67fcb80d61272be27183831b2cb0278a71e6fedda8ffff5a0423994b0de66ee3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67fcb80d61272be27183831b2cb0278a71e6fedda8ffff5a0423994b0de66ee3
Size

176KB
MD5

4ebd41e99d464dc82e7bffa28cf476e4
SHA1

9ffa7d64726f7aed79bfd37df03c57db5d134bc7
SHA256

67fcb80d61272be27183831b2cb0278a71e6fedda8ffff5a0423994b0de66ee3
SHA512

ab318804b186f773b49e5bfd0410440fa43650f201d14373aa3effdea3e1f17339835fea92689bd22d0e6e87e20560750f4b6c77fb8741cb57a98cf2e697811e
SSDEEP

3072:SqyLoG3DIO/95q+Wl8adOTQXICJhK5A3aDOhKBx7Wfp06Phjzd6cPk40m4Ofc/O8:SqyR551WtdLXfK56hKbi3hPfk40mtfct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67fcb80d61272be27183831b2cb0278a71e6fedda8ffff5a0423994b0de66ee3

Files

67fcb80d61272be27183831b2cb0278a71e6fedda8ffff5a0423994b0de66ee3
.dll windows:5 windows x86 arch:x86

998a7d075439b7beeab3c7dddc437b64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyname

ole32

CoTaskMemRealloc

wininet

InternetConnectA

urlmon

URLDownloadToFileA

user32

AdjustWindowRectEx

gdi32

GetStockObject

advapi32

SetSecurityDescriptorDacl

oleaut32

VarUI4FromStr

Exports

Exports

Always
ConfigAd
GetADpop
HKbolo
HashAd
PlayAb
PrioritPutAd
PutTestSpecial
SetAdOnbk
StandYourad
_2
adefee
heyllow
msnpop
qqadpop

Sections

.text
Size: 145KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE