86dfec864ca15a42a0fd22b3ff92c8ac3192395951d498f4b3ed1d30a59a4c00N

Sharing

Copy URL

Twitter E-mail

General

Target

86dfec864ca15a42a0fd22b3ff92c8ac3192395951d498f4b3ed1d30a59a4c00N
Size

435KB
MD5

250c4ad276228a8f46b23f25824c0210
SHA1

0e940d39bf7ed2a09d1c1175e01e8f6523b37e05
SHA256

86dfec864ca15a42a0fd22b3ff92c8ac3192395951d498f4b3ed1d30a59a4c00
SHA512

4a0eeb8062466836b29579426550849536bc657807dd5ba54bdc4d256f960e888fbaf870dc9562063acb617209be9422117637de9cc435b65ac005eab10589a6
SSDEEP

6144:yowwI8T7+cvgJ1satNyCSEhPHp8sdWluKpqodvD8CgJRWHCDVB8kscia:TI8T7zvcseNvS0imWTdvDZ+RWiDVB87

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86dfec864ca15a42a0fd22b3ff92c8ac3192395951d498f4b3ed1d30a59a4c00N

Files

86dfec864ca15a42a0fd22b3ff92c8ac3192395951d498f4b3ed1d30a59a4c00N
.dll windows:4 windows x86 arch:x86

7904d1abace88d91db80e7d470d59881

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

dinput

DirectInputCreateA

kernel32

LoadLibraryA
MapUserPhysicalPages
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
ReleaseMutex
RtlUnwind
SetThreadContext
SystemTimeToTzSpecificLocalTime
TerminateProcess
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualAlloc
WideCharToMultiByte
WriteTapemark
LeaveCriticalSection
IsProcessorFeaturePresent
InterlockedIncrement
InterlockedExchange
InterlockedCompareExchange
CreateMutexA
CreateThread
DisableThreadLibraryCalls
EnterCriticalSection
GetVersion
ExitProcess
FindResourceA
FreeLibrary
GetCommProperties
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameW
GetLastError
GetMailslotInfo
GetModuleHandleA
GetProcessAffinityMask
CreateFileA
GetProcessPriorityBoost
GetSystemTimeAsFileTime
GetTickCount

advapi32

RegEnumKeyExA
RegQueryValueExA
SystemFunction041
RegCloseKey

msvcrt

_unlock
_vsnprintf
floor
free
iswalpha
iswprint
iswpunct
iswspace
malloc
memcpy
memmove
puts
qsort
tolower
_stricmp
_outp
_j0
_initterm
_finite
_execve
_controlfp
_atoi64
_amsg_exit
__threadhandle
__p__winver
__dllonexit
_XcptFilter
_Strftime
_CxxThrowException
_CIsqrt
_CIcos
_CIatan
_CIasin
_CIacos
_isnan
_CIsin

gdi32

SelectObject
GetViewportOrgEx
GetTextMetricsW
GetTextMetricsA
GetObjectA
GetMetaFileBitsEx
GetGlyphOutlineA
SetBkColor
ExtTextOutA
DeleteObject
DeleteDC
CreateFontIndirectW
CreateFontIndirectA
CreateDIBSection
CreateCompatibleDC
CloseFigure
SetBkMode
SetMapMode
SetMapperFlags
SetTextAlign
GetFontLanguageInfo

ole32

CreateStreamOnHGlobal

Exports

Exports

GetDesc
SetEncodingAndErrors
SimpleFileEx
Unicode

Sections

.text
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7904d1abace88d91db80e7d470d59881

Headers

File Characteristics

Imports

dinput

kernel32

advapi32

msvcrt

gdi32

ole32

Exports

Exports

Sections

.text Size: 83KB - Virtual size: 82KB

.rdata Size: 254KB - Virtual size: 254KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 83KB - Virtual size: 82KB

.rdata
Size: 254KB - Virtual size: 254KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 5KB - Virtual size: 4KB