3879fdfd746b77f29e6fade812669796c8dfcf4db2f5d5409b10c5e584ae5494N

Sharing

Copy URL Twitter E-mail

General

Target

3879fdfd746b77f29e6fade812669796c8dfcf4db2f5d5409b10c5e584ae5494N
Size

786KB
MD5

bbf1620e74dd44a34e5a86ccd1c9dc70
SHA1

e4150416cdb0f65ee39e0f1c0c921e3ff9937d4e
SHA256

3879fdfd746b77f29e6fade812669796c8dfcf4db2f5d5409b10c5e584ae5494
SHA512

f4b1afca1cae3257f35ade77e43996f316e6b1db9ff9469aeac80e9279831816ce08642ef608b2f94758fbd5105adfc5692a06f2bde4c982bcf60fde70250302
SSDEEP

12288:sqDv/ebEpn0PMXg6Yo5mjI5MMDthr33b51y1Yg5miryw:5DvWbEpn0PMXzm8eMDtV3b51y1Ygnryw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3879fdfd746b77f29e6fade812669796c8dfcf4db2f5d5409b10c5e584ae5494N

Files

3879fdfd746b77f29e6fade812669796c8dfcf4db2f5d5409b10c5e584ae5494N
.dll windows:4 windows x64 arch:x64

48a5d0ff636a25bd9edc1fee7a658275

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_lock
_setjmp
_strnicmp
_ultoa
_unlock
abort
calloc
exit
fopen
fprintf
fputc
fputs
free
fwrite
isspace
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
realloc
setlocale
signal
sprintf
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
_write
_strdup

Exports

Exports

Java_org_xerial_snappy_BitShuffleNative_shuffle
Java_org_xerial_snappy_BitShuffleNative_shuffleDirectBuffer
Java_org_xerial_snappy_BitShuffleNative_unshuffle
Java_org_xerial_snappy_BitShuffleNative_unshuffleDirectBuffer
Java_org_xerial_snappy_SnappyNative_arrayCopy
Java_org_xerial_snappy_SnappyNative_isValidCompressedBuffer__JJJ
Java_org_xerial_snappy_SnappyNative_isValidCompressedBuffer__Ljava_lang_Object_2II
Java_org_xerial_snappy_SnappyNative_isValidCompressedBuffer__Ljava_nio_ByteBuffer_2II
Java_org_xerial_snappy_SnappyNative_maxCompressedLength
Java_org_xerial_snappy_SnappyNative_nativeLibraryVersion
Java_org_xerial_snappy_SnappyNative_rawCompress__JJJ
Java_org_xerial_snappy_SnappyNative_rawCompress__Ljava_lang_Object_2IILjava_lang_Object_2I
Java_org_xerial_snappy_SnappyNative_rawCompress__Ljava_nio_ByteBuffer_2IILjava_nio_ByteBuffer_2I
Java_org_xerial_snappy_SnappyNative_rawUncompress__JJJ
Java_org_xerial_snappy_SnappyNative_rawUncompress__Ljava_lang_Object_2IILjava_lang_Object_2I
Java_org_xerial_snappy_SnappyNative_rawUncompress__Ljava_nio_ByteBuffer_2IILjava_nio_ByteBuffer_2I
Java_org_xerial_snappy_SnappyNative_uncompressedLength__JJ
Java_org_xerial_snappy_SnappyNative_uncompressedLength__Ljava_lang_Object_2II
Java_org_xerial_snappy_SnappyNative_uncompressedLength__Ljava_nio_ByteBuffer_2II

Sections

.text
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48a5d0ff636a25bd9edc1fee7a658275

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 613KB - Virtual size: 613KB

.data Size: 9KB - Virtual size: 8KB

.rdata Size: 56KB - Virtual size: 56KB

.pdata Size: 40KB - Virtual size: 40KB

.xdata Size: 53KB - Virtual size: 53KB

.bss Size: - Virtual size: 5KB

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 613KB - Virtual size: 613KB

.data
Size: 9KB - Virtual size: 8KB

.rdata
Size: 56KB - Virtual size: 56KB

.pdata
Size: 40KB - Virtual size: 40KB

.xdata
Size: 53KB - Virtual size: 53KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 5KB - Virtual size: 5KB