55608aab5be6961d58bf1dd54ebe684f83a15a09c8efde8ce7327811ebf95dae

Sharing

Copy URL Twitter E-mail

General

Target

55608aab5be6961d58bf1dd54ebe684f83a15a09c8efde8ce7327811ebf95dae
Size

216KB
MD5

07dec1287ae238e97ac2008ca70c0fde
SHA1

b40db0ab72ea3b770de4ef652f80a3d36b3ba991
SHA256

55608aab5be6961d58bf1dd54ebe684f83a15a09c8efde8ce7327811ebf95dae
SHA512

fc2ee40339700e69f61c8a35b0433248d4a0b9c7870eea5c5ca90fd2251216e5bc882952612a8b993cf0709c157feea0007beb01b2f8f1cc7f1e8438b53840f6
SSDEEP

3072:UzRk6ZvS0KQKAakQXMVRAQL7ZJ+LImL2lQBV+UdE+rECWp7hKDne:GC6o0eAavXMVZ3bqBV+UdvrEFp7hKDne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55608aab5be6961d58bf1dd54ebe684f83a15a09c8efde8ce7327811ebf95dae

Files

55608aab5be6961d58bf1dd54ebe684f83a15a09c8efde8ce7327811ebf95dae
.dll windows:5 windows x86 arch:x86

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\workspace\WinISODownloader\Output\Win32\Release\intl.pdb

Imports

kernel32

EnumResourceLanguagesW
GetThreadLocale
GetProcAddress
GetLastError
GetLocaleInfoA
GetACP
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
HeapReAlloc
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetCPInfo
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
SetHandleCount
GetStartupInfoA
RtlUnwind
CloseHandle
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
SetFilePointer
ReadFile
CreateFileA
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetModuleHandleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_nl_expand_alias
_nl_msg_cat_cntr
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_fwprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_set_relocation_prefix
libintl_sprintf
libintl_swprintf
libintl_textdomain
libintl_version
libintl_vfprintf
libintl_vfwprintf
libintl_vprintf
libintl_vsprintf
libintl_vswprintf
libintl_vwprintf
libintl_wprintf
ngettext
textdomain

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ade5c162491aa66e606d88ce5db11b9

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 110KB

.rdata Size: 14KB - Virtual size: 13KB

.data Size: 5KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 111KB - Virtual size: 110KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 5KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 6KB