07b3b0cefbce0553def7b85fd7f2db0bfb8acba92f04e30f01955e2eb4c9b31e

Sharing

Copy URL Twitter E-mail

General

Target

07b3b0cefbce0553def7b85fd7f2db0bfb8acba92f04e30f01955e2eb4c9b31e
Size

12.3MB
MD5

dd446e69454d44fdd18c42fa86d1be19
SHA1

0b94df5a91a9214aaf546f0e767ae39a760b417f
SHA256

07b3b0cefbce0553def7b85fd7f2db0bfb8acba92f04e30f01955e2eb4c9b31e
SHA512

0f875e93a4b19062250bc1d9f51a9e8d5f567941b9a3135a25de50bdd915fc00f942fad14d0d183a347006ecb5a9d367b7734e2f46119fc1ce3553bd8589358f
SSDEEP

393216:7Z9JsnOc5S8SKK8j1qDCQ/V/ov1+ZC1pkAF:7Z7KOVTKL1en8k2pr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07b3b0cefbce0553def7b85fd7f2db0bfb8acba92f04e30f01955e2eb4c9b31e

Files

07b3b0cefbce0553def7b85fd7f2db0bfb8acba92f04e30f01955e2eb4c9b31e
.dll windows:6 windows x64 arch:x64

08db8b979edba62fc271467e3c73f27e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

wsprintfA

advapi32

AdjustTokenPrivileges

iphlpapi

GetAdaptersInfo

ws2_32

sendto

Exports

Exports

WinUsb_AbortPipe
WinUsb_AbortPipeAsync
WinUsb_ControlTransfer
WinUsb_FlushPipe
WinUsb_Free
WinUsb_GetAdjustedFrameNumber
WinUsb_GetAssociatedInterface
WinUsb_GetCurrentAlternateSetting
WinUsb_GetCurrentFrameNumber
WinUsb_GetCurrentFrameNumberAndQpc
WinUsb_GetDescriptor
WinUsb_GetOverlappedResult
WinUsb_GetPipePolicy
WinUsb_GetPowerPolicy
WinUsb_Initialize
WinUsb_ParseConfigurationDescriptor
WinUsb_ParseDescriptors
WinUsb_QueryDeviceInformation
WinUsb_QueryInterfaceSettings
WinUsb_QueryPipe
WinUsb_QueryPipeEx
WinUsb_ReadIsochPipe
WinUsb_ReadIsochPipeAsap
WinUsb_ReadPipe
WinUsb_RegisterIsochBuffer
WinUsb_ResetPipe
WinUsb_ResetPipeAsync
WinUsb_SetCurrentAlternateSetting
WinUsb_SetCurrentAlternateSettingAsync
WinUsb_SetPipePolicy
WinUsb_SetPowerPolicy
WinUsb_StartTrackingForTimeSync
WinUsb_StopTrackingForTimeSync
WinUsb_UnregisterIsochBuffer
WinUsb_WriteIsochPipe
WinUsb_WriteIsochPipeAsap
WinUsb_WritePipe

Sections

.text
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hahan0
Size: - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hahan1
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hahan2
Size: 12.3MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08db8b979edba62fc271467e3c73f27e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

iphlpapi

ws2_32

Exports

Exports

Sections

.text Size: - Virtual size: 68KB

.rdata Size: - Virtual size: 42KB

.data Size: - Virtual size: 11KB

.pdata Size: - Virtual size: 4KB

_RDATA Size: - Virtual size: 500B

.hahan0 Size: - Virtual size: 7.4MB

.hahan1 Size: 3KB - Virtual size: 2KB

.hahan2 Size: 12.3MB - Virtual size: 12.3MB

.reloc Size: 512B - Virtual size: 280B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: - Virtual size: 68KB

.rdata
Size: - Virtual size: 42KB

.data
Size: - Virtual size: 11KB

.pdata
Size: - Virtual size: 4KB

_RDATA
Size: - Virtual size: 500B

.hahan0
Size: - Virtual size: 7.4MB

.hahan1
Size: 3KB - Virtual size: 2KB

.hahan2
Size: 12.3MB - Virtual size: 12.3MB

.reloc
Size: 512B - Virtual size: 280B

.rsrc
Size: 2KB - Virtual size: 1KB