21309c142941491badc55850c7eecdf675e1980158ff10108d256eb9b86a948b | Triage

Sharing

General

Target

21309c142941491badc55850c7eecdf675e1980158ff10108d256eb9b86a948b
Size

306KB
MD5

94f87e129f85e80283de9f2868aed6ad
SHA1

2a76d07fc90fc45901c758b36f8c88dc8dd61f7b
SHA256

21309c142941491badc55850c7eecdf675e1980158ff10108d256eb9b86a948b
SHA512

6fdc85f1bc507c04450aef2a1b1e5445ed9592e7e646139de23b7fc8eb57e879fb11d14b1a1771fcf761ed3cfb9cc3e311ce45f40103488ae4dd9ea18a1cfb7b
SSDEEP

6144:yBk4D4iGPO8qe4nDWgRAkP8gVGQn8xID0DMFovhVsiCaOaD:yB+6zR3P8AGLxe0DplC/aD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21309c142941491badc55850c7eecdf675e1980158ff10108d256eb9b86a948b

Files

21309c142941491badc55850c7eecdf675e1980158ff10108d256eb9b86a948b
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CastMovementRay
FindT
FindTo
FindZ
Findroute
GetRandomPoint
GetRandomPointAround
Initalize
LoadMmaps
MoveAlongSurface
_FindPath@16
_Init@20

Sections

.textbss
Size: - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 298KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 837B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 312B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ