7ea96b55afc37ad710b6225d5d7dbbef5c8798476256e1f1d827ef633d1c3c62N

Sharing

Copy URL Twitter E-mail

General

Target

7ea96b55afc37ad710b6225d5d7dbbef5c8798476256e1f1d827ef633d1c3c62N
Size

216KB
MD5

cc0aa6bc5267f20c91f21206a9703a70
SHA1

4e1d78b3c633fe54981402cacb1424f4c55b1a32
SHA256

7ea96b55afc37ad710b6225d5d7dbbef5c8798476256e1f1d827ef633d1c3c62
SHA512

4cca6db8ed05ab1b4c81bfc285d440025191e7a6819035a2bb6d13728ec1f5c273f9eeb3729ca41eb2fce8c14588909840351266793c5a1cecec562deba239b4
SSDEEP

6144:/PagverbnXGdEl6a55DNpKCkI1IogDd/lwBV+UdvrEFp7hKj:4vXnl2J/lwBjvrEH7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ea96b55afc37ad710b6225d5d7dbbef5c8798476256e1f1d827ef633d1c3c62N

Files

7ea96b55afc37ad710b6225d5d7dbbef5c8798476256e1f1d827ef633d1c3c62N
.dll windows:4 windows x86 arch:x86

a944c7dc8c7f77f24d61aba7e3a50eac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiClassGuidsFromNameA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA

mfc42

ord1182
ord4204
ord801
ord541
ord1200
ord4277
ord5608
ord4278
ord5683
ord5861
ord342
ord2763
ord6877
ord6874
ord4129
ord2915
ord5572
ord940
ord5710
ord926
ord941
ord6143
ord5440
ord6383
ord5450
ord6394
ord1105
ord1253
ord1168
ord354
ord350
ord860
ord5186
ord6385
ord1979
ord665
ord3663
ord3616
ord3127
ord5651
ord6662
ord6648
ord2764
ord823
ord858
ord2614
ord924
ord939
ord922
ord6883
ord2818
ord540
ord800
ord535
ord537
ord825
ord6663

msvcrt

_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
time
srand
rand
malloc
free
_CxxThrowException
memmove
strtol
_itoa
strstr
strncmp
sscanf
atoi
_mbscmp
strncpy
_mbsicmp
sprintf
_memicmp
__CxxFrameHandler
_strnicmp

kernel32

FlushFileBuffers
Sleep
OutputDebugStringA
RaiseException
CloseHandle
CreateFileA
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
TerminateThread
GetExitCodeThread
WaitForSingleObject
SetEvent
SetCommMask
PurgeComm
InitializeCriticalSection
CreateMutexA
CreateEventA
SetupComm
SetCommTimeouts
GetCommTimeouts
ClearCommError
GetOverlappedResult
ReadFile
WaitCommEvent
WriteFile
ResumeThread
SuspendThread
GetTickCount
SetCommState
GetCommState
GetVersionExA

user32

wsprintfA

advapi32

RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_A123
_DetchCommonDLL

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a944c7dc8c7f77f24d61aba7e3a50eac

Headers

File Characteristics

Imports

setupapi

mfc42

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 43KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 43KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 8KB - Virtual size: 6KB