8ae6f75e3d7bb261e36df64a2a89785799775f11f8724cc1e59ca8e5fd15d534N

Sharing

Copy URL Twitter E-mail

General

Target

8ae6f75e3d7bb261e36df64a2a89785799775f11f8724cc1e59ca8e5fd15d534N
Size

70KB
MD5

18c846ad97721e510fbbf0bfa04ac160
SHA1

42c38be6c4c0903f072e3ca0d495de222f325207
SHA256

8ae6f75e3d7bb261e36df64a2a89785799775f11f8724cc1e59ca8e5fd15d534
SHA512

25efe26a04bb203a577f0d0603f0a29cea1717640232f204ca0329a2873d25b0161d15afd35d2d4d436e0893cadf63400f3c2b8c3ffdb8b1cbf943d7aa330cee
SSDEEP

768:hRTvYWJRNBjjNsxDCH584vme9S8s8H9ipKMCgg/FsA7T6PovOxb0fTQtwcJk:AWDXS90a4vXSBEipKMbgSAJ2xbETI9k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ae6f75e3d7bb261e36df64a2a89785799775f11f8724cc1e59ca8e5fd15d534N

Files

8ae6f75e3d7bb261e36df64a2a89785799775f11f8724cc1e59ca8e5fd15d534N
.dll windows:6 windows x86 arch:x86

23192e73e84c9c91c4a04a22c51a6f5e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\MONSTER\Documents\Visual Studio 2015\Projects\DreamSoft\Release\DreamSoft.pdb

Imports

kernel32

HeapFree
InitializeCriticalSectionEx
GetLastError
CloseHandle
DeleteCriticalSection
GetProcessHeap
IsDebuggerPresent
WideCharToMultiByte
LocalFree
FormatMessageW
CreateEventA
SetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
OpenEventA
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
ResetEvent
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetProcAddress
GetModuleHandleW
LeaveCriticalSection
OutputDebugStringW
EnterCriticalSection

msvcp140

_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__std_terminate
memcpy
__CxxFrameHandler3
memset
memmove
__std_exception_destroy
_purecall
__std_exception_copy

api-ms-win-crt-runtime-l1-1-0

strerror
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

_except1

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23192e73e84c9c91c4a04a22c51a6f5e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 6KB - Virtual size: 228KB

.gfids Size: 512B - Virtual size: 88B

.detourc Size: 4KB - Virtual size: 4KB

.detourd Size: 512B - Virtual size: 12B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 6KB - Virtual size: 228KB

.gfids
Size: 512B - Virtual size: 88B

.detourc
Size: 4KB - Virtual size: 4KB

.detourd
Size: 512B - Virtual size: 12B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB