3b886c329965328ee2465f1be75ff33732487f2d73cb6ca63a3dea0cdde42d2cN

Sharing

Copy URL Twitter E-mail

General

Target

3b886c329965328ee2465f1be75ff33732487f2d73cb6ca63a3dea0cdde42d2cN
Size

8KB
MD5

047f31a16692f1e553b2ea6ee6218fe0
SHA1

75a1572d77457e12303390a6949646486b382702
SHA256

3b886c329965328ee2465f1be75ff33732487f2d73cb6ca63a3dea0cdde42d2c
SHA512

8871c216b1e9466435d44dd86c11f531ff3be89d7ac3019ff79eba80b2b81f8f77a8aa71f545bbc04b58c93754e03caa176448ce6309984745cfd7e51b933656
SSDEEP

96:o7px8d0AWlOKBcyNVeUI9S7QvnEW1hWwG83+CTu3bkxzYz58o4adA5:6pdkKBcyhW1hW6XT+kx8t8o4uE

Score

1^/10

Malware Config

Signatures

Files

3b886c329965328ee2465f1be75ff33732487f2d73cb6ca63a3dea0cdde42d2cN
.dll windows:10 windows x64 arch:x64

Code Sign

2b:2b:9e:7e:73:72:f7:bc:4f:fd:21:d4:38:a0:23:2a
Certificate

Issuer

CN=Betterbird Project

Not Before

25/07/2024, 21:39

Not After

25/07/2027, 21:49

Subject

CN=Betterbird Project

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1f:59:97:64:ce:d1:33:b5:fd:25:93:4a:85:0a:ab:9f:78:2e:f6:9d
Signer

Actual PE Digest

1f:59:97:64:ce:d1:33:b5:fd:25:93:4a:85:0a:ab:9f:78:2e:f6:9d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-crt-convert-l1-1-0.pdb

Exports

Exports

__toascii
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_ecvt
_ecvt_s
_fcvt
_fcvt_s
_gcvt
_gcvt_s
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_itoa
_itoa_s
_itow
_itow_s
_ltoa
_ltoa_s
_ltow
_ltow_s
_strtod_l
_strtof_l
_strtoi64
_strtoi64_l
_strtoimax_l
_strtol_l
_strtold_l
_strtoll_l
_strtoui64
_strtoui64_l
_strtoul_l
_strtoull_l
_strtoumax_l
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_wcstod_l
_wcstof_l
_wcstoi64
_wcstoi64_l
_wcstoimax_l
_wcstol_l
_wcstold_l
_wcstoll_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcstoull_l
_wcstoumax_l
_wctomb_l
_wctomb_s_l
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wtoll
_wtoll_l
atof
atoi
atol
atoll
btowc
c16rtomb
c32rtomb
mbrtoc16
mbrtoc32
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
strtod
strtof
strtoimax
strtol
strtold
strtoll
strtoul
strtoull
strtoumax
wcrtomb
wcrtomb_s
wcsrtombs
wcsrtombs_s
wcstod
wcstof
wcstoimax
wcstol
wcstold
wcstoll
wcstombs
wcstombs_s
wcstoul
wcstoull
wcstoumax
wctob
wctomb
wctomb_s
wctrans

Sections

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

2b:2b:9e:7e:73:72:f7:bc:4f:fd:21:d4:38:a0:23:2aCertificate

Extended Key Usages

Key Usages

1f:59:97:64:ce:d1:33:b5:fd:25:93:4a:85:0a:ab:9f:78:2e:f6:9dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.rdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 1008B

2b:2b:9e:7e:73:72:f7:bc:4f:fd:21:d4:38:a0:23:2a
Certificate

1f:59:97:64:ce:d1:33:b5:fd:25:93:4a:85:0a:ab:9f:78:2e:f6:9d
Signer

.rdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 1008B