47786f0771907ad75216bc6e7562cbc6b438271171f34f1c51cba74a211522e0

Sharing

Copy URL Twitter E-mail

General

Target

47786f0771907ad75216bc6e7562cbc6b438271171f34f1c51cba74a211522e0
Size

220KB
MD5

830f5a6c24c8d84332f5273839d3c2ca
SHA1

9ceda145963146764a606312d85991ec6a09a70e
SHA256

47786f0771907ad75216bc6e7562cbc6b438271171f34f1c51cba74a211522e0
SHA512

98582b78b8b7a588fc41fc2545a38427d9779ca9e6b1f355823d003784230fa8a7932437bb6dfff5b7100201f2a7d824c6100ca0442d3e55e0522076d5e2d34b
SSDEEP

3072:8uu1sS4tfN6WtBq0C8vYURu6T8PzddWoHH1IBJyzyUhsjj/ffreMX49uUBg2PvRC:IN4tQpUtnYrsjDfr2g2XfKvBeE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47786f0771907ad75216bc6e7562cbc6b438271171f34f1c51cba74a211522e0

Files

47786f0771907ad75216bc6e7562cbc6b438271171f34f1c51cba74a211522e0
.dll windows:6 windows x86 arch:x86

84430b31894b1fa22126801525922e0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\code\test\goopdate\Release\goopdate.pdb

Imports

kernel32

GetCurrentThread
SetThreadPriority
CreateEventW
WaitForSingleObject
CloseHandle
GetCurrentProcessId
OpenProcess
K32EnumProcessModules
K32GetModuleFileNameExW
GetProcAddress
GetModuleHandleW
VirtualFree
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memcpy
__std_type_info_destroy_list
memset
__std_exception_copy
__std_exception_destroy
_except_handler4_common
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

Exports

Exports

DllEntry

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84430b31894b1fa22126801525922e0b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 208KB - Virtual size: 209KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 620B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 208KB - Virtual size: 209KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 620B