abaf91ea67719bbe9a21b0ac9c1a778bafff5f5a1f12236564902066786e8515N

Sharing

Copy URL

Twitter E-mail

General

Target

abaf91ea67719bbe9a21b0ac9c1a778bafff5f5a1f12236564902066786e8515N
Size

239KB
MD5

86dcd54ea64f80c1a0b50ad33c3b13d0
SHA1

7eba76c943ae7825e13ac263e8c575e98eb50d12
SHA256

abaf91ea67719bbe9a21b0ac9c1a778bafff5f5a1f12236564902066786e8515
SHA512

096c43b9b16f8763f427bcf07601627d1de94c9e6392e7f97ab6b6984161d8893ecbcdfc65245cb23be8709461be372e1fc58ff18a2a2e7aba883a0c2b2919e6
SSDEEP

3072:wbsIn2EuXbIWy9GsVpJsGcynVbzvoa47bBToJyQp1XvkrOgp1Iup7:AsIlbWy9GAp9cWXvXMo8QzXIp7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abaf91ea67719bbe9a21b0ac9c1a778bafff5f5a1f12236564902066786e8515N

Files

abaf91ea67719bbe9a21b0ac9c1a778bafff5f5a1f12236564902066786e8515N
.dll windows:6 windows x86 arch:x86

2c6bf047d476b1cdd85e6fc8257f78d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\a\giuroll-hagb\giuroll-hagb\injector\target\i686-pc-windows-msvc\release\deps\giuroll_loader_dll.pdb

Imports

kernel32

LoadLibraryW
GetProcAddress
GetLastError
GetModuleFileNameW
CloseHandle
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
FreeEnvironmentStringsW
ReleaseMutex
FindClose
ReleaseSRWLockShared
SetThreadStackGuarantee
TlsSetValue
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetCommandLineW
FlushFileBuffers
SetFilePointerEx
GetStdHandle
GetCurrentProcessId
TerminateProcess
QueryPerformanceCounter
TlsGetValue
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
HeapReAlloc
AcquireSRWLockShared
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
FindNextFileW
CreateFileW
GetFileInformationByHandle
DeviceIoControl
GetModuleHandleW
FormatMessageW
ExitProcess
GetFullPathNameW
CreateThread
GetModuleHandleA
GetConsoleMode
WriteConsoleW
GetConsoleOutputCP
WriteFile
SetStdHandle
HeapSize
GetStringTypeW
GetFileType
LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
TlsFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwind
RaiseException
InterlockedFlushSList
EncodePointer
DecodePointer

user32

MessageBoxA

Exports

Exports

CheckVersion
DllMain
Initialize
getPriority
rust_eh_personality

Sections

.text
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c6bf047d476b1cdd85e6fc8257f78d1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 179KB - Virtual size: 178KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 2KB - Virtual size: 5KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 179KB - Virtual size: 178KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 2KB - Virtual size: 5KB

.reloc
Size: 9KB - Virtual size: 9KB