6a6867a32035d23caa5af505e9ca202fd1f41cf900be03025b6aac0972574fb6N

General

Target

6a6867a32035d23caa5af505e9ca202fd1f41cf900be03025b6aac0972574fb6N
Size

335KB
MD5

0c86573e5adf441169455fc6e3ddb3b0
SHA1

9b3566f1e5292793381276388c9044190b91983c
SHA256

6a6867a32035d23caa5af505e9ca202fd1f41cf900be03025b6aac0972574fb6
SHA512

b68d82b994ab077665238953bd6a8a616b4c38e8cf06e985336752bd2323c906357ba47c57722f30c03c0cd0b61a2c04b37e8fa90c991f46d12eafba19c119c4
SSDEEP

6144:pmHxccw2tt3XZxRZXbLFboe4FF+xNWcS5oy+/ncl7a8vD7SDhIxcQenaJFhaWd:wRvzw+xNWcS5oy2nclG8vvchzQenyD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a6867a32035d23caa5af505e9ca202fd1f41cf900be03025b6aac0972574fb6N

Files

6a6867a32035d23caa5af505e9ca202fd1f41cf900be03025b6aac0972574fb6N
.dll windows:4 windows x86 arch:x86

d3e1eb63b56b4d2a944e5d4667bc7aa4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcscat
wcslen
wcscpy
wcscmp
strrchr
strlen
strcpy
strcmp
strcat
sprintf
memset
memcpy
malloc
longjmp
log10
ispunct
fwrite
ftell
fseek
fopen
floor
fflush
fclose
ceil
_wfopen
_strupr
_stat
_sopen
_ismbcgraph
_errno
_beginthreadex
_adj_fdiv_m16i
__p__timezone
__p__commode
wcsrchr
__dllonexit

winmm

waveInGetID
mmioFlush

kernel32

VirtualAlloc
Sleep
SetThreadPriority
SetThreadAffinityMask
SetEvent
ResetEvent
QueryPerformanceCounter
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
GetThreadPriority
GetSystemTimeAsFileTime
GetSystemInfo
GetProcessPriorityBoost
GetProcessAffinityMask
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
ExitProcess
EnterCriticalSection
DeleteCriticalSection
CreateEventA
CloseHandle
WaitForSingleObject

Exports

Exports

CreateSPMesh
CreateSkinInfoFromBlendedMesh
DevInstToInstanceNameW

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3e1eb63b56b4d2a944e5d4667bc7aa4

Headers

File Characteristics

Imports

msvcrt

winmm

kernel32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 137KB - Virtual size: 136KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 62KB - Virtual size: 62KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 137KB - Virtual size: 136KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 62KB - Virtual size: 62KB

.reloc
Size: 3KB - Virtual size: 3KB