d297ff3d3e668ee6bb7e505500dc59efad15a2b01240259a4352c84b6504b67b

Sharing

Copy URL Twitter E-mail

General

Target

d297ff3d3e668ee6bb7e505500dc59efad15a2b01240259a4352c84b6504b67b
Size

160KB
MD5

827ec09fe4d563e23532919033b49d0c
SHA1

3cffbe6af6cbe1856d78c1e8afae0a26b15c158b
SHA256

d297ff3d3e668ee6bb7e505500dc59efad15a2b01240259a4352c84b6504b67b
SHA512

7394ec63cdb2087300aa8ce5fd0f9e978e82c33658143bed8af2dfb1ed2fafee12577a29657deba4d5dfcff2938af52b04c4d2420727732a92b4a98129412c94
SSDEEP

3072:pf8mMRtCN9WxoGO+ByKa1zKe5qlI3Ogt9mqQUdcsK:ppsdOCyKa1zCcm6csK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d297ff3d3e668ee6bb7e505500dc59efad15a2b01240259a4352c84b6504b67b

Files

d297ff3d3e668ee6bb7e505500dc59efad15a2b01240259a4352c84b6504b67b
.dll windows:4 windows x86 arch:x86

7f8161f38dd72ef4f113e69000041709

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
CreateThread
SetThreadIdealProcessor
GetCurrentProcess
SetProcessWorkingSetSize
lstrcpyn
GetSystemInfo
CreateWaitableTimerA
SetWaitableTimer
RtlMoveMemory
WaitForSingleObject
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
CloseHandle
FlushFileBuffers
GetCommandLineA
GetVersion
RtlUnwind
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
RaiseException
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
LCMapStringW
SetStdHandle

ole32

CoCreateGuid

user32

PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
MsgWaitForMultipleObjects

Exports

Exports

Echs_Krnln_Call
Echs_Krnln_CloseHandle
Echs_Krnln_CreateThread
Echs_Krnln_GetCRC32
Echs_Krnln_GetGuid
Echs_Krnln_LocalFree
Echs_Krnln_NumberOfCPU
Echs_Krnln_UrlDecode
Echs_Krnln_UrlEncode
Echs_TPool_Close
Echs_TPool_GetHandle
Echs_TPool_GetTSocketTask
Echs_TPool_SetHandle
Echs_TPool_Start
Echs_TPool_SubTSocketTask
Echs_TPool_SubTask
Echs_TPool_Wait
Echs_TcpClient_BindPtr
Echs_TcpClient_Bytes2Ptr
Echs_TcpClient_Destory
Echs_TcpClient_FreePtr
Echs_TcpClient_GetConnectionID
Echs_TcpClient_GetExtra
Echs_TcpClient_GetHeader
Echs_TcpClient_GetMbID
Echs_TcpClient_GetPackHeaderFlag
Echs_TcpClient_GetTcpspClient
Echs_TcpClient_Getbc
Echs_TcpClient_Getid
Echs_TcpClient_Getlc
Echs_TcpClient_Getlx
Echs_TcpClient_Getsj
Echs_TcpClient_Getwb
Echs_TcpClient_Getzs
Echs_TcpClient_IsRun
Echs_TcpClient_Ptr2Bytes
Echs_TcpClient_ReConnection
Echs_TcpClient_ReadInt
Echs_TcpClient_ReadPtr
Echs_TcpClient_Send
Echs_TcpClient_SendResponse
Echs_TcpClient_SetExtra
Echs_TcpClient_SetPackHeaderFlag
Echs_TcpClient_SetTcpspClient
Echs_TcpClient_Start
Echs_TcpClient_Stop
Echs_TcpClient_SynGetPtr
Echs_TcpClient_SynMonitor
Echs_TcpClient_SynRec
Echs_TcpClient_SynSetPool
Echs_TcpClient_WritePtr

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f8161f38dd72ef4f113e69000041709

Headers

File Characteristics

Imports

kernel32

ole32

user32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 24KB - Virtual size: 74KB

.rsrc Size: 4KB - Virtual size: 712B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 24KB - Virtual size: 74KB

.rsrc
Size: 4KB - Virtual size: 712B

.reloc
Size: 8KB - Virtual size: 6KB