55186afb0a6b743ee121f8f680
SHA1

1576a235b5288b9c3779ced454e90a6bc83dd386
SHA256

8680cb4b1a1ba75ae5b4e4b7af5b2e9d2bda932afe00c87f96921e808d26b52d
SHA512

bfff21e76acd0483ce2a5609fae738220cc1b5afef6f9044d6fc605ccd541a2ff18f05472363dbe10ab14faef4e787b70b49e284d236e46a2378467e85c50845
SSDEEP

24576:zvx6TFFkSXqJPyZTkHZrzTyPU4zIASaQyNH5M5r+83kjzWFdwNKJgQkz2jhFt1TQ:ETFGIWXyf78H3HO0gghFt1TbUs7C5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8680cb4b1a1ba75ae5b4e4b7af5b2e9d2bda932afe00c87f96921e808d26b52dN

Files

8680cb4b1a1ba75ae5b4e4b7af5b2e9d2bda932afe00c87f96921e808d26b52dN
.dll windows:4 windows x86 arch:x86

3245331ed2de38d3b3ee18313bdba289

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
DeleteCriticalSection
SetEnvironmentVariableA
GetLocaleInfoW
GetDriveTypeA
SetEndOfFile
CreateFileA
GetCurrentDirectoryW
CreateFileW
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
ReadFile
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
RaiseException
HeapFree
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
CloseHandle
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameW
GetCurrentDirectoryA

user32

SetWindowLongW
IsWindow
SendMessageW
IsWindowVisible
ShowWindow

xpcom

NS_StringContainerFinish
NS_StringContainerInit
NS_StringGetData
NS_StringContainerInit2
NS_CStringGetData
NS_CStringContainerFinish
NS_CStringSetData
NS_CStringContainerInit
NS_Free
NS_Alloc
NS_GetServiceManager
NS_GetComponentManager

nspr4

PR_AtomicDecrement
PR_AtomicIncrement

oleaut32

VariantClear
SysAllocString
SysFreeString

Exports

Exports

NSGetModule

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3245331ed2de38d3b3ee18313bdba289

Headers

File Characteristics

Imports

kernel32

user32

xpcom

nspr4

oleaut32

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 24KB - Virtual size: 53KB

.reloc Size: 112KB - Virtual size: 111KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 24KB - Virtual size: 53KB

.reloc
Size: 112KB - Virtual size: 111KB