365c7bbb3d794d5f506bac4b4444f0845668ecebfa8c55f64f02ef1f4507ae5c

Sharing

Copy URL Twitter E-mail

General

Target

365c7bbb3d794d5f506bac4b4444f0845668ecebfa8c55f64f02ef1f4507ae5c
Size

5.8MB
MD5

d76ec1de83a9c9fa01cdd410fce5b389
SHA1

b4abb3c0bb28baf111ee052965275c6c727a8fbe
SHA256

365c7bbb3d794d5f506bac4b4444f0845668ecebfa8c55f64f02ef1f4507ae5c
SHA512

242c9b650a869d090a45c459a016eca2250a424b1d90cccf4fcbaf0078d940f4172647bb1cae6e8bdf46ed7186a5b553c3a4b8f6208d4f8af7f6951f4ef30d71
SSDEEP

98304:EurBNQBIae3wq4SKfn8jP+gCoW4wfTx3:Fuvt8jPKFV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
365c7bbb3d794d5f506bac4b4444f0845668ecebfa8c55f64f02ef1f4507ae5c

Files

365c7bbb3d794d5f506bac4b4444f0845668ecebfa8c55f64f02ef1f4507ae5c
.dll windows:6 windows x64 arch:x64

347fc58f45fec285cbd6bd275b889bf5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

AcquireSRWLockExclusive
AreFileApisANSI
CheckRemoteDebuggerPresent
CloseHandle
CompareStringW
CreateDirectoryA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateRemoteThread
CreateRemoteThreadEx
CreateThread
CreateToolhelp32Snapshot
DecodePointer
DeleteCriticalSection
DeleteFileW
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushConsoleInputBuffer
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameExA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesExW
GetFileInformationByHandleEx
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetProcessId
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadId
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GlobalMemoryStatus
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapWalk
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
K32EnumDeviceDrivers
K32EnumProcesses
K32GetDeviceDriverBaseNameA
K32GetDeviceDriverFileNameA
K32GetModuleFileNameExA
K32GetModuleInformation
K32GetProcessImageFileNameA
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OpenProcess
OpenThread
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleInputW
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseSRWLockExclusive
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFileInformationByHandle
SetFilePointerEx
SetLastError
SetStdHandle
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WinExec
WriteConsoleW
WriteFile

user32

BeginPaint
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
EndPaint
FillRect
FindWindowA
FindWindowExA
GetClassNameA
GetClientRect
GetDC
GetMessageW
GetProcessWindowStation
GetRawInputDeviceInfoW
GetRawInputDeviceList
GetSystemMetrics
GetUserObjectInformationW
GetWindow
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InvalidateRect
MessageBoxA
MessageBoxW
PostQuitMessage
RegisterClassW
SetWindowPos
ShowWindow
TranslateMessage
UpdateWindow

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreatePatternBrush
CreateSolidBrush
DeleteDC
DeleteObject
GetCurrentObject
GetDIBits
GetObjectW
SelectObject
SetBrushOrgEx
SetStretchBltMode

ole32

CreateStreamOnHGlobal

advapi32

AdjustTokenPrivileges
AllocateAndInitializeSid
DeregisterEventSource
FreeSid
GetSecurityInfo
GetTokenInformation
GetUserNameA
ImpersonateLoggedOnUser
InitializeSecurityDescriptor
LookupPrivilegeValueA
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegisterEventSourceW
ReportEventW
RevertToSelf
SetEntriesInAclA
SetSecurityDescriptorDacl
SetSecurityInfo

ntdll

LdrLoadDll
NtAdjustPrivilegesToken
NtAlertResumeThread
NtClose
NtCreateFile
NtCreateThread
NtCreateThreadEx
NtDuplicateToken
NtOpenProcessToken
NtProtectVirtualMemory
NtQueryInformationFile
NtQueryInformationProcess
NtQueryInformationThread
NtQueryObject
NtQuerySystemInformation
NtQueryVirtualMemory
NtSetInformationProcess
NtSetInformationThread
NtSuspendThread
NtTerminateProcess
NtTerminateThread
RtlCreateUserThread
RtlImageNtHeader
ZwQuerySystemInformation

iphlpapi

GetAdaptersInfo
GetTcpTable2

ws2_32

WSACleanup
WSAGetLastError
WSAStartup
closesocket
gethostbyname
getpeername
htons
inet_addr
inet_ntoa
ntohl
ntohs
recvfrom
select
sendto
socket

dxgi

CreateDXGIFactory

shlwapi

PathAppendA
PathRemoveFileSpecA

dbghelp

ImageRvaToVa

gdiplus

GdipAlloc
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipFree
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToStream
GdiplusShutdown
GdiplusStartup

Exports

Exports

JNI_OnLoad
Java_dimension_DimensionAPI_addSelfFrom
Java_dimension_DimensionAPI_appendTasks
Java_dimension_DimensionAPI_calculate
Java_dimension_DimensionAPI_closeSource
Java_dimension_DimensionAPI_createTempBitMap
Java_dimension_DimensionAPI_deleteCache
Java_dimension_DimensionAPI_exitCalculate
Java_dimension_DimensionAPI_freeThreadPool
Java_dimension_DimensionAPI_getHuzpsbPY
Java_dimension_DimensionAPI_getMyLastError
Java_dimension_DimensionAPI_getMyLocaleInfo
Java_dimension_DimensionAPI_getPoolState
Java_dimension_DimensionAPI_getVeroFessPY
Java_dimension_DimensionAPI_initialThreadPool
Java_dimension_DimensionAPI_isValid
Java_dimension_DimensionAPI_moveSelfTo
Java_dimension_DimensionAPI_validate

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 58B

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

347fc58f45fec285cbd6bd275b889bf5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

advapi32

ntdll

iphlpapi

ws2_32

dxgi

shlwapi

dbghelp

gdiplus

Exports

Exports

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 1.1MB - Virtual size: 1.1MB

.pdata Size: 58KB - Virtual size: 58KB

.tls Size: 512B - Virtual size: 9B

.voltbl Size: 512B - Virtual size: 58B

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 512B - Virtual size: 424B

.reloc Size: 117KB - Virtual size: 116KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 1.1MB - Virtual size: 1.1MB

.pdata
Size: 58KB - Virtual size: 58KB

.tls
Size: 512B - Virtual size: 9B

.voltbl
Size: 512B - Virtual size: 58B

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 512B - Virtual size: 424B

.reloc
Size: 117KB - Virtual size: 116KB