3fea88b2d3e1a02e4ae9c61755ce71e99b7e1eddb4b5d415cac53d5230f1bebfN

Sharing

Copy URL Twitter E-mail

General

Target

3fea88b2d3e1a02e4ae9c61755ce71e99b7e1eddb4b5d415cac53d5230f1bebfN
Size

224KB
MD5

9c4431f88004d606c1753de70fdeeaf0
SHA1

dac3374e1f601f5a1240c3a8ba744103f9976b75
SHA256

3fea88b2d3e1a02e4ae9c61755ce71e99b7e1eddb4b5d415cac53d5230f1bebf
SHA512

ff778b5f323c7fddb94f536a9ffe29a245ef8740fdb373317338a0b17e28cd5089c18a869dc930ec736953f475d9b66647eb0df800c66d4191f05bf5bf9eb2ca
SSDEEP

3072:+JntqUDDsdNqazI6F+cfPmG6VrLCKkDQSe/Pg:+ZH/sdcazI6F+KkLCve/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fea88b2d3e1a02e4ae9c61755ce71e99b7e1eddb4b5d415cac53d5230f1bebfN

Files

3fea88b2d3e1a02e4ae9c61755ce71e99b7e1eddb4b5d415cac53d5230f1bebfN
.dll windows:6 windows x64 arch:x64

3ec31131545d082b1d8563c015a0c737

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memcmp
memchr
memmove
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

fclose
__stdio_common_vsprintf
fread
__acrt_iob_func
__stdio_common_vfprintf
fopen

api-ms-win-crt-string-l1-1-0

isprint
strncat
strncmp
strncpy

api-ms-win-crt-math-l1-1-0

log
pow
ceil
log10

api-ms-win-crt-utility-l1-1-0

bsearch
qsort

api-ms-win-crt-time-l1-1-0

_time64
_localtime64

api-ms-win-crt-heap-l1-1-0

realloc
free
calloc

api-ms-win-crt-runtime-l1-1-0

_initterm
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_configure_narrow_argv
_execute_onexit_table

kernel32

DisableThreadLibraryCalls
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

Exports

Exports

__local_stdio_printf_options
exif_array_set_byte_order
exif_byte_order_get_name
exif_content_add_entry
exif_content_dump
exif_content_fix
exif_content_foreach_entry
exif_content_free
exif_content_get_entry
exif_content_get_ifd
exif_content_log
exif_content_new
exif_content_new_mem
exif_content_ref
exif_content_remove_entry
exif_content_unref
exif_convert_utf16_to_utf8
exif_data_dump
exif_data_fix
exif_data_foreach_content
exif_data_free
exif_data_get_byte_order
exif_data_get_data_type
exif_data_get_log
exif_data_get_mnote_data
exif_data_load_data
exif_data_log
exif_data_new
exif_data_new_from_data
exif_data_new_from_file
exif_data_new_mem
exif_data_option_get_description
exif_data_option_get_name
exif_data_ref
exif_data_save_data
exif_data_set_byte_order
exif_data_set_data_type
exif_data_set_option
exif_data_unref
exif_data_unset_option
exif_entry_dump
exif_entry_fix
exif_entry_free
exif_entry_get_value
exif_entry_initialize
exif_entry_new
exif_entry_new_mem
exif_entry_ref
exif_entry_unref
exif_format_get_name
exif_format_get_size
exif_get_long
exif_get_rational
exif_get_short
exif_get_slong
exif_get_srational
exif_get_sshort
exif_ifd_get_name
exif_loader_get_buf
exif_loader_get_data
exif_loader_log
exif_loader_new
exif_loader_new_mem
exif_loader_ref
exif_loader_reset
exif_loader_unref
exif_loader_write
exif_loader_write_file
exif_log
exif_log_code_get_message
exif_log_code_get_title
exif_log_free
exif_log_new
exif_log_new_mem
exif_log_ref
exif_log_set_func
exif_log_unref
exif_logv
exif_mem_alloc
exif_mem_free
exif_mem_new
exif_mem_new_default
exif_mem_realloc
exif_mem_ref
exif_mem_unref
exif_mnote_data_canon_identify
exif_mnote_data_canon_new
exif_mnote_data_construct
exif_mnote_data_count
exif_mnote_data_fuji_identify
exif_mnote_data_fuji_new
exif_mnote_data_get_description
exif_mnote_data_get_id
exif_mnote_data_get_name
exif_mnote_data_get_title
exif_mnote_data_get_value
exif_mnote_data_load
exif_mnote_data_log
exif_mnote_data_olympus_identify
exif_mnote_data_olympus_new
exif_mnote_data_pentax_identify
exif_mnote_data_pentax_new
exif_mnote_data_ref
exif_mnote_data_save
exif_mnote_data_set_byte_order
exif_mnote_data_set_offset
exif_mnote_data_unref
exif_set_long
exif_set_rational
exif_set_short
exif_set_slong
exif_set_srational
exif_set_sshort
exif_tag_from_name
exif_tag_get_description
exif_tag_get_description_in_ifd
exif_tag_get_name
exif_tag_get_name_in_ifd
exif_tag_get_support_level_in_ifd
exif_tag_get_title
exif_tag_get_title_in_ifd
exif_tag_table_count
exif_tag_table_get_name
exif_tag_table_get_tag
mnote_canon_entry_count_values
mnote_canon_entry_get_value
mnote_canon_tag_get_description
mnote_canon_tag_get_name
mnote_canon_tag_get_name_sub
mnote_canon_tag_get_title
mnote_canon_tag_get_title_sub
mnote_fuji_entry_get_value
mnote_fuji_tag_get_description
mnote_fuji_tag_get_name
mnote_fuji_tag_get_title
mnote_olympus_entry_get_value
mnote_olympus_tag_get_description
mnote_olympus_tag_get_name
mnote_olympus_tag_get_title
mnote_pentax_entry_get_value
mnote_pentax_tag_get_description
mnote_pentax_tag_get_name
mnote_pentax_tag_get_title
printf
snprintf
sprintf

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ec31131545d082b1d8563c015a0c737

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 66KB - Virtual size: 65KB

.rdata Size: 147KB - Virtual size: 147KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 66KB - Virtual size: 65KB

.rdata
Size: 147KB - Virtual size: 147KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB